This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer File: Y0laTOy-r7Pq327QNJuwuW2kZO4.cer (raw, json) Hash identifier: ijzOrH9FhkmzMyJsEuOlGZhzvI8xSx7sgjPAH1nEoVE= Subject key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3865ECA7A5AE48C62EC28F68739A95 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.16.224.0 -- 178.16.228.255 IP: 178.16.237.0 -- 178.16.239.255 IP: 185.215.36.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:65:ec:a7:a5:ae:48:c6:2e:c2:8f:68:73:9a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a9:81:75:88:aa:09:45:99:4c:7b:ba:36:a0: 32:e0:5f:81:a0:04:68:24:12:b0:82:31:ea:4d:d0: 1a:b6:e0:2b:56:f8:5a:1d:36:9f:79:88:07:86:a7: ca:e4:48:06:c1:2d:c7:25:a3:6d:cb:8b:7e:92:e0: 37:af:b4:da:ca:a9:64:13:d9:79:b4:78:65:ab:55: 3f:75:94:e0:e2:91:16:3c:c5:e5:77:a4:ed:8b:4b: 3d:f8:b9:2f:90:6a:7a:53:62:c3:85:cf:15:a9:62: eb:0a:1b:17:28:dc:5d:0d:09:88:cb:b9:07:72:8e: 76:d3:91:c6:ae:26:a2:e8:5d:af:ec:a5:e8:6a:38: be:2d:3f:c9:86:29:35:04:d7:ff:a5:f2:73:5c:8e: 08:7b:3c:83:e2:bb:e3:cf:e0:6d:98:9b:4e:33:44: 78:5c:38:c6:74:4e:f7:f6:1a:4a:8b:be:ab:7c:66: b2:78:d5:23:e6:14:e3:59:cd:d4:d9:8d:be:2c:42: f8:52:22:ab:82:ea:b8:99:73:3b:8d:e2:d5:3b:23: 30:26:21:9e:7e:47:e5:3b:63:00:ce:39:41:78:ed: 14:1a:eb:85:39:cb:3e:ff:aa:c5:c1:77:34:19:23: 75:e2:1e:0d:11:b2:48:e1:49:61:95:23:3d:97:60: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.16.224.0-178.16.228.255 178.16.237.0-178.16.239.255 185.215.36.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:12:99:11:1c:30:02:f3:7a:9d:42:72:65:5d:aa:62:8c:4e: 4e:c8:ef:3b:4a:eb:b2:40:68:7b:d0:f1:05:8d:b8:b0:51:01: a7:ea:4c:f2:d7:6c:18:90:1b:1f:f9:b0:4a:11:60:34:6d:6a: 43:50:9b:3b:e8:8c:75:ae:e2:23:1f:df:64:dc:24:dd:6b:57: 80:03:d7:48:01:e4:bf:da:ab:a2:52:7c:b0:a8:9e:04:3d:c4: 1e:67:be:46:9e:44:59:61:0b:a0:0f:5a:7e:d4:28:88:57:e2: c6:4e:89:7c:75:0f:2f:7c:fb:cb:1f:bb:77:8e:8f:aa:2e:57: 16:2d:fb:47:69:17:83:5c:62:33:95:26:87:51:f1:22:56:64: 5a:da:1d:76:e7:3a:c5:52:85:9a:31:7c:61:a6:4b:37:54:29: 2b:d6:53:90:12:f0:d1:ca:c2:82:ca:58:31:66:57:af:0a:17: 57:99:4b:be:88:94:c5:63:b8:f8:8f:5b:db:57:2a:fc:c7:38: ad:53:ac:f9:ac:5b:b0:fd:d9:b2:d7:f8:0c:db:8e:6a:ca:8b: 74:b6:33:ba:fe:d3:f1:6f:6e:2b:b5:9a:d6:4c:95:74:11:f7: 8b:4f:29:13:9c:32:61:a8:15:75:40:74:fa:2e:ec:d0:36:79: 29:76:fe:27 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OGXsp6WuSMYuwo9oc5qVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzQ5NWE0Y2VjYmVhZmIzZWFkZjZlZDAzNDliYjBiOTZkYTQ2NGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qmBdYiqCUWZTHu6NqAy4F+BoARo JBKwgjHqTdAatuArVvhaHTafeYgHhqfK5EgGwS3HJaNty4t+kuA3r7TayqlkE9l5 tHhlq1U/dZTg4pEWPMXld6Tti0s9+LkvkGp6U2LDhc8VqWLrChsXKNxdDQmIy7kH co5205HGriai6F2v7KXoaji+LT/Jhik1BNf/pfJzXI4IezyD4rvjz+BtmJtOM0R4 XDjGdE739hpKi76rfGayeNUj5hTjWc3U2Y2+LEL4UiKrguq4mXM7jeLVOyMwJiGe fkflO2MAzjlBeO0UGuuFOcs+/6rFwXc0GSN14h4NEbJI4UlhlSM9l2BkdwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGNJWkzsvq+z6t9u0DSbsLltpGTuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzFmZGUx OC0yODczLTRmZTAtODY5Yy0zODIwZjdlZTJjYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMWZkZTE4 LTI4NzMtNGZlMC04NjljLTM4MjBmN2VlMmNiOC8xL1kwbGFUT3ktcjdQcTMyN1FO SnV3dVcya1pPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjAoBAIAATAiMAwDBAWyEOADBACyEOQwDAMEALIQ7QMEBLIQ4AME ArnXJDANBgkqhkiG9w0BAQsFAAOCAQEAjRKZERwwAvN6nUJyZV2qYoxOTsjvO0rr skBoe9DxBY24sFEBp+pM8tdsGJAbH/mwShFgNG1qQ1CbO+iMda7iIx/fZNwk3WtX gAPXSAHkv9qrolJ8sKieBD3EHme+Rp5EWWELoA9aftQoiFfixk6JfHUPL3z7yx+7 d46Pqi5XFi37R2kXg1xiM5Umh1HxIlZkWtodduc6xVKFmjF8YaZLN1QpK9ZTkBLw 0crCgspYMWZXrwoXV5lLvoiUxWO4+I9b21cq/Mc4rVOs+axbsP3Zstf4DNuOasqL dLYzuv7T8W9uK7Wa1kyVdBH3i08pE5wyYagVdUB0+i7s0DZ5KXb+Jw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:44 2026 by rpki-client