This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer File: Y4g6eXidn2WBUpLxjUmAupxe0iE.cer (raw, json) Hash identifier: 2jW8cq06hjlddkQiUpuQndmu6+aoFVUPUaLS5PmQOtc= Subject key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DEE04C0028E479B1CE0517FA4B576 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49915 IP: 185.162.252.0/22 IP: 2a0a:1800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ee:04:c0:02:8e:47:9b:1c:e0:51:7f:a4:b5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63883a79789d9f65815292f18d4980ba9c5ed221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:80:8a:d8:99:90:31:dc:08:f4:aa:04:df:bc: f9:0e:8c:82:21:8f:94:32:2c:7a:c4:79:8c:ac:63: 7f:6c:9d:a9:ce:88:b5:2f:02:f5:84:b5:c4:d9:d3: af:f6:46:e2:79:8c:5f:f2:94:1f:0e:ea:4f:33:60: 05:d1:b1:bc:80:40:44:fd:d8:67:ce:a7:4e:d3:87: 99:c7:29:77:23:1b:43:a8:12:1f:1c:69:3f:82:11: 96:b9:29:ca:bf:c8:d0:c7:a0:4f:6a:3e:60:b9:4d: 5a:e3:ed:f5:ec:6c:77:a3:8c:30:6c:e6:da:07:79: f4:8f:8f:29:a1:d5:3b:a0:b7:13:ca:7d:3e:da:7c: eb:a7:73:4d:16:dd:8a:77:15:af:42:83:73:c9:7d: d6:59:85:88:bb:c7:cf:70:4e:97:1e:de:2c:e2:40: f2:64:e6:19:1c:7a:d3:3b:a9:0f:cd:48:4c:b0:02: 8f:61:e9:5a:41:23:f8:40:70:66:e4:6e:46:c9:bb: b7:c7:64:1c:47:6e:f8:9e:16:e6:c5:8a:0e:2e:71: ea:1f:a8:45:e0:c1:20:e7:85:bb:cb:46:8e:ed:0b: 6f:2c:4a:6a:38:36:3a:7e:50:e8:c3:64:4c:e0:be: ab:f4:10:e5:60:9d:bd:e2:6e:35:de:ca:ba:1f:ef: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.252.0/22 IPv6: 2a0a:1800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49915 Signature Algorithm: sha256WithRSAEncryption 82:91:3c:d9:c5:28:01:b2:09:89:2a:89:d6:bc:87:d4:c0:65: 16:1a:79:06:9a:e7:2d:62:de:2e:ec:61:9b:c3:f6:9b:12:1b: 8f:c8:8c:eb:1e:29:2b:7d:7c:52:af:fa:6e:25:be:02:a4:05: fe:e2:b8:91:f5:3f:ba:47:88:b0:ab:9f:61:a5:25:b6:bc:dc: 0b:33:ea:b9:ac:32:14:20:30:b0:07:bd:23:f6:9b:4c:33:94: b0:b2:69:78:9e:0b:77:35:33:6b:57:db:3c:44:d8:e3:06:97: 33:b2:16:11:61:b1:f9:08:f5:ee:2f:a1:62:06:ae:21:e2:c0: 56:ab:de:2d:fa:c3:87:3d:b6:e4:ee:05:c2:80:58:31:68:6e: d7:91:2a:28:da:aa:2a:09:18:d7:8d:a9:e5:21:35:31:a6:9e: 45:af:89:30:65:c2:55:73:85:13:8d:18:4f:4e:41:17:8b:a9: 75:0b:3d:f1:ec:79:24:9c:9c:f8:8a:06:31:7d:57:99:0f:58: 6f:71:80:46:83:a8:15:77:d1:4f:cc:18:e1:96:b0:26:b2:80: 7c:10:9e:f0:6d:e8:eb:f6:6d:bf:52:b9:06:f9:c3:e9:66:78: 26:93:8d:5f:7e:19:50:2c:0c:d8:12:3d:78:4f:39:1a:0e:82: 55:d3:e9:dc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fe4EwAKOR5sc4FF/pLV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzg4M2E3OTc4OWQ5ZjY1ODE1MjkyZjE4ZDQ5ODBiYTljNWVkMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioCK2JmQMdwI9KoE37z5DoyCIY+U Mix6xHmMrGN/bJ2pzoi1LwL1hLXE2dOv9kbieYxf8pQfDupPM2AF0bG8gEBE/dhn zqdO04eZxyl3IxtDqBIfHGk/ghGWuSnKv8jQx6BPaj5guU1a4+317Gx3o4wwbOba B3n0j48podU7oLcTyn0+2nzrp3NNFt2KdxWvQoNzyX3WWYWIu8fPcE6XHt4s4kDy ZOYZHHrTO6kPzUhMsAKPYelaQSP4QHBm5G5Gybu3x2QcR274nhbmxYoOLnHqH6hF 4MEg54W7y0aO7QtvLEpqODY6flDow2RM4L6r9BDlYJ294m413sq6H+8a1wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2NhMDIy OC01N2VlLTRmNjUtOTYyZi0zNWQwNTk1ZTEyZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvY2EwMjI4 LTU3ZWUtNGY2NS05NjJmLTM1ZDA1OTVlMTJmMC8xL1k0ZzZlWGlkbjJXQlVwTHhq VW1BdXB4ZTBpRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaL8MA0EAgACMAcDBQAqChgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDC+zANBgkqhkiG9w0BAQsFAAOCAQEAgpE82cUoAbIJ iSqJ1ryH1MBlFhp5BprnLWLeLuxhm8P2mxIbj8iM6x4pK318Uq/6biW+AqQF/uK4 kfU/ukeIsKufYaUltrzcCzPquawyFCAwsAe9I/abTDOUsLJpeJ4LdzUza1fbPETY 4waXM7IWEWGx+Qj17i+hYgauIeLAVqveLfrDhz225O4FwoBYMWhu15EqKNqqKgkY 142p5SE1MaaeRa+JMGXCVXOFE40YT05BF4updQs98ex5JJyc+IoGMX1XmQ9Yb3GA RoOoFXfRT8wY4ZawJrKAfBCe8G3o6/Ztv1K5BvnD6WZ4JpONX34ZUCwM2BI9eE85 Gg6CVdPp3A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:05 2026 by rpki-client