This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer File: YAV5AhKH6mSV1_k0pt7TDuKluzg.cer (raw, json) Hash identifier: vMsZVpAxxFet0IOgEhaPEHxHacJonMqzOynZ2I4j3c4= Subject key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1A64B07B9B2F2D20CE7FE00C23DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198136 AS: 212068 IP: 185.0.32.0/24 IP: 2001:7f8:14b::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:64:b0:7b:9b:2f:2d:20:ce:7f:e0:0c:23:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:26:1b:c5:0e:9a:47:ab:4a:28:4c:8c:e9: 82:90:26:77:91:16:b2:c2:9d:ff:ea:a0:8e:90:1a: 25:a9:74:49:86:fd:25:80:6b:cf:2d:56:0f:e9:4a: 34:64:53:77:01:b9:0c:fe:aa:ea:6e:ad:6b:b0:78: b2:f1:33:cb:bc:4f:49:1f:bf:f2:72:26:92:a2:29: a8:37:90:d9:7f:d9:d6:0e:77:97:c0:27:b7:1b:35: 49:68:29:37:e0:72:5b:90:6a:ea:74:ef:6c:48:44: ee:21:54:75:30:a7:4a:7f:21:3b:34:65:78:d5:47: 84:9e:b3:d9:54:7f:57:75:09:2b:d9:4b:3b:a5:8f: 11:55:b5:b6:cb:47:0e:e7:7d:26:d5:5a:24:dc:a8: e0:93:99:e8:31:a7:02:3a:ba:41:29:cc:a9:16:97: bd:02:0b:99:dc:b3:4a:d2:9e:3e:a1:5a:20:bb:29: af:89:d4:df:b6:a5:49:ca:10:15:98:39:25:bc:9a: c9:ab:8d:db:70:97:ef:1b:ce:76:88:24:af:11:b9: 44:85:67:1e:b9:e2:37:d2:c2:40:85:55:24:34:2e: 79:28:66:11:53:cb:35:4f:e5:90:0a:2d:ed:4f:88: 30:10:26:6b:4d:38:6b:6a:39:cb:9b:a0:b3:6a:42: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.0.32.0/24 IPv6: 2001:7f8:14b::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198136 212068 Signature Algorithm: sha256WithRSAEncryption 45:22:65:fc:ce:47:00:86:f3:d0:55:20:b4:7a:59:fe:65:45: c7:93:c3:7e:53:e6:3f:fb:a3:6d:e6:f2:a3:be:0a:a8:2a:05: 60:17:2a:a8:01:fd:43:2c:c6:fe:01:10:d3:35:7f:4f:30:74: 9f:f7:5a:14:1f:96:9b:8c:e2:89:1e:25:43:05:34:0f:28:ae: 47:d9:ed:9b:ef:b9:26:bc:49:c7:23:74:72:dd:37:e1:12:aa: 12:ac:cf:19:eb:e6:6e:e2:d6:01:e8:8e:b5:7d:91:9e:d7:ec: b4:ac:70:f2:90:2d:ca:ab:e9:62:51:cf:b0:91:b9:b1:04:ae: 4e:ba:c0:81:87:77:83:a4:76:a0:7c:99:2a:2b:04:98:e7:4a: c2:36:ae:9e:bd:99:c2:20:3b:ce:b9:37:f2:21:31:97:f2:ac: 3e:4f:8f:94:9a:6e:4a:d8:6d:09:87:4f:26:fe:5a:8e:6b:14: 09:17:64:92:72:16:81:aa:4a:3e:3e:17:2b:f7:5d:99:24:05: e1:ce:25:a3:a5:a1:83:93:2a:82:bd:2d:48:ee:e4:f6:bb:41: 08:83:ea:33:11:4d:e6:c6:ed:3c:80:52:47:6e:8c:91:bd:20: 7e:69:00:3d:b9:32:3a:07:9d:26:cb:e4:17:75:6c:3e:69:eb: e5:4a:18:e0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt26xpksHubLy0gzn/gDCPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDA1NzkwMjEyODdlYTY0OTVkN2Y5MzRhNmRlZDMwZWUyYTViYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GYmG8UOmkerSihMjOmCkCZ3kRay wp3/6qCOkBolqXRJhv0lgGvPLVYP6Uo0ZFN3AbkM/qrqbq1rsHiy8TPLvE9JH7/y ciaSoimoN5DZf9nWDneXwCe3GzVJaCk34HJbkGrqdO9sSETuIVR1MKdKfyE7NGV4 1UeEnrPZVH9XdQkr2Us7pY8RVbW2y0cO530m1Vok3Kjgk5noMacCOrpBKcypFpe9 AguZ3LNK0p4+oVoguymvidTftqVJyhAVmDklvJrJq43bcJfvG852iCSvEblEhWce ueI30sJAhVUkNC55KGYRU8s1T+WQCi3tT4gwECZrTThrajnLm6CzakJnNQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFGAFeQISh+pkldf5NKbe0w7ipbs4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE5Nzlm MDE1LTJkNjktNDhmMS1iYjUyLTM1ODFjNGRmNDhmYS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTk3 OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0OGZhLzAvNjAwNTc5MDIxMjg3 RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgME ALkAIDAPBAIAAjAJAwcAIAEH+AFLMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMF +AIDAzxkMA0GCSqGSIb3DQEBCwUAA4IBAQBFImX8zkcAhvPQVSC0eln+ZUXHk8N+ U+Y/+6Nt5vKjvgqoKgVgFyqoAf1DLMb+ARDTNX9PMHSf91oUH5abjOKJHiVDBTQP KK5H2e2b77kmvEnHI3Ry3TfhEqoSrM8Z6+Zu4tYB6I61fZGe1+y0rHDykC3Kq+li Uc+wkbmxBK5OusCBh3eDpHagfJkqKwSY50rCNq6evZnCIDvOuTfyITGX8qw+T4+U mm5K2G0Jh08m/lqOaxQJF2SSchaBqko+Phcr912ZJAXhziWjpaGDkyqCvS1I7uT2 u0EIg+ozEU3mxu08gFJHboyRvSB+aQA9uTI6B50my+QXdWw+aevlShjg -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:59 2026 by rpki-client