This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer File: YAluN0CSzDAL0LsGxBZAky7Pi0k.cer (raw, json) Hash identifier: 7B7OWNC/leaRydbAUPa7RDX+xtZInZhx/A4G/nignBs= Subject key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8557FA2F33704D35266E89418FDE53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.238.27.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:57:fa:2f:33:70:4d:35:26:6e:89:41:8f:de:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60096e374092cc300bd0bb06c41640932ecf8b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:a9:a9:5b:59:0c:54:f8:ba:53:da:04:f5: f3:86:f4:ea:b2:57:29:08:1e:d5:b5:1f:81:04:f8: 49:63:54:e0:b5:be:5f:2a:37:25:7d:c6:d3:5b:0f: 15:26:39:05:d1:f7:8b:42:a8:0d:28:06:fe:c9:9f: 35:9a:0a:2a:cf:2c:80:c7:65:69:65:93:1d:26:ae: d9:8e:9e:dd:ab:a1:de:cd:63:82:e9:7e:89:13:19: a3:2a:0f:7e:10:ad:73:73:f6:5e:78:80:7f:fb:da: ec:a1:b6:2a:41:29:3a:cf:9e:5f:dc:ab:6f:dd:19: d1:a1:22:78:96:95:b1:07:0e:a4:e0:81:5c:ec:c5: b5:f4:0e:8e:c0:9d:89:18:fb:de:96:e3:12:5e:bc: 27:2b:92:7d:81:bc:b7:90:2a:ec:67:1e:69:bb:5f: 61:ae:f1:87:a7:37:8e:c4:44:bb:eb:bc:50:e8:6d: b8:3c:9e:5f:3d:39:37:ea:f1:9b:1c:1e:90:b5:9b: 37:6f:c9:8b:8d:00:6e:0a:b1:71:a4:93:e3:b2:b1: 09:da:0d:14:18:55:2c:46:b8:3e:0c:1b:1b:77:67: d0:fd:1d:b0:5a:73:41:29:c4:62:b7:2c:ce:b1:fc: 5b:6e:93:d6:c9:f5:ef:e9:55:ad:c2:5b:f6:16:41: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.27.0/24 Signature Algorithm: sha256WithRSAEncryption 40:73:50:5f:ce:01:b3:69:12:9b:a6:ce:dd:18:3a:a6:05:e5: 78:e2:d5:49:9a:fa:a6:aa:56:81:df:68:66:91:c1:99:02:5e: 92:87:2d:2c:6e:fd:fd:f7:b0:62:ac:74:0c:dd:59:0c:fe:1e: 7b:a2:68:06:8f:87:69:87:18:f1:aa:8a:80:ac:80:ef:37:91: b9:25:d2:f6:7d:d9:41:c2:ff:d7:64:be:0a:0c:c1:b3:ef:82: e6:25:ca:08:77:34:4a:c9:62:95:90:0b:de:53:74:43:52:7d: 8d:d4:d8:75:13:4a:3c:e0:e2:50:c1:04:06:e0:9b:a3:d0:fb: f7:6b:9d:ad:d0:34:17:98:e9:7e:fa:7d:7c:9a:e7:78:77:ce: c3:74:0f:0f:27:1d:af:a9:ea:31:3c:50:d6:66:eb:56:bc:ce: ed:08:2c:83:a8:1c:67:33:bf:f4:f7:9d:52:40:77:df:3f:01: 62:ef:63:10:34:8e:4a:29:a8:aa:58:4f:47:5f:0e:da:7d:cd: 26:96:dd:6a:60:bc:85:b2:5b:a8:2f:89:9d:2f:7c:a9:23:aa: 2a:5a:11:72:59:7c:30:07:7d:3f:d3:4e:b9:14:26:48:b1:8d: 48:fa:4b:eb:41:52:b9:d9:17:c6:74:c5:23:77:5e:6d:89:8a: 95:aa:fb:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hVf6LzNwTTUmbolBj95TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDA5NmUzNzQwOTJjYzMwMGJkMGJiMDZjNDE2NDA5MzJlY2Y4YjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pqpqVtZDFT4ulPaBPXzhvTqslcp CB7VtR+BBPhJY1Tgtb5fKjclfcbTWw8VJjkF0feLQqgNKAb+yZ81mgoqzyyAx2Vp ZZMdJq7Zjp7dq6HezWOC6X6JExmjKg9+EK1zc/ZeeIB/+9rsobYqQSk6z55f3Ktv 3RnRoSJ4lpWxBw6k4IFc7MW19A6OwJ2JGPveluMSXrwnK5J9gby3kCrsZx5pu19h rvGHpzeOxES767xQ6G24PJ5fPTk36vGbHB6QtZs3b8mLjQBuCrFxpJPjsrEJ2g0U GFUsRrg+DBsbd2fQ/R2wWnNBKcRityzOsfxbbpPWyfXv6VWtwlv2FkGSZwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGAJbjdAkswwC9C7BsQWQJMuz4tJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzkxY2Zl Ny01YzJkLTQ3NGEtYjU4Ny1jNDU4NTJjN2JlMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOTFjZmU3 LTVjMmQtNDc0YS1iNTg3LWM0NTg1MmM3YmUyMC8xL1lBbHVOMENTekRBTDBMc0d4 QlpBa3k3UGkway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwe4bMA0GCSqGSIb3DQEBCwUAA4IBAQBAc1Bf zgGzaRKbps7dGDqmBeV44tVJmvqmqlaB32hmkcGZAl6Shy0sbv3997BirHQM3VkM /h57omgGj4dphxjxqoqArIDvN5G5JdL2fdlBwv/XZL4KDMGz74LmJcoIdzRKyWKV kAveU3RDUn2N1Nh1E0o84OJQwQQG4Juj0Pv3a52t0DQXmOl++n18mud4d87DdA8P Jx2vqeoxPFDWZutWvM7tCCyDqBxnM7/0951SQHffPwFi72MQNI5KKaiqWE9HXw7a fc0mlt1qYLyFsluoL4mdL3ypI6oqWhFyWXwwB30/0065FCZIsY1I+kvrQVK52RfG dMUjd15tiYqVqvuX -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:45 2026 by rpki-client