This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer File: YDM81vG1nAtoLh2jiSN-2j6dqRg.cer (raw, json) Hash identifier: ttWCMBRyWVQ9l/c4pLys3VsNcTB6VgpdIxIZVkNNQ3I= Subject key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8CCFDCAE19350EF2DC39827B4C6EC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.149.71.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cc:fd:ca:e1:93:50:ef:2d:c3:98:27:b4:c6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:51:64:51:54:06:1a:f8:ee:d7:87:7b:ea: cd:51:88:6a:09:01:4d:8c:38:65:80:0b:fe:2f:29: 28:ec:9b:1d:53:0e:bd:6a:b2:39:61:87:6f:7d:6d: c8:d2:47:da:46:18:c0:51:25:54:50:25:ee:35:82: a7:1a:a4:6d:27:bf:c2:3c:45:01:54:55:9a:23:10: 7b:20:46:e6:ad:17:06:89:91:7e:81:7d:9b:f9:9c: 3f:39:c2:2e:78:eb:6d:30:4b:b3:14:64:56:56:3e: cc:7c:b9:ad:ff:e9:44:66:2c:98:5b:c9:7a:ad:8e: ae:e1:25:bc:21:bc:e6:26:b0:76:a6:a5:13:be:6d: b4:1e:9a:50:9a:fb:3b:ad:e7:01:c6:5c:be:f0:54: a3:71:1b:5b:7a:86:ce:f4:43:45:32:fc:a7:85:c3: 4f:3f:33:10:7e:94:20:18:32:ba:f6:de:c0:e8:44: dc:cd:a0:04:e4:01:5e:d7:bb:59:4f:3b:ba:d6:4c: 17:31:a5:e9:01:2b:a4:9f:b4:31:b9:1f:b9:26:26: 81:1c:86:11:20:24:1e:53:8f:25:c7:aa:b0:93:19: 29:bc:43:96:83:4c:97:e3:06:ca:78:c1:fd:58:a8: 80:76:ff:ec:74:71:37:90:a8:5e:ad:10:96:d2:2f: d9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.71.0/24 Signature Algorithm: sha256WithRSAEncryption 20:80:00:ad:d8:1a:37:da:98:ee:01:5e:66:48:3c:85:c0:f0: 89:6f:eb:99:ea:b6:96:2a:21:4b:92:a3:03:64:ca:b1:e6:bc: 35:e4:ab:2e:ac:38:13:64:7a:e1:e0:5e:b6:a1:47:7b:87:e3: 64:d9:a9:6f:e8:97:47:fb:48:2a:df:e5:46:a9:20:26:45:9d: c8:1a:a5:76:06:8c:45:cb:0d:99:7d:d6:4c:b7:f5:8d:02:6b: 3b:8f:ff:e9:34:15:2e:f9:4d:f5:f7:55:b0:e9:9c:4c:ac:7c: 10:a5:63:9e:86:9a:de:86:c2:e0:58:6d:d5:4d:84:cb:11:ea: cc:47:a5:9c:1e:23:fc:aa:ee:c9:61:8c:b0:dc:92:8b:a6:bc: e9:d1:b5:57:04:06:55:a7:2e:bd:4a:8e:3e:6b:3d:e7:9f:f6: 4d:50:00:43:c1:56:fc:6b:53:6d:53:f5:f3:33:dc:7d:3d:c3: 31:cf:6d:28:80:d0:31:e2:01:6d:c6:32:28:d2:ec:cb:64:9d: db:b5:54:f8:91:ae:c9:f2:af:1b:4e:73:0f:73:2c:8f:57:77: c7:19:05:82:a9:6e:33:0b:fb:3d:88:e5:0c:40:52:0c:b9:85: 58:65:11:c8:66:72:c2:d6:41:5c:5a:e0:00:5e:aa:75:b0:e6: a1:c1:27:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yMz9yuGTUO8tw5gntMbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDMzM2NkNmYxYjU5YzBiNjgyZTFkYTM4OTIzN2VkYTNlOWRhOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TNRZFFUBhr47teHe+rNUYhqCQFN jDhlgAv+Lyko7JsdUw69arI5YYdvfW3I0kfaRhjAUSVUUCXuNYKnGqRtJ7/CPEUB VFWaIxB7IEbmrRcGiZF+gX2b+Zw/OcIueOttMEuzFGRWVj7MfLmt/+lEZiyYW8l6 rY6u4SW8IbzmJrB2pqUTvm20HppQmvs7recBxly+8FSjcRtbeobO9ENFMvynhcNP PzMQfpQgGDK69t7A6ETczaAE5AFe17tZTzu61kwXMaXpASukn7QxuR+5JiaBHIYR ICQeU48lx6qwkxkpvEOWg0yX4wbKeMH9WKiAdv/sdHE3kKherRCW0i/ZSQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGAzPNbxtZwLaC4do4kjfto+nakYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzQyMjJi Mi1jNzljLTRkNWUtOTlkNy1jZGIyODFhMmIzYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvNDIyMmIy LWM3OWMtNGQ1ZS05OWQ3LWNkYjI4MWEyYjNhOC8xL1lETTgxdkcxbkF0b0xoMmpp U04tMmo2ZHFSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw5VHMA0GCSqGSIb3DQEBCwUAA4IBAQAggACt 2Bo32pjuAV5mSDyFwPCJb+uZ6raWKiFLkqMDZMqx5rw15KsurDgTZHrh4F62oUd7 h+Nk2alv6JdH+0gq3+VGqSAmRZ3IGqV2BoxFyw2ZfdZMt/WNAms7j//pNBUu+U31 91Ww6ZxMrHwQpWOehprehsLgWG3VTYTLEerMR6WcHiP8qu7JYYyw3JKLprzp0bVX BAZVpy69So4+az3nn/ZNUABDwVb8a1NtU/XzM9x9PcMxz20ogNAx4gFtxjIo0uzL ZJ3btVT4ka7J8q8bTnMPcyyPV3fHGQWCqW4zC/s9iOUMQFIMuYVYZRHIZnLC1kFc WuAAXqp1sOahwSc/ -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:39 2026 by rpki-client