This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer File: YGNeBMNML3ge6YChZR_2blEyvEQ.cer (raw, json) Hash identifier: EMPF13C/V7F4tf+ISxn91wTjvS/jk5vFaGdfMzqy2S4= Subject key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1300EBE28C0A6F742AEED32A8D172D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 84.243.128.0/18 IP: 185.57.252.0/22 IP: 2a02:6060::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:00:eb:e2:8c:0a:6f:74:2a:ee:d3:2a:8d:17:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:31:02:7a:9e:f1:2c:6c:38:33:a9:99:f1: 4f:92:2c:26:ef:26:85:99:b3:b7:40:8f:e3:03:88: 63:45:07:d7:22:fe:4e:03:63:81:51:a0:0d:0d:36: 55:86:63:04:3e:a8:57:76:72:28:95:2a:d3:5c:66: 99:df:7f:05:44:a5:6a:d9:49:44:28:7a:fa:4a:49: b1:67:bf:28:c2:1f:8d:e7:3c:cf:8e:4e:02:b9:02: 00:43:b1:40:91:03:b2:cf:9b:b3:5e:27:ef:73:a6: 6e:59:09:54:1a:94:02:f5:d8:75:8b:a0:3a:e9:a2: ce:b4:2c:22:19:9d:2d:83:18:ba:af:81:a3:00:91: 37:a8:90:c7:3b:0b:ee:2a:d1:86:a9:03:7c:46:7c: 4c:51:20:28:fb:d6:32:9f:1c:b1:80:e9:8f:0d:a8: 58:14:ff:c9:0e:9a:40:9d:2b:67:e7:a9:74:a3:93: 39:9b:3c:ca:dc:be:0e:1b:fa:ff:ef:d0:42:33:ab: a5:ed:ef:a6:30:f2:ce:3d:24:65:74:45:37:2f:7c: 8e:ba:bb:13:2a:55:25:41:d2:61:4a:99:fd:8d:37: eb:ab:5c:86:e0:ed:b9:ff:28:a8:16:f2:50:d4:b3: ef:c0:b1:0f:18:94:3e:f9:70:19:5a:ff:7a:b8:68: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.243.128.0/18 185.57.252.0/22 IPv6: 2a02:6060::/32 Signature Algorithm: sha256WithRSAEncryption ab:b2:4e:cc:3f:f5:6a:82:04:35:58:d4:f5:b5:bd:e3:39:17: 18:b0:b0:d2:19:53:7a:ea:b3:43:c4:04:ce:84:f8:a0:ff:f3: 59:f7:de:2f:49:b6:c4:a7:26:b7:37:bd:3d:05:13:cd:80:cc: 1a:09:7a:b9:70:23:4c:73:8a:df:23:81:31:3c:82:e5:6c:a4: f7:2f:3f:ab:37:55:cf:6b:f7:33:6e:b0:cc:e8:0b:5a:a8:ff: 9b:2c:cb:72:fb:ae:aa:c8:2f:d1:0f:5b:18:87:0e:06:04:b5: 28:dc:eb:82:70:a7:96:1b:9a:5f:f1:1f:56:cb:a3:15:52:c5: 0a:3a:66:6c:58:22:75:49:53:11:a7:9d:79:45:a6:24:a7:8c: 38:9f:60:bb:9f:db:2f:83:62:26:c7:f6:26:9d:61:c7:3b:22: 58:ab:ed:49:3f:8d:a1:90:d7:82:1b:5c:3f:b6:c0:e2:78:38: 29:fe:2d:9d:8a:f8:3c:c8:b5:fe:fb:03:32:49:d0:0e:5c:65: f0:e5:55:af:dc:4a:70:db:b8:0d:60:d0:5a:96:cd:75:8f:96: 68:76:bf:e9:34:39:ae:8a:dc:e5:5c:f4:84:86:91:13:2d:86: cd:0c:bd:79:bf:b2:46:89:6b:05:df:f9:33:1b:44:61:4e:c3: 77:9c:90:ef -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8EwDr4owKb3Qq7tMqjRctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDYzNWUwNGMzNGMyZjc4MWVlOTgwYTE2NTFmZjY2ZTUxMzJiYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq48xAnqe8SxsODOpmfFPkiwm7yaF mbO3QI/jA4hjRQfXIv5OA2OBUaANDTZVhmMEPqhXdnIolSrTXGaZ338FRKVq2UlE KHr6SkmxZ78owh+N5zzPjk4CuQIAQ7FAkQOyz5uzXifvc6ZuWQlUGpQC9dh1i6A6 6aLOtCwiGZ0tgxi6r4GjAJE3qJDHOwvuKtGGqQN8RnxMUSAo+9YynxyxgOmPDahY FP/JDppAnStn56l0o5M5mzzK3L4OG/r/79BCM6ul7e+mMPLOPSRldEU3L3yOursT KlUlQdJhSpn9jTfrq1yG4O25/yioFvJQ1LPvwLEPGJQ++XAZWv96uGgsqQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFGBjXgTDTC94HumAoWUf9m5RMrxEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzk5Mjg2 YS00NWIzLTRjZWUtOGRiNS05MzcwODFhOWNlZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvOTkyODZh LTQ1YjMtNGNlZS04ZGI1LTkzNzA4MWE5Y2VmYS8xL1lHTmVCTU5NTDNnZTZZQ2ha Ul8yYmxFeXZFUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGVPOAAwQCuTn8MA0EAgACMAcDBQAqAmBgMA0G CSqGSIb3DQEBCwUAA4IBAQCrsk7MP/VqggQ1WNT1tb3jORcYsLDSGVN66rNDxATO hPig//NZ994vSbbEpya3N709BRPNgMwaCXq5cCNMc4rfI4ExPILlbKT3Lz+rN1XP a/czbrDM6AtaqP+bLMty+66qyC/RD1sYhw4GBLUo3OuCcKeWG5pf8R9Wy6MVUsUK OmZsWCJ1SVMRp515RaYkp4w4n2C7n9svg2Imx/YmnWHHOyJYq+1JP42hkNeCG1w/ tsDieDgp/i2divg8yLX++wMySdAOXGXw5VWv3Epw27gNYNBals11j5Zodr/pNDmu itzlXPSEhpETLYbNDL15v7JGiWsF3/kzG0RhTsN3nJDv -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client