This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer File: YGYXWM4zBiJHCjmujW70ogRPg8Q.cer (raw, json) Hash identifier: jQLbmLAnoBkBdNsuZLg9UEWJx4pdNUXLR0D2ppIBobA= Subject key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758F9BD5D79274FF2EEC8C3A529BECD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24852 AS: 24877 IP: 79.132.160.0/19 IP: 84.55.0.0/18 IP: 88.222.0.0/15 IP: 95.173.32.0/19 IP: 185.104.176.0/22 IP: 213.164.96.0 -- 213.164.118.255 IP: 217.147.32.0/20 IP: 2a01:7c80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f9:bd:5d:79:27:4f:f2:ee:c8:c3:a5:29:be:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:5b:9e:dd:6e:56:8c:e3:70:e8:b9:04:4d: bf:a3:c6:66:38:96:38:ae:50:f1:5a:6b:80:27:2b: ae:31:00:4a:77:de:2f:65:07:2f:f7:f6:e8:88:b9: e8:f2:5b:25:85:d7:25:b0:06:eb:b1:09:4e:5c:95: b2:fe:3e:6c:67:95:01:54:08:fa:d7:23:d7:61:48: d5:98:80:18:11:f5:b9:3f:a2:cd:d2:35:b0:94:2e: 9f:fa:4c:4d:5d:cf:f8:f9:6e:51:cc:7a:0f:77:a1: b6:a6:2f:36:3c:18:76:45:31:e8:56:10:30:c5:e9: 1d:81:fe:3b:1d:6f:fa:b3:24:9a:78:d1:54:45:1d: 16:b7:4b:bd:85:f4:81:4a:86:3d:1e:3b:e9:65:5d: 8f:f4:35:6d:7e:68:73:d8:7f:96:f4:4c:ee:d3:89: 7e:42:5e:a5:d9:96:c0:42:2a:17:8c:f5:72:8d:28: 8a:8c:3a:ab:bc:25:cf:49:64:38:87:27:07:46:fe: e6:05:07:62:8d:21:65:a1:86:2b:41:44:b6:fc:64: ba:fc:05:ed:8f:75:37:6e:ae:f6:ec:68:10:e8:58: ba:8c:a8:b0:a8:8a:c0:95:cb:7c:a7:10:5c:04:67: b4:f7:fa:c4:fa:49:9f:59:52:43:dd:3c:a8:52:3c: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.160.0/19 84.55.0.0/18 88.222.0.0/15 95.173.32.0/19 185.104.176.0/22 213.164.96.0-213.164.118.255 217.147.32.0/20 IPv6: 2a01:7c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24852 24877 Signature Algorithm: sha256WithRSAEncryption 3c:52:fe:ca:b6:ba:63:0b:d5:9d:0d:6b:7f:33:ad:b6:42:3a: ce:84:18:a3:5c:c3:ef:68:07:83:35:3e:0e:92:db:0b:88:10: c3:a6:83:a9:c9:a8:4f:57:a1:98:6c:37:12:be:9d:d5:64:1c: f4:fa:0e:34:67:d3:20:c8:a2:04:47:2b:41:5f:40:67:26:8b: 52:bd:1e:ae:b6:38:cd:0d:aa:94:09:d0:95:12:0d:64:0a:97: bf:5d:63:99:ce:57:55:d8:b3:50:4a:6e:c9:7d:89:1a:b5:b9: 3c:b3:ca:11:ba:36:20:03:7d:3f:a3:cb:b4:5b:23:6f:bc:1b: 19:d6:d4:4f:c4:71:01:98:17:e2:c8:e1:ae:8a:fc:9b:82:9f: ec:7c:b4:09:0d:67:ef:cb:18:e2:1f:c2:d0:1f:3c:e3:42:0b: 34:96:46:3d:5d:b0:6a:c1:b1:12:4e:a6:db:18:14:a1:d0:76: f5:1a:1e:08:db:0b:ae:04:1c:b4:b3:73:be:19:e9:10:0e:44: e3:b6:aa:c0:5c:94:0e:21:45:cc:1f:d6:d2:a8:b7:66:7a:85: 28:6d:a7:21:67:ea:b2:3a:15:42:32:3c:38:dc:f5:13:1a:94: 18:35:70:70:47:63:aa:e7:c6:ba:f0:77:0f:32:7d:81:fc:53: fc:6f:b2:5a -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt3WPm9XXknT/LuyMOlKb7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDY2MTc1OGNlMzMwNjIyNDcwYTM5YWU4ZDZlZjRhMjA0NGY4M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmlbnt1uVozjcOi5BE2/o8ZmOJY4 rlDxWmuAJyuuMQBKd94vZQcv9/boiLno8lslhdclsAbrsQlOXJWy/j5sZ5UBVAj6 1yPXYUjVmIAYEfW5P6LN0jWwlC6f+kxNXc/4+W5RzHoPd6G2pi82PBh2RTHoVhAw xekdgf47HW/6sySaeNFURR0Wt0u9hfSBSoY9HjvpZV2P9DVtfmhz2H+W9Ezu04l+ Ql6l2ZbAQioXjPVyjSiKjDqrvCXPSWQ4hycHRv7mBQdijSFloYYrQUS2/GS6/AXt j3U3bq727GgQ6Fi6jKiwqIrAlct8pxBcBGe09/rE+kmfWVJD3TyoUjwMDwIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFGBmF1jOMwYiRwo5ro1u9KIET4PEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2VkZDEy OC02ZDZlLTQ5ZTMtYjc3ZS0xZjg3NDY5NDU0ODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZWRkMTI4 LTZkNmUtNDllMy1iNzdlLTFmODc0Njk0NTQ4My8xL1lHWVhXTTR6QmlKSENqbXVq Vzcwb2dSUGc4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDA3BAIAATAxAwQFT4SgAwQGVDcAAwMBWN4DBAVfrSADBAK5aLAw DAMEBdWkYAMEANWkdgMEBNmTIDANBAIAAjAHAwUAKgF8gDAdBggrBgEFBQcBCAEB /wQOMAygCjAIAgJhFAICYS0wDQYJKoZIhvcNAQELBQADggEBADxS/sq2umML1Z0N a38zrbZCOs6EGKNcw+9oB4M1Pg6S2wuIEMOmg6nJqE9XoZhsNxK+ndVkHPT6DjRn 0yDIogRHK0FfQGcmi1K9Hq62OM0NqpQJ0JUSDWQKl79dY5nOV1XYs1BKbsl9iRq1 uTyzyhG6NiADfT+jy7RbI2+8GxnW1E/EcQGYF+LI4a6K/JuCn+x8tAkNZ+/LGOIf wtAfPONCCzSWRj1dsGrBsRJOptsYFKHQdvUaHgjbC64EHLSzc74Z6RAOROO2qsBc lA4hRcwf1tKot2Z6hShtpyFn6rI6FUIyPDjc9RMalBg1cHBHY6rnxrrwdw8yfYH8 U/xvslo= -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:03 2026 by rpki-client