This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer (raw, json) Hash identifier: Wb8VYx46q6WSAKEZCE0ZMaEfdb/OQPDCGRMDdFNNEv0= Subject key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA57B18A3D9327D91B1698906C588DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211953 IP: 185.189.52.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7b:18:a3:d9:32:7d:91:b1:69:89:06:c5:88:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=607e5caff4f47b2b8dc81cc36c8e346662639898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:c0:3e:f8:e6:fc:b3:bc:0f:e7:8f:fd:a7: ee:04:03:8d:70:38:96:d7:7a:41:cb:e2:5c:c2:c3: 5f:83:07:10:ab:c6:9e:db:67:0b:4f:45:36:47:ad: 00:9e:4e:4d:2a:c6:9e:5d:0c:a0:49:e4:36:aa:13: 78:34:61:55:50:ff:37:0d:0e:6b:58:04:08:b2:49: 69:5d:16:1a:37:1e:39:e1:92:9a:c7:72:98:b6:6f: 8c:6a:cb:9f:cc:a2:f9:8f:ba:71:17:5f:54:83:32: ec:74:f8:9c:4a:2a:36:58:4c:3b:3b:c7:7b:59:b5: d1:7c:3c:76:23:96:ad:02:5b:83:eb:8e:0e:31:46: 60:de:53:89:1e:12:6c:33:82:2e:bc:9a:a4:9d:07: 22:5c:6c:06:29:5a:8e:cc:9a:4e:6d:af:79:c8:10: 0a:f9:f9:e2:90:68:25:81:d6:fe:c7:79:95:4f:e1: e8:6c:44:d1:9f:84:b5:87:45:13:cd:c3:de:85:1d: 95:a5:c2:d0:cc:25:16:2f:3e:5d:1b:e6:30:f2:23: c2:c3:fc:3b:e2:4e:52:3c:92:1a:3a:78:1a:e6:fc: c2:40:52:0a:e0:0a:56:52:ee:fb:10:31:3f:47:ab: b5:e2:29:ac:0e:21:c6:6e:a5:fe:14:50:62:d8:99: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211953 Signature Algorithm: sha256WithRSAEncryption 62:e1:0b:5f:a5:1b:4d:5e:d0:35:50:4c:fa:61:4f:f0:3d:8a: d4:f0:fd:6b:5f:df:2a:5a:85:ca:ce:8a:b4:40:c6:2b:36:64: 5a:2d:a9:0c:45:be:1b:19:5a:14:1b:5f:c2:14:eb:21:de:c9: 72:d9:5e:ee:7d:56:84:85:46:c7:d3:3b:16:c1:1c:fe:b6:b0: ab:55:96:7f:6c:86:64:47:f0:0c:ff:25:1f:c3:63:d3:8b:40: aa:94:57:b6:ea:87:c6:a1:bd:fd:27:78:6c:77:39:d0:3b:20: b8:dd:0b:d1:3a:68:6f:03:af:69:8a:51:0d:14:04:c6:bc:c4: d1:d2:1b:0a:72:cc:6b:06:e7:f0:a5:85:a6:4b:73:71:b8:3b: 2a:f1:97:e1:b0:a4:f6:2d:61:3b:80:12:97:c3:7b:9f:af:43: 39:5b:e5:80:7c:ef:bb:ad:82:69:5a:b6:9c:d0:6d:6a:0e:c4: 48:be:ea:c0:01:aa:ba:85:0d:a5:42:96:78:41:0f:35:c4:2a: b3:e8:ca:3f:72:51:0b:4c:8d:44:84:3b:58:c6:ba:4f:fe:6d: 2e:d8:c0:2c:a7:3b:c7:85:fa:2e:1f:46:ae:ea:62:50:57:ac: 96:b4:ee:c0:69:98:ec:34:28:53:3a:55:88:8d:41:70:7b:9d: 94:cf:c8:65 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pXsYo9kyfZGxaYkGxYjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDdlNWNhZmY0ZjQ3YjJiOGRjODFjYzM2YzhlMzQ2NjYyNjM5ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaLAPvjm/LO8D+eP/afuBAONcDiW 13pBy+JcwsNfgwcQq8ae22cLT0U2R60Ank5NKsaeXQygSeQ2qhN4NGFVUP83DQ5r WAQIsklpXRYaNx454ZKax3KYtm+MasufzKL5j7pxF19UgzLsdPicSio2WEw7O8d7 WbXRfDx2I5atAluD644OMUZg3lOJHhJsM4IuvJqknQciXGwGKVqOzJpOba95yBAK +fnikGglgdb+x3mVT+HobETRn4S1h0UTzcPehR2VpcLQzCUWLz5dG+Yw8iPCw/w7 4k5SPJIaOnga5vzCQFIK4ApWUu77EDE/R6u14imsDiHGbqX+FFBi2JkkTQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGB+XK/09Hsrjcgcw2yONGZiY5iYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzdkNjZk ZS01ZjBjLTQ3NjUtYTBmNi02N2ZiZjIxNTVlNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvN2Q2NmRl LTVmMGMtNDc2NS1hMGY2LTY3ZmJmMjE1NWU0ZS8xL1lINWNyX1QwZXl1TnlCekRi STQwWm1Kam1KZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCub00MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM78TANBgkqhkiG9w0BAQsFAAOCAQEAYuELX6UbTV7QNVBM+mFP8D2K1PD9a1/f KlqFys6KtEDGKzZkWi2pDEW+GxlaFBtfwhTrId7Jctle7n1WhIVGx9M7FsEc/raw q1WWf2yGZEfwDP8lH8Nj04tAqpRXtuqHxqG9/Sd4bHc50DsguN0L0TpobwOvaYpR DRQExrzE0dIbCnLMawbn8KWFpktzcbg7KvGX4bCk9i1hO4ASl8N7n69DOVvlgHzv u62CaVq2nNBtag7ESL7qwAGquoUNpUKWeEEPNcQqs+jKP3JRC0yNRIQ7WMa6T/5t LtjALKc7x4X6Lh9GrupiUFeslrTuwGmY7DQoUzpViI1BcHudlM/IZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:42 2026 by rpki-client