This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer (raw, json) Hash identifier: PLYkZYYAKeY9YvDXZ8yy09hTOz30QpWMIBgOnCAnfps= Subject key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112EB83EDFEB51B4070B6EEF854775 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.47.79.0/24 IP: 195.242.184.0/24 IP: 2a0f:d040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2e:b8:3e:df:eb:51:b4:07:0b:6e:ef:85:47:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:29:ce:66:13:c6:a6:24:75:aa:51:43:36: f8:f1:3e:3a:99:eb:14:62:02:83:94:e4:2c:c9:b7: 1a:69:be:08:8d:e4:fd:f7:6a:20:2c:12:77:33:c8: 2b:c3:71:7b:e4:65:79:57:62:5e:84:ee:5e:0d:58: 5e:e8:38:eb:8f:f9:4c:20:25:5a:dd:29:c3:d4:da: 2e:66:ac:e1:89:a6:8c:49:2a:f1:6d:8b:bf:92:57: d5:de:45:2e:00:c4:ea:82:c7:74:40:ab:c6:bf:da: 92:1c:e0:96:65:fd:91:27:36:d5:24:82:a0:e1:6a: aa:4c:8c:1b:ab:e8:04:62:75:a9:a2:3f:da:8e:5f: 77:3e:e3:ae:ab:cc:6d:ef:32:ba:28:99:ad:9c:e4: f4:60:f2:2a:0a:d3:88:a7:be:b0:73:c8:27:84:d1: d6:aa:f0:ee:0f:2f:9c:85:a7:69:6a:5d:c7:38:f6: 44:09:57:7f:5a:1d:d5:77:e4:06:ba:52:3b:fb:64: 47:80:e7:5e:7a:b4:93:46:bf:12:36:c6:c4:ac:93: 89:1e:c6:34:d2:4d:d3:30:a3:fc:7c:76:93:7e:29: f3:d6:b1:c5:e5:b6:7f:87:9a:e5:be:f6:34:da:14: 91:63:28:a7:77:dc:14:f3:c1:f7:73:2f:f3:4b:d3: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.79.0/24 195.242.184.0/24 IPv6: 2a0f:d040::/32 Signature Algorithm: sha256WithRSAEncryption 41:ff:e1:0f:87:9d:38:2d:6d:80:43:b3:b4:a7:15:1e:bd:13: 58:b3:10:2b:39:fc:46:4e:e8:5d:83:af:56:67:47:be:6b:52: cf:e5:eb:0f:d9:25:69:53:ce:a1:ce:bd:66:ac:e6:59:bd:3f: af:ac:64:b0:75:c4:fc:46:a6:20:a2:a0:0b:71:f0:f6:7e:3d: 15:d7:0b:72:43:30:5a:dd:df:6c:b5:83:19:bd:c7:7d:7c:44: 29:16:48:46:6a:7a:19:e2:a3:6e:2b:97:0c:e2:ec:04:05:ea: 39:e4:3d:a5:ea:ee:36:fa:43:b1:3e:c1:c6:8d:86:cd:6b:3a: a4:fb:30:54:cc:9f:05:be:35:0d:1f:21:e1:3f:f2:89:d3:28: 77:25:f2:34:0b:32:9f:4c:9e:67:02:cb:e1:e0:32:92:b6:24: d3:5a:3e:dc:ef:88:f4:98:34:ad:50:00:17:91:e7:0d:35:fe: 5b:c8:0e:78:b4:55:39:58:29:c1:d4:6e:34:81:f4:c9:e3:4b: b6:c7:08:58:e5:4b:16:37:b0:1a:4e:80:26:3e:a2:ad:6e:d6: f6:bd:e2:c0:b5:27:9f:0d:a9:48:51:a2:58:e2:32:8b:f7:0e: 74:99:6b:b3:0b:87:f6:1c:a7:9a:82:b4:4a:c5:4f:e0:e1:05: d4:46:2a:4b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5ES64Pt/rUbQHC27vhUd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDgwMTFlYTUxYTlmYmNmOGJhZTBkZjFlZDQ5OWEzNDA3ZDYzMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUgpzmYTxqYkdapRQzb48T46mesU YgKDlOQsybcaab4IjeT992ogLBJ3M8grw3F75GV5V2JehO5eDVhe6Djrj/lMICVa 3SnD1NouZqzhiaaMSSrxbYu/klfV3kUuAMTqgsd0QKvGv9qSHOCWZf2RJzbVJIKg 4WqqTIwbq+gEYnWpoj/ajl93PuOuq8xt7zK6KJmtnOT0YPIqCtOIp76wc8gnhNHW qvDuDy+chadpal3HOPZECVd/Wh3Vd+QGulI7+2RHgOdeerSTRr8SNsbErJOJHsY0 0k3TMKP8fHaTfinz1rHF5bZ/h5rlvvY02hSRYyind9wU88H3cy/zS9MqJwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFGCAEepRqfvPi64N8e1JmjQH1jBTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzRmMGVj NS01NGQyLTQwZmItOTQ5OC03NDJmODY5MWJlYWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvNGYwZWM1 LTU0ZDItNDBmYi05NDk4LTc0MmY4NjkxYmVhYS8xL1lJQVI2bEdwLTgtTHJnM3g3 VW1hTkFmV01GTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwS9PAwQAw/K4MA0EAgACMAcDBQAqD9BAMA0G CSqGSIb3DQEBCwUAA4IBAQBB/+EPh504LW2AQ7O0pxUevRNYsxArOfxGTuhdg69W Z0e+a1LP5esP2SVpU86hzr1mrOZZvT+vrGSwdcT8RqYgoqALcfD2fj0V1wtyQzBa 3d9stYMZvcd9fEQpFkhGanoZ4qNuK5cM4uwEBeo55D2l6u42+kOxPsHGjYbNazqk +zBUzJ8FvjUNHyHhP/KJ0yh3JfI0CzKfTJ5nAsvh4DKStiTTWj7c74j0mDStUAAX kecNNf5byA54tFU5WCnB1G40gfTJ40u2xwhY5UsWN7AaToAmPqKtbtb2veLAtSef DalIUaJY4jKL9w50mWuzC4f2HKeagrRKxU/g4QXURipL -----END CERTIFICATE-----Generated at Mon Jan 26 22:38:43 2026 by rpki-client