This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer File: YKzX2WuVbeXbA2c80dHjo3uN2d0.cer (raw, json) Hash identifier: +HfnHuQeDmeBymH/YAywISquOhlTu1G9FD3Eh+Y8A+M= Subject key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDB48DBC74F673ED3719C3C5EBB903 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215633 IP: 194.107.116.0/24 IP: 2a0c:6e00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b4:8d:bc:74:f6:73:ed:37:19:c3:c5:eb:b9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:7f:58:43:bd:e5:41:be:28:8c:a9:06:a9: 7a:aa:29:2c:61:87:a7:8f:7d:70:a6:5d:d7:4e:09: 50:aa:3f:06:4b:b5:99:a8:f3:55:2d:93:92:c7:eb: 95:cc:83:80:d8:0d:9b:6c:e9:6e:06:07:2b:a5:ff: 5f:23:32:96:61:ad:f2:20:ab:3b:c5:d7:c7:21:a8: 6e:00:8f:52:17:5d:38:e5:8a:3d:b3:0a:43:b0:fd: dd:01:2e:79:67:02:8d:4d:89:97:6d:74:f8:b9:9b: 69:05:82:7a:96:9d:b2:81:c8:21:8f:35:45:69:c4: eb:50:31:35:e8:a7:9d:48:41:f8:14:65:97:f6:74: fd:df:60:10:41:5d:5b:0f:94:c6:3c:81:81:a6:f0: d9:16:c8:1e:f7:32:b4:8d:4b:a2:f6:8c:6a:7c:67: 7c:ab:b8:d7:c6:64:45:db:2b:fe:a5:41:55:8d:71: 6d:1a:8d:40:cb:61:7e:fb:07:04:1b:65:cb:25:c4: 07:a9:ab:79:31:27:f4:99:6c:78:e7:8b:be:93:6e: 85:b9:51:d5:91:fb:b7:47:a7:5f:ae:83:d7:b6:a7: d7:28:c6:1f:04:a6:25:dc:b6:b9:5e:40:fb:19:05: 96:a3:9d:46:6c:14:d0:ee:6c:93:dd:7c:35:dc:10: d3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.116.0/24 IPv6: 2a0c:6e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215633 Signature Algorithm: sha256WithRSAEncryption 7a:b6:5f:5f:5c:34:89:84:5f:16:0d:51:e9:fe:a4:03:9f:72: 76:7e:ed:1e:b3:ca:32:5d:bc:1b:85:1a:b9:f2:df:48:f0:59: 95:46:50:bc:e6:30:40:65:81:b1:8c:8e:8d:75:31:af:ff:59: 53:5e:0f:de:3a:2e:f5:5f:63:f4:7c:67:55:6e:e9:c4:83:a2: 54:70:8e:de:ac:0d:98:2a:c9:c2:ef:d1:1c:06:ad:b6:9d:90: 3e:5e:9a:15:2f:9a:a1:ae:c1:f3:15:53:5e:25:a2:64:47:86: 2b:3a:f5:94:87:ee:60:ab:a0:d2:ae:6f:56:e0:92:35:f4:d9: 31:64:42:36:f2:c8:07:af:ac:bd:6c:dc:5c:01:e9:09:6a:b9: 5b:00:5c:16:be:01:40:f7:1c:85:36:47:7b:76:21:27:c8:81: 1a:3f:b4:64:94:e7:21:bb:43:8a:49:89:fb:8a:1a:a6:0d:b6: 95:8c:15:77:fa:38:c2:11:cc:69:2d:b3:68:2a:e9:0a:20:cf: 83:83:b0:7d:be:c8:49:d3:78:a8:87:1e:72:b1:e2:f0:9c:8a: a5:33:a8:c6:e0:b9:e7:d2:59:f5:31:32:4f:ec:e1:48:ff:9f: a2:57:57:cb:ae:12:4c:04:ad:35:94:0c:50:0b:90:d0:5e:b8: d5:7a:5e:8a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87bSNvHT2c+03GcPF67kDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGFjZDdkOTZiOTU2ZGU1ZGIwMzY3M2NkMWQxZTNhMzdiOGRkOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gh/WEO95UG+KIypBql6qiksYYen j31wpl3XTglQqj8GS7WZqPNVLZOSx+uVzIOA2A2bbOluBgcrpf9fIzKWYa3yIKs7 xdfHIahuAI9SF1045Yo9swpDsP3dAS55ZwKNTYmXbXT4uZtpBYJ6lp2ygcghjzVF acTrUDE16KedSEH4FGWX9nT932AQQV1bD5TGPIGBpvDZFsge9zK0jUui9oxqfGd8 q7jXxmRF2yv+pUFVjXFtGo1Ay2F++wcEG2XLJcQHqat5MSf0mWx454u+k26FuVHV kfu3R6dfroPXtqfXKMYfBKYl3La5XkD7GQWWo51GbBTQ7myT3Xw13BDTmQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGCs19lrlW3l2wNnPNHR46N7jdndMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2YzNzdi ZC04ZTQyLTQ4NzUtYTEyNC0zYWJmYWZlNzRhYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZjM3N2Jk LThlNDItNDg3NS1hMTI0LTNhYmZhZmU3NGFhOS8xL1lLelgyV3VWYmVYYkEyYzgw ZEhqbzN1TjJkMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwmt0MA0EAgACMAcDBQAqDG4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKUTANBgkqhkiG9w0BAQsFAAOCAQEAerZfX1w0iYRf Fg1R6f6kA59ydn7tHrPKMl28G4UaufLfSPBZlUZQvOYwQGWBsYyOjXUxr/9ZU14P 3jou9V9j9HxnVW7pxIOiVHCO3qwNmCrJwu/RHAattp2QPl6aFS+aoa7B8xVTXiWi ZEeGKzr1lIfuYKug0q5vVuCSNfTZMWRCNvLIB6+svWzcXAHpCWq5WwBcFr4BQPcc hTZHe3YhJ8iBGj+0ZJTnIbtDikmJ+4oapg22lYwVd/o4whHMaS2zaCrpCiDPg4Ow fb7ISdN4qIcecrHi8JyKpTOoxuC559JZ9TEyT+zhSP+foldXy64STAStNZQMUAuQ 0F641Xpeig== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:58 2026 by rpki-client