This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer File: YLlhXfjGWdrIzAh70BHUtf83Pio.cer (raw, json) Hash identifier: 1GnudH7mOr4fmYLbaRPZkAH8QAQv0tYL+hObUc9HEg4= Subject key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE2C61D106745DC794879DAF25EE0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.121.124.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2c:61:d1:06:74:5d:c7:94:87:9d:af:25:ee:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:c6:ec:3f:97:d0:59:27:26:d4:28:6d:fb: a1:51:27:d7:5e:5f:b9:c0:49:b5:43:06:b4:04:fd: d1:46:bc:4a:fa:5e:3b:26:2f:fc:47:07:8a:ee:11: bb:16:d9:46:c4:c0:61:51:48:b0:47:3e:5d:47:39: 5c:b8:57:4b:3d:45:31:cf:af:27:f0:78:0e:9b:21: 56:e0:8d:29:d5:fc:d4:dd:d9:e4:93:0f:6e:f1:a5: 2b:d0:50:c5:2b:e7:9a:71:b5:90:1c:2b:ce:46:b7: d0:4f:55:1b:8a:45:7b:b2:fc:b7:31:d5:6a:4b:56: 69:3b:47:12:12:cc:de:f2:47:87:5f:46:66:f9:b0: ce:ab:60:23:ba:45:61:6d:73:7a:26:ca:ce:67:87: 43:04:21:0c:96:00:2b:75:dc:d2:31:b5:fc:d6:6d: 4f:15:da:3a:b3:c7:36:fb:ae:be:c6:43:26:32:fc: 45:81:58:d2:14:39:ce:cc:f3:75:f2:29:33:44:b6: b1:76:34:e1:81:82:a7:ce:1b:1b:32:72:e3:c9:82: f2:69:16:0c:e1:fb:63:f9:dd:6b:a0:7d:81:86:8a: 09:ce:73:bd:a4:ee:ea:10:aa:1a:16:73:53:75:ac: 63:c0:d3:9b:07:20:e2:1a:bd:1c:cd:09:6d:9b:66: 51:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.124.0/22 Signature Algorithm: sha256WithRSAEncryption 55:b3:6a:99:66:c5:35:19:29:a2:8b:5a:a7:5b:7f:e5:7c:31: ae:f5:05:dc:40:7a:1b:5b:d5:16:28:bc:94:4c:71:ff:87:da: 15:ea:bb:96:d4:02:69:23:12:e2:e3:a9:09:7d:ba:92:28:9c: eb:4a:72:2b:26:be:72:cc:90:38:db:e9:75:80:d0:01:aa:3f: d0:28:58:2f:37:14:d7:a8:f4:aa:ff:76:a4:f7:42:41:d7:f0: 3e:3f:ca:4b:ac:d7:d1:e4:6d:40:af:18:92:87:17:da:54:35: 7b:90:7f:2b:33:33:b1:e5:37:b1:b4:e3:57:7e:10:80:11:16: 7f:8a:81:c2:2c:b6:49:e6:e6:a4:ee:8b:38:1f:af:23:a4:ae: 70:db:9b:d9:d7:ef:ef:c5:32:f0:0b:87:f8:6a:ce:6f:d5:1b: 80:2a:f1:f4:30:b4:3e:a5:c4:d2:62:66:22:f0:b2:7d:ba:57: 55:45:e8:c2:ed:cf:86:3d:fa:45:a5:b6:b1:11:0a:3e:7c:71: d9:c5:69:43:4a:d1:f0:ce:ab:e6:47:31:ba:8b:ed:bb:cf:18: 3c:e6:ad:f8:14:c4:90:0f:13:5a:0f:fa:c9:19:2e:57:b9:ed: 90:15:f1:0a:f2:0d:05:49:28:bb:ec:78:a9:7e:4d:6e:9f:99: a9:55:25:67 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87ixh0QZ0XceUh52vJe4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGI5NjE1ZGY4YzY1OWRhYzhjYzA4N2JkMDExZDRiNWZmMzczZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ffG7D+X0FknJtQobfuhUSfXXl+5 wEm1Qwa0BP3RRrxK+l47Ji/8RweK7hG7FtlGxMBhUUiwRz5dRzlcuFdLPUUxz68n 8HgOmyFW4I0p1fzU3dnkkw9u8aUr0FDFK+eacbWQHCvORrfQT1UbikV7svy3MdVq S1ZpO0cSEsze8keHX0Zm+bDOq2AjukVhbXN6JsrOZ4dDBCEMlgArddzSMbX81m1P Fdo6s8c2+66+xkMmMvxFgVjSFDnOzPN18ikzRLaxdjThgYKnzhsbMnLjyYLyaRYM 4ftj+d1roH2BhooJznO9pO7qEKoaFnNTdaxjwNObByDiGr0czQltm2ZR+QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGC5YV34xlnayMwIe9AR1LX/Nz4qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzlhOGFk OC1iNmM5LTRjNmMtYWMyNy02MmQ4ODFhYTkwNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOWE4YWQ4 LWI2YzktNGM2Yy1hYzI3LTYyZDg4MWFhOTA2Zi8xL1lMbGhYZmpHV2RySXpBaDcw QkhVdGY4M1Bpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXl8MA0GCSqGSIb3DQEBCwUAA4IBAQBVs2qZ ZsU1GSmii1qnW3/lfDGu9QXcQHobW9UWKLyUTHH/h9oV6ruW1AJpIxLi46kJfbqS KJzrSnIrJr5yzJA42+l1gNABqj/QKFgvNxTXqPSq/3ak90JB1/A+P8pLrNfR5G1A rxiShxfaVDV7kH8rMzOx5TextONXfhCAERZ/ioHCLLZJ5uak7os4H68jpK5w25vZ 1+/vxTLwC4f4as5v1RuAKvH0MLQ+pcTSYmYi8LJ9uldVRejC7c+GPfpFpbaxEQo+ fHHZxWlDStHwzqvmRzG6i+27zxg85q34FMSQDxNaD/rJGS5Xue2QFfEK8g0FSSi7 7Hipfk1un5mpVSVn -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:38 2026 by rpki-client