This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer File: YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer (raw, json) Hash identifier: MibyLbjOlsdaGHvchIjTipUbR95fxE8tfPPyruHtWyQ= Subject key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E381945EFC01A2264C39502462EEFA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49882 IP: 91.92.196.0/24 IP: 185.88.184.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:19:45:ef:c0:1a:22:64:c3:95:02:46:2e:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60c44dff71879863ea71442023b7f354dc3dad7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:71:c2:d9:1f:93:cc:42:bd:ac:1e:37:ba: c9:a0:c5:a2:5c:31:91:fd:fb:a5:47:27:dc:85:0d: fe:c6:54:66:d9:22:81:2c:5c:4a:c0:9d:d9:f5:4d: 64:0c:c0:df:4f:45:12:5e:07:47:62:85:59:62:8a: 67:24:6e:92:b2:e2:15:e7:f1:3c:1f:a5:18:4c:35: 53:e7:02:f6:c5:43:28:5f:e1:34:fc:64:fb:37:69: 48:b8:be:e6:17:b8:d4:87:5c:5e:df:f8:7e:c0:00: 74:e6:ca:04:fc:c2:16:2b:38:5b:db:2c:04:2a:d8: 03:0c:e3:aa:1c:03:19:1f:ed:a7:99:9a:46:68:e4: 97:c3:4a:07:ef:4a:f8:07:7f:11:e3:3b:f1:ea:90: 84:74:87:8f:8a:be:94:a3:16:23:a6:4e:c9:79:4f: 51:aa:82:da:98:ea:cf:d5:47:a2:4b:cd:46:92:30: 8e:9d:30:41:10:52:c5:00:79:b9:2a:a2:be:e1:b4: d3:70:22:39:9b:5f:ba:81:9e:b4:34:af:d8:2c:fe: 66:46:c1:dc:ce:b5:9e:bd:63:e0:40:e1:13:4e:8d: dd:dd:4f:61:30:86:f1:16:75:d1:02:ef:c3:47:a7: 78:2e:1f:dc:0c:52:ea:98:da:29:b2:11:bb:a5:87: 09:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.196.0/24 185.88.184.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49882 Signature Algorithm: sha256WithRSAEncryption 4d:79:1f:6b:32:bc:82:59:11:66:63:39:f3:4f:10:dc:8b:86: 17:13:b7:7d:fa:ef:4c:db:10:f3:97:36:89:78:aa:1f:e7:dd: 82:23:18:b3:7a:ba:bb:5f:dd:ea:40:30:27:fd:0d:0c:5a:3e: d3:fd:86:0d:20:a9:d0:93:08:fd:1a:48:c7:ad:e1:42:92:28: 8e:3d:f3:90:a0:cf:ab:16:75:94:02:3c:10:66:50:9b:89:c7: 06:ff:a5:ff:f8:1d:ac:71:56:bb:14:89:9e:b5:54:46:18:a2: 08:1e:f9:4c:3c:ca:c8:31:97:35:31:8f:3f:b8:0f:16:df:92: d9:da:70:af:6c:00:91:63:9f:c7:8a:51:15:10:2f:45:95:dc: 0e:7c:70:52:9f:8b:da:73:5b:63:93:13:2a:c8:66:bd:b0:d2: b2:29:d8:a2:67:48:0e:f0:fc:fc:1c:47:52:fa:a4:2b:4a:64: 33:f9:f8:8a:79:e4:fb:c5:f6:e1:20:65:ce:d1:04:8b:2c:a0: ef:89:09:79:f8:79:d6:2c:c8:bb:8e:2b:d2:e3:4c:c2:ba:76: 7a:cd:9b:62:6a:20:04:12:6e:89:d3:af:e0:f6:b7:f3:90:2c: 2b:99:75:55:fc:ad:74:74:4d:b7:ec:81:50:ad:cf:72:cb:b5: ea:50:d1:43 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+OBlF78AaImTDlQJGLu+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGM0NGRmZjcxODc5ODYzZWE3MTQ0MjAyM2I3ZjM1NGRjM2RhZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wJxwtkfk8xCvaweN7rJoMWiXDGR /fulRyfchQ3+xlRm2SKBLFxKwJ3Z9U1kDMDfT0USXgdHYoVZYopnJG6SsuIV5/E8 H6UYTDVT5wL2xUMoX+E0/GT7N2lIuL7mF7jUh1xe3/h+wAB05soE/MIWKzhb2ywE KtgDDOOqHAMZH+2nmZpGaOSXw0oH70r4B38R4zvx6pCEdIePir6UoxYjpk7JeU9R qoLamOrP1UeiS81GkjCOnTBBEFLFAHm5KqK+4bTTcCI5m1+6gZ60NK/YLP5mRsHc zrWevWPgQOETTo3d3U9hMIbxFnXRAu/DR6d4Lh/cDFLqmNopshG7pYcJkwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGDETf9xh5hj6nFEICO381TcPa18MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzZjZTk5 NC04ZTk5LTQwZjktYTRlYi1iMmQ3MzY3ODcyN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNmNlOTk0 LThlOTktNDBmOS1hNGViLWIyZDczNjc4NzI3Yi8xL1lNUk5fM0dIbUdQcWNVUWdJ N2Z6Vk53OXJYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW1zEAwQCuVi4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDC2jANBgkqhkiG9w0BAQsFAAOCAQEATXkfazK8glkRZmM5808Q3IuG FxO3ffrvTNsQ85c2iXiqH+fdgiMYs3q6u1/d6kAwJ/0NDFo+0/2GDSCp0JMI/RpI x63hQpIojj3zkKDPqxZ1lAI8EGZQm4nHBv+l//gdrHFWuxSJnrVURhiiCB75TDzK yDGXNTGPP7gPFt+S2dpwr2wAkWOfx4pRFRAvRZXcDnxwUp+L2nNbY5MTKshmvbDS sinYomdIDvD8/BxHUvqkK0pkM/n4innk+8X24SBlztEEiyyg74kJefh51izIu44r 0uNMwrp2es2bYmogBBJuidOv4Pa385AsK5l1VfytdHRNt+yBUK3Pcsu16lDRQw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:58 2026 by rpki-client