This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer (raw, json) Hash identifier: aQA5LtnlstdnaxxJiGc1coGa9uJ2jNiC0Pvqm65yfKg= Subject key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110576E8287E7C9BC0E77D9ABEE528 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.157.48.0/20 IP: 185.239.68.0/22 IP: 212.50.224.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:05:76:e8:28:7e:7c:9b:c0:e7:7d:9a:be:e5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:eb:fa:8e:5a:9b:1c:3c:f0:fe:e0:a2:2d: bf:77:bc:05:d6:ab:6f:b7:e8:84:97:39:17:cb:38: f5:c2:00:aa:5e:5e:16:a1:f9:08:24:8c:cc:96:9d: 6d:88:d0:17:8b:fe:be:38:52:5a:2f:63:0a:3e:88: 19:b5:a4:fc:06:a8:07:72:76:40:b9:9d:3a:d0:de: 4d:68:ea:53:36:58:8d:ac:ca:fd:b1:e8:39:c7:12: 69:f3:a7:2d:15:98:d4:26:8c:1e:7f:23:b4:d0:7d: f7:f2:fa:c3:c3:b1:d2:d1:e3:bf:ce:2b:a1:72:69: ae:3e:e9:c5:8f:19:d9:22:5e:f9:8f:b3:cd:a6:7c: 85:63:61:db:86:68:6c:cd:b7:15:f9:e2:ed:63:17: 0a:e8:b3:71:98:3d:04:c3:c5:0b:64:03:9e:2f:9d: 5e:aa:d1:4d:44:10:ad:d7:16:1e:b3:00:50:0e:ff: 41:6c:b7:b2:16:a6:cb:2f:55:c2:45:e5:5e:41:2b: 35:d4:0d:11:3e:b3:9b:fe:bc:3c:9a:c0:c2:0c:e3: 16:c2:91:b1:1a:bd:2a:46:ee:95:4f:7d:42:0c:1b: b4:85:2e:70:d8:2a:4f:09:fd:97:df:1a:93:36:b9: 08:20:54:23:aa:dc:8e:34:5f:97:44:86:0a:e8:07: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.157.48.0/20 185.239.68.0/22 212.50.224.0/19 Signature Algorithm: sha256WithRSAEncryption 46:46:ed:90:f3:95:80:41:f3:21:3f:e3:53:b0:71:ac:1a:c9: 06:88:b5:44:ff:e8:94:63:20:54:e2:1f:60:f3:fe:bb:43:e9: 3b:d2:ae:c7:34:63:ab:80:86:64:31:42:b2:08:ad:05:ff:f0: 8f:4d:6f:ee:0a:53:a7:b2:4f:39:c0:2f:3b:55:37:da:f0:27: 40:c5:08:42:94:2a:2e:90:dc:be:58:d3:8d:a9:d2:ac:58:9e: 72:72:aa:17:26:cb:04:86:80:bb:29:8a:74:44:bc:42:40:20: 25:85:3e:a7:cc:71:1c:74:30:a4:cc:8b:a1:7c:50:5a:35:54: bd:03:0d:a5:93:db:8e:fd:eb:10:c2:c4:51:31:6c:1e:ed:e8: f1:b2:2f:25:b7:10:4b:db:df:e2:e3:ab:de:b6:7e:b3:23:8b: 77:23:ba:29:99:9f:49:57:17:8e:a3:12:9e:01:6d:6d:bb:3d: 6c:c3:cd:77:d1:b6:9d:a4:3f:ff:86:eb:f4:ea:64:96:b6:62: 16:a7:0a:ea:cb:17:7b:6e:53:29:04:52:e2:cb:0a:64:3d:72: 3e:d1:44:3f:32:69:e9:52:57:00:82:3f:85:d8:35:72:d3:c2: da:7f:e8:9d:0a:2b:d5:b9:b7:60:f8:aa:be:9e:ce:0e:10:d6: 71:1c:6e:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt5EQV26Ch+fJvA532avuUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGRhZDk1YmEyYjFlYjNkZDc3MzgwMDJmYzY4YWE5NTU4OGMzYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIPr+o5amxw88P7goi2/d7wF1qtv t+iElzkXyzj1wgCqXl4WofkIJIzMlp1tiNAXi/6+OFJaL2MKPogZtaT8BqgHcnZA uZ060N5NaOpTNliNrMr9seg5xxJp86ctFZjUJowefyO00H338vrDw7HS0eO/ziuh cmmuPunFjxnZIl75j7PNpnyFY2HbhmhszbcV+eLtYxcK6LNxmD0Ew8ULZAOeL51e qtFNRBCt1xYeswBQDv9BbLeyFqbLL1XCReVeQSs11A0RPrOb/rw8msDCDOMWwpGx Gr0qRu6VT31CDBu0hS5w2CpPCf2X3xqTNrkIIFQjqtyONF+XRIYK6Adj+wIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFGDa2Vuises913OAAvxoqpVYjDvxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzQ0OGJh MC1hNDM4LTRmNTktODg1Yi00MjE4YjJiNjk2M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvNDQ4YmEw LWE0MzgtNGY1OS04ODViLTQyMThiMmI2OTYzYS8xL1lOclpXNkt4NnozWGM0QUNf R2lxbFZpTU9fRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEsp0wAwQCue9EAwQF1DLgMA0GCSqGSIb3DQEB CwUAA4IBAQBGRu2Q85WAQfMhP+NTsHGsGskGiLVE/+iUYyBU4h9g8/67Q+k70q7H NGOrgIZkMUKyCK0F//CPTW/uClOnsk85wC87VTfa8CdAxQhClCoukNy+WNONqdKs WJ5ycqoXJssEhoC7KYp0RLxCQCAlhT6nzHEcdDCkzIuhfFBaNVS9Aw2lk9uO/esQ wsRRMWwe7ejxsi8ltxBL29/i46vetn6zI4t3I7opmZ9JVxeOoxKeAW1tuz1sw813 0badpD//huv06mSWtmIWpwrqyxd7blMpBFLiywpkPXI+0UQ/MmnpUlcAgj+F2DVy 08Laf+idCivVubdg+Kq+ns4OENZxHG4b -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:57 2026 by rpki-client