This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer File: YQfi4ugXHTGdobxks2w8mF5kbCo.cer (raw, json) Hash identifier: noMoxIV83A66/HVybPH3kGKAroJrMLJYAtqDGDyoFNo= Subject key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECE907E792E89B6F885AED74DBEDC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42868 IP: 46.235.8.0/24 IP: 46.235.10.0/23 IP: 77.245.144.0/20 IP: 178.210.169.0/24 IP: 185.87.252.0/22 IP: 2a05:c640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e9:07:e7:92:e8:9b:6f:88:5a:ed:74:db:ed:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:e9:bc:c5:01:c1:19:3d:25:89:02:bc:f0: 9b:5b:0a:b5:46:6f:88:a2:cd:b0:a1:d5:26:f9:58: a5:81:01:cc:bf:7b:5e:fc:1e:ba:aa:c3:32:ac:92: 51:2d:88:87:6a:dd:5a:b0:40:74:58:b0:ea:66:7d: 60:3d:5c:31:b3:36:5c:bb:62:da:b7:54:e8:d2:0b: 78:84:a5:6e:74:39:04:de:3f:20:32:e0:75:9b:b2: ed:08:9e:14:a5:09:a5:90:5b:bc:b8:ce:fe:5c:28: 4c:ee:2b:03:b2:48:da:c1:90:88:ca:48:12:0a:a9: 05:61:0b:c7:4c:95:ed:1f:77:81:9f:5a:83:b7:7a: 40:09:55:21:51:53:4e:ae:e5:84:91:f6:7d:48:80: e1:2f:23:58:54:36:59:3a:7b:58:02:7f:49:89:b9: f3:70:77:32:d3:00:d5:c2:16:b3:94:62:58:66:34: 58:4f:9b:9e:a8:4b:ba:4c:de:b2:fc:17:e3:4d:e6: 9d:69:1f:c3:5c:b9:4f:aa:2f:11:eb:dc:d2:af:d2: 2c:2c:23:0a:8c:c5:3b:2f:c6:c5:41:e7:e7:56:9f: 84:41:3a:cd:34:d8:25:4c:0b:96:c3:e3:5d:56:9d: f5:3a:c0:5d:f5:47:4a:ae:59:5b:c6:af:4d:3e:4a: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.8.0/24 46.235.10.0/23 77.245.144.0/20 178.210.169.0/24 185.87.252.0/22 IPv6: 2a05:c640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42868 Signature Algorithm: sha256WithRSAEncryption 3e:b2:72:df:50:bb:30:41:36:40:4d:87:bf:b1:a2:f0:f0:d5: b1:eb:df:c7:00:04:8e:53:b8:59:ac:77:4b:62:10:ad:86:f7: 38:b4:23:7f:b9:27:9a:3e:b9:60:04:c2:2e:8e:fc:61:2e:c1: c3:60:87:0c:ff:96:f8:10:b5:12:0e:8c:9e:99:d1:ec:94:84: 56:bc:d6:2d:c6:d2:40:3e:c0:7d:dc:74:0c:f9:f8:32:e4:19: 87:92:a0:9d:7b:f4:45:e7:3e:f3:1d:16:71:d2:41:1b:31:be: 4b:d0:c0:25:aa:6b:d1:30:89:c4:49:cd:b4:07:8f:c8:a9:5e: 51:b0:73:c4:12:3f:cd:03:89:07:1b:64:9f:e1:27:55:05:f6: e9:9d:f4:07:2e:61:44:2d:99:52:bb:23:c4:2a:07:fe:a3:40: 63:5d:0b:e2:dd:8e:87:11:18:e7:ff:df:e5:02:65:de:22:de: 54:2a:e7:f2:7b:ea:d3:fd:64:be:af:c1:6c:c7:19:ef:8d:d3: 18:20:a0:e1:cf:3b:93:d6:a2:e7:b9:05:89:8a:68:5c:44:3f: 51:bf:29:c0:c6:93:62:79:08:a8:4b:02:1e:b0:7c:fc:bd:c8: 28:c3:3f:d1:e1:32:15:49:0b:db:4b:81:35:70:47:a5:d1:30: 6c:b7:a7:5c -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt57OkH55Lom2+IWu102+3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTA3ZTJlMmU4MTcxZDMxOWRhMWJjNjRiMzZjM2M5ODVlNjQ2YzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8fpvMUBwRk9JYkCvPCbWwq1Rm+I os2wodUm+VilgQHMv3te/B66qsMyrJJRLYiHat1asEB0WLDqZn1gPVwxszZcu2La t1To0gt4hKVudDkE3j8gMuB1m7LtCJ4UpQmlkFu8uM7+XChM7isDskjawZCIykgS CqkFYQvHTJXtH3eBn1qDt3pACVUhUVNOruWEkfZ9SIDhLyNYVDZZOntYAn9Jibnz cHcy0wDVwhazlGJYZjRYT5ueqEu6TN6y/BfjTeadaR/DXLlPqi8R69zSr9IsLCMK jMU7L8bFQefnVp+EQTrNNNglTAuWw+NdVp31OsBd9UdKrllbxq9NPkrwlQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFGEH4uLoFx0xnaG8ZLNsPJheZGwqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2IwN2U1 OC1mOTNhLTRkNWYtYjkyZC02MDE2ZDVjMDVmMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYjA3ZTU4 LWY5M2EtNGQ1Zi1iOTJkLTYwMTZkNWMwNWYzMC8xL1lRZmk0dWdYSFRHZG9ieGtz Mnc4bUY1a2JDby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQALusIAwQBLusKAwQETfWQAwQAstKpAwQCuVf8 MA0EAgACMAcDBQMqBcZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCndDANBgkq hkiG9w0BAQsFAAOCAQEAPrJy31C7MEE2QE2Hv7Gi8PDVsevfxwAEjlO4Wax3S2IQ rYb3OLQjf7knmj65YATCLo78YS7Bw2CHDP+W+BC1Eg6MnpnR7JSEVrzWLcbSQD7A fdx0DPn4MuQZh5KgnXv0Rec+8x0WcdJBGzG+S9DAJapr0TCJxEnNtAePyKleUbBz xBI/zQOJBxtkn+EnVQX26Z30By5hRC2ZUrsjxCoH/qNAY10L4t2OhxEY5//f5QJl 3iLeVCrn8nvq0/1kvq/BbMcZ743TGCCg4c87k9ai57kFiYpoXEQ/Ub8pwMaTYnkI qEsCHrB8/L3IKMM/0eEyFUkL20uBNXBHpdEwbLenXA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:23 2026 by rpki-client