This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer (raw, json) Hash identifier: 5yKqfQdgZ58PryUKvtio4IiZHI531tb2fbPfIIf8/pk= Subject key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC3A82F67159DC5AEA3B4034BAFEE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59494 IP: 185.145.140.0/22 IP: 193.187.80.0/23 IP: 2a07:4480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3a:82:f6:71:59:dc:5a:ea:3b:40:34:ba:fe:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:ed:29:34:9b:17:77:c1:ba:ca:7b:cf:d8: fe:83:d8:8c:17:44:80:6b:25:dd:c7:14:8e:55:7d: 17:c3:ec:07:d3:b7:fc:46:16:3f:83:4b:ee:63:f4: 37:df:3c:87:8e:32:ab:1a:7d:87:11:2d:57:e0:3f: 9b:ab:c5:8e:7a:49:79:9c:ab:50:43:c1:7b:09:da: 47:2a:79:5b:7e:fa:00:d5:33:06:b6:b7:b0:73:f5: a2:c9:41:03:c3:36:42:74:91:da:c6:88:35:2f:b8: dc:c0:c6:e2:b2:fc:4b:58:76:f8:44:00:e4:34:85: c1:fa:cf:e3:e1:73:0f:ed:d1:f0:ce:99:20:49:ad: 61:74:7a:48:4d:1e:ac:89:00:c7:a7:12:98:55:52: d1:5c:97:44:94:87:a6:ee:f0:12:e3:58:71:86:61: ef:c4:77:d6:0e:ed:17:f2:2e:c9:f4:94:00:cb:65: 42:e2:f5:3e:e6:26:f9:0c:54:e8:4a:25:d6:a5:c1: 57:dd:95:e4:fc:1b:fd:39:98:c9:d6:a5:91:97:40: e3:9f:4b:14:f6:58:45:35:ce:60:b7:bd:4f:3e:ad: b4:5e:a0:3b:e6:ea:1f:06:1d:31:2d:be:47:b0:9f: d9:60:16:4f:20:b2:b4:72:bf:48:61:ef:14:68:45: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.140.0/22 193.187.80.0/23 IPv6: 2a07:4480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59494 Signature Algorithm: sha256WithRSAEncryption aa:62:61:48:f8:c4:7f:3c:b0:67:32:44:ea:f2:b7:2a:f0:e8: 9f:b3:e8:1f:61:e8:19:a4:c9:21:e6:3c:16:d1:a4:94:6e:38: d3:6f:37:f4:bd:7f:dd:fe:ee:2b:43:ae:00:5f:5b:48:2d:56: 88:48:85:92:dd:28:68:91:4f:4b:cc:ec:98:79:7e:a1:a6:14: 7d:09:f2:79:c5:b2:85:cb:e7:12:be:2b:5e:d9:da:fc:58:89: 31:07:92:e0:8e:ca:70:5d:32:22:3d:a8:de:32:e9:02:23:21: 35:54:3e:d2:1c:38:ea:fe:89:6c:a6:ea:ba:76:6e:76:16:9f: c3:49:db:22:24:60:97:8d:fc:61:d1:57:11:f5:6c:56:7a:8c: 06:bc:66:e7:71:a4:b5:e5:2e:71:9a:51:5f:31:58:cd:79:d8: 12:59:50:9f:76:ed:ad:67:fd:81:32:ed:c8:36:80:ec:5e:40: 1e:61:e4:13:49:93:6f:8b:27:e5:e7:5f:af:91:d8:be:2a:f5: a0:a4:d6:61:ff:29:e2:34:24:9b:75:35:7f:39:91:c1:a6:96: 94:43:2f:3e:78:d5:ca:58:0a:3e:60:2f:e6:d8:c5:32:d3:97: ac:68:b0:45:e8:c5:cb:09:a5:08:85:21:c5:7a:6a:39:e7:02: ff:38:c5:44 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57DqC9nFZ3FrqO0A0uv7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTJhZWY0YzdiZmU3ZTA3MmY2MmQyZGQ1MDVhYjU3ZTM3ZWEzODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV7tKTSbF3fBusp7z9j+g9iMF0SA ayXdxxSOVX0Xw+wH07f8RhY/g0vuY/Q33zyHjjKrGn2HES1X4D+bq8WOekl5nKtQ Q8F7CdpHKnlbfvoA1TMGtrewc/WiyUEDwzZCdJHaxog1L7jcwMbisvxLWHb4RADk NIXB+s/j4XMP7dHwzpkgSa1hdHpITR6siQDHpxKYVVLRXJdElIem7vAS41hxhmHv xHfWDu0X8i7J9JQAy2VC4vU+5ib5DFToSiXWpcFX3ZXk/Bv9OZjJ1qWRl0Djn0sU 9lhFNc5gt71PPq20XqA75uofBh0xLb5HsJ/ZYBZPILK0cr9IYe8UaEUn+wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGEq70x7/n4HL2LS3VBatX436jheMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzcyMDdh OS0yN2Y0LTQ0ZWMtYmY3OC1hMjA3YzdhMTllZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNzIwN2E5 LTI3ZjQtNDRlYy1iZjc4LWEyMDdjN2ExOWVkMi8xL1lTcnZUSHYtZmdjdll0TGRV RnExZmpmcU9GNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuZGMAwQBwbtQMA0EAgACMAcDBQMqB0SAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoZjANBgkqhkiG9w0BAQsFAAOCAQEAqmJh SPjEfzywZzJE6vK3KvDon7PoH2HoGaTJIeY8FtGklG4402839L1/3f7uK0OuAF9b SC1WiEiFkt0oaJFPS8zsmHl+oaYUfQnyecWyhcvnEr4rXtna/FiJMQeS4I7KcF0y Ij2o3jLpAiMhNVQ+0hw46v6JbKbqunZudhafw0nbIiRgl438YdFXEfVsVnqMBrxm 53GkteUucZpRXzFYzXnYEllQn3btrWf9gTLtyDaA7F5AHmHkE0mTb4sn5edfr5HY vir1oKTWYf8p4jQkm3U1fzmRwaaWlEMvPnjVylgKPmAv5tjFMtOXrGiwRejFywml CIUhxXpqOecC/zjFRA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:06 2026 by rpki-client