This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer (raw, json) Hash identifier: eAoLe4ZqYAbunylDNEHzESEIiNzdSaK1+ZIn2UUl+9U= Subject key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E125DAE54916DFAA98DE259BE183 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 79.142.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e1:25:da:e5:49:16:df:aa:98:de:25:9b:e1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=614799c67c08547d80bb35d02dae505d5a65dc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:f0:5a:d0:15:fb:95:92:73:bd:95:4d:2b: 12:4e:ee:f8:9f:31:ba:95:ae:f5:2c:c9:e0:3c:02: e1:ef:0a:bb:58:a5:7a:bf:2b:e1:e0:af:e0:9e:c0: 0b:c5:25:7b:c5:5c:82:39:ea:1f:44:fb:e2:88:2e: c4:76:ba:97:c3:de:48:80:8c:4b:37:83:37:70:ed: 5e:a7:0d:b7:ea:eb:7f:f9:23:e1:b4:98:0f:26:ee: 9b:bc:d2:13:b6:69:e8:ac:66:90:75:0b:1a:df:7d: 0f:93:47:02:06:c6:dc:a3:45:c2:f8:8f:cc:48:19: 8a:63:7d:2a:af:6d:20:10:0a:8b:9b:cc:ae:e9:f9: 4a:bc:ae:c8:cd:98:2f:2c:36:5a:8c:24:bb:78:98: 8f:98:6f:22:97:03:28:0d:2f:bb:be:d2:f4:e0:3f: 84:8e:4e:85:00:30:03:7f:e3:b7:bc:ea:e2:7d:de: e4:1f:a6:fe:13:70:74:9c:99:5e:27:2a:5d:5d:aa: aa:15:bd:df:0d:cd:70:27:42:b2:40:ee:00:f0:ea: 70:42:0d:b5:01:25:08:9f:46:55:a0:d4:84:b7:74: 44:45:e8:c9:70:fb:9f:5f:c3:48:3d:cf:ad:01:e2: 76:0d:73:bf:17:4c:3f:57:be:ed:28:08:ab:92:be: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.142.188.0/22 Signature Algorithm: sha256WithRSAEncryption 88:4c:8f:46:14:9d:6f:95:e9:ef:65:03:9a:e1:a1:61:10:48: a7:7f:d5:83:84:ea:3f:ed:9d:c3:29:7d:5e:00:04:84:6b:8d: 78:5b:48:9f:1a:94:e0:c0:c5:e6:61:6c:af:f3:f5:ea:57:20: a7:f3:0a:0d:b7:c7:62:24:4b:5b:05:7e:32:d0:dd:d2:62:91: 9b:bf:9a:39:6a:1a:0f:b9:81:a6:67:bb:96:bb:7d:15:6f:12: e3:2d:db:8d:ba:b9:75:9a:c8:bb:a8:88:6e:9c:d4:25:d3:cf: 64:e0:fd:fd:b8:d6:02:ba:f3:70:90:55:25:53:99:9f:a4:ff: 78:47:9b:5b:da:10:b2:d2:36:5d:25:5d:14:98:8a:42:9c:8c: 37:dc:02:43:36:a0:27:94:73:b4:c0:1d:f2:7d:f3:18:8d:c0: c9:86:d0:b9:64:80:30:89:d6:fc:f0:d7:2d:b3:43:60:20:83: c3:de:83:fa:a1:5f:ee:e1:8e:46:28:2f:18:16:39:3a:57:1b: ab:13:0a:06:47:74:65:28:55:7c:5c:4d:49:39:3b:c6:d6:fa: c1:0e:45:bd:5a:0b:df:b6:d2:a6:b3:3c:28:44:d8:78:ef:b3: df:dc:8c:0e:e4:cf:a2:a8:a6:15:30:56:84:4b:1a:03:b8:c9: 7b:b2:1c:ca -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WOEl2uVJFt+qmN4lm+GDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQ3OTljNjdjMDg1NDdkODBiYjM1ZDAyZGFlNTA1ZDVhNjVkYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiHwWtAV+5WSc72VTSsSTu74nzG6 la71LMngPALh7wq7WKV6vyvh4K/gnsALxSV7xVyCOeofRPviiC7EdrqXw95IgIxL N4M3cO1epw236ut/+SPhtJgPJu6bvNITtmnorGaQdQsa330Pk0cCBsbco0XC+I/M SBmKY30qr20gEAqLm8yu6flKvK7IzZgvLDZajCS7eJiPmG8ilwMoDS+7vtL04D+E jk6FADADf+O3vOrifd7kH6b+E3B0nJleJypdXaqqFb3fDc1wJ0KyQO4A8OpwQg21 ASUIn0ZVoNSEt3RERejJcPufX8NIPc+tAeJ2DXO/F0w/V77tKAirkr7r9wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGFHmcZ8CFR9gLs10C2uUF1aZdxbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2Y3Yzlk MS0wZjViLTQyZjUtOTMxZC0xZGMwYjg0YTFjN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvZjdjOWQx LTBmNWItNDJmNS05MzFkLTFkYzBiODRhMWM3ZS8xL1lVZVp4bndJVkgyQXV6WFFM YTVRWFZwbDNGcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCT468MA0GCSqGSIb3DQEBCwUAA4IBAQCITI9G FJ1vlenvZQOa4aFhEEinf9WDhOo/7Z3DKX1eAASEa414W0ifGpTgwMXmYWyv8/Xq VyCn8woNt8diJEtbBX4y0N3SYpGbv5o5ahoPuYGmZ7uWu30VbxLjLduNurl1msi7 qIhunNQl089k4P39uNYCuvNwkFUlU5mfpP94R5tb2hCy0jZdJV0UmIpCnIw33AJD NqAnlHO0wB3yffMYjcDJhtC5ZIAwidb88Ncts0NgIIPD3oP6oV/u4Y5GKC8YFjk6 VxurEwoGR3RlKFV8XE1JOTvG1vrBDkW9WgvfttKmszwoRNh477Pf3IwO5M+iqKYV MFaESxoDuMl7shzK -----END CERTIFICATE-----Generated at Mon Jan 26 02:45:45 2026 by rpki-client