This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer (raw, json) Hash identifier: TChGz00aXQQa2I/jyxIw305OH/RXePGIrWpudsxkVJ0= Subject key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB4D8EBB3EA450C11E434A7AC4C311 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35797 AS: 39346 AS: 44682 AS: 47742 IP: 193.111.120.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4d:8e:bb:3e:a4:50:c1:1e:43:4a:7a:c4:c3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6149cbba3e6629beaebfb69668678ada51744898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:ad:df:34:f8:8c:ee:23:67:d4:17:d4:38: b7:1a:6c:b9:5b:96:68:d1:4a:67:c8:15:9d:db:52: ad:82:45:af:29:6c:90:0e:e3:aa:48:68:48:4d:fc: 3a:6a:27:f2:c4:c8:71:a2:b5:cd:58:56:42:77:8d: 3a:2a:c8:7a:0d:54:80:d5:0d:74:83:cf:28:41:a1: 9e:b9:9f:55:d0:30:5f:42:7d:6d:88:71:44:d7:21: fc:7f:b7:69:14:48:a2:c7:c3:64:d7:8b:28:a5:83: e9:5b:9f:51:08:91:bd:c6:b6:83:6d:cb:b1:bb:36: b6:0d:39:44:45:13:e0:fc:6a:09:32:9a:3f:62:4d: 5d:25:89:8f:f3:cf:ff:c5:5b:c8:9f:68:1d:85:04: 1f:86:e3:fe:a0:e9:d2:c2:ef:c6:81:06:f6:24:83: 10:87:07:94:92:3a:33:f6:bd:a8:53:de:f9:87:df: e3:fb:32:07:3f:16:d3:b1:40:b7:e4:b7:44:13:1c: aa:02:6a:c6:a8:a6:b9:04:80:79:09:f9:40:ab:ac: a5:6e:2e:9a:cf:60:a8:63:4e:42:06:33:2e:e0:1d: 61:61:88:66:0b:52:7b:70:cc:de:f5:c1:16:65:a0: df:ac:04:de:d7:43:31:c7:d0:e7:50:e1:d3:9e:76: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.120.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35797 39346 44682 47742 Signature Algorithm: sha256WithRSAEncryption 10:bc:a7:b2:4e:17:3f:aa:bc:09:b7:23:90:6c:96:a3:a1:25: 6b:97:d8:62:17:c7:1f:fe:f1:3f:68:7b:a3:c6:b3:94:7f:95: 05:a3:1c:50:ff:9b:81:0a:00:cd:f0:b0:ec:06:88:28:15:e3: 12:c9:8f:06:eb:cc:28:42:2e:94:37:64:1f:6f:fa:ce:55:88: d4:55:7d:dd:ea:8f:01:13:6b:5e:fe:d7:c5:ef:55:b8:fb:bc: e2:12:a0:f1:a1:75:8a:aa:fd:e8:79:40:47:02:c7:50:d9:e3: ff:14:be:63:78:e4:7c:45:a9:09:30:5e:e0:80:fb:76:1e:72: 97:97:03:f9:27:7d:8c:63:8e:50:5a:c2:21:22:bb:69:9a:9e: 00:9b:8c:de:da:e3:2f:7a:77:51:02:2d:d6:01:0b:87:5a:fd: 19:ac:ce:3b:e2:dd:3d:7c:18:6f:7e:75:b6:97:64:8d:69:f0: 91:17:cd:15:28:55:e5:1e:a5:55:8f:7b:9a:99:81:e3:4a:40: e6:53:73:fa:2e:c6:8b:7d:2c:56:a7:06:6b:7f:f0:38:fc:d2: 0b:f2:49:df:93:b8:48:98:7f:ab:6d:6b:8a:c7:4c:d2:36:49: 1e:1b:33:48:42:55:46:ab:39:8e:44:31:cb:64:40:09:3f:87: 2a:6f:bb:08 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt2602Ouz6kUMEeQ0p6xMMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQ5Y2JiYTNlNjYyOWJlYWViZmI2OTY2ODY3OGFkYTUxNzQ0ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdit3zT4jO4jZ9QX1Di3Gmy5W5Zo 0UpnyBWd21KtgkWvKWyQDuOqSGhITfw6aifyxMhxorXNWFZCd406Ksh6DVSA1Q10 g88oQaGeuZ9V0DBfQn1tiHFE1yH8f7dpFEiix8Nk14sopYPpW59RCJG9xraDbcux uza2DTlERRPg/GoJMpo/Yk1dJYmP88//xVvIn2gdhQQfhuP+oOnSwu/GgQb2JIMQ hweUkjoz9r2oU975h9/j+zIHPxbTsUC35LdEExyqAmrGqKa5BIB5CflAq6ylbi6a z2CoY05CBjMu4B1hYYhmC1J7cMze9cEWZaDfrATe10Mxx9DnUOHTnnYhFQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGFJy7o+Zim+rr+2lmhnitpRdEiYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzIzZjUz Mi1mZTg2LTQxOTgtOGMzYi00ZDQzZjY2YWI3MzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMjNmNTMy LWZlODYtNDE5OC04YzNiLTRkNDNmNjZhYjczMS8xL1lVbkx1ajVtS2I2dXY3YVdh R2VLMmxGMFNKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwW94MCkGCCsGAQUFBwEIAQH/BBowGKAWMBQC AwCL1QIDAJmyAgMArooCAwC6fjANBgkqhkiG9w0BAQsFAAOCAQEAELynsk4XP6q8 CbcjkGyWo6Ela5fYYhfHH/7xP2h7o8azlH+VBaMcUP+bgQoAzfCw7AaIKBXjEsmP BuvMKEIulDdkH2/6zlWI1FV93eqPARNrXv7Xxe9VuPu84hKg8aF1iqr96HlARwLH UNnj/xS+Y3jkfEWpCTBe4ID7dh5yl5cD+Sd9jGOOUFrCISK7aZqeAJuM3trjL3p3 UQIt1gELh1r9GazOO+LdPXwYb351tpdkjWnwkRfNFShV5R6lVY97mpmB40pA5lNz +i7Gi30sVqcGa3/wOPzSC/JJ35O4SJh/q21risdM0jZJHhszSEJVRqs5jkQxy2RA CT+HKm+7CA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:36 2026 by rpki-client