This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer File: YYcWngMONyXW60eKMn5r3za-jS8.cer (raw, json) Hash identifier: Un77+S/HY13ZNIZialJNeQGPGdV0U/DsvbecZ/lkVb4= Subject key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECAAE7A036B85E633189286F6E4D5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207911 IP: 2001:678:10d8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:aa:e7:a0:36:b8:5e:63:31:89:28:6f:6e:4d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:39:b6:1f:63:1b:ed:27:9b:22:69:b9:14: f2:0c:06:fe:de:a0:c6:6b:3e:99:73:d5:dd:84:ad: 44:47:54:dd:64:42:2f:8b:7e:5d:14:83:91:77:0d: d1:31:54:a1:cc:b1:1a:73:5d:66:1a:45:b8:9d:d2: bc:01:f6:5c:4e:96:5f:45:d8:f8:63:aa:27:04:64: c0:4c:f9:2a:78:ab:b0:9c:dd:af:c5:7a:41:ef:78: c4:5b:b9:9f:32:24:47:af:fc:b2:fd:04:e7:7b:fe: 28:c0:95:65:20:43:75:3d:53:92:e1:71:b2:07:65: 6f:d0:cb:17:ae:64:a6:96:c7:20:7e:13:d1:95:d1: 01:36:69:b5:c6:12:13:6e:78:8e:25:ec:f6:ce:de: 7a:7e:9e:c4:e3:bd:6c:24:fb:8f:ce:5f:6e:07:2b: 9b:6d:60:c9:4b:70:d0:28:af:65:8c:3b:84:b1:45: 85:a0:fe:e4:fb:cc:bf:44:cc:59:da:8b:58:6b:74: 3c:4b:30:29:97:39:db:f9:6a:50:66:d6:73:c4:db: 49:9f:93:0d:74:bf:f3:1f:98:dc:fa:02:c2:27:ac: d1:8a:2d:e6:10:c8:a1:0e:34:78:51:36:6c:84:61: 6b:5f:92:10:60:4a:c8:57:8c:d6:51:68:8d:6f:98: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:10d8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207911 Signature Algorithm: sha256WithRSAEncryption 9b:97:e1:91:cd:68:4c:c6:8b:77:09:13:01:49:f1:aa:75:39: 0e:d3:0b:2d:05:dc:49:05:3e:eb:90:78:7b:2b:05:cc:5c:4a: fe:01:74:1e:9e:4b:8d:2d:3b:aa:91:db:d1:db:85:2b:8a:77: 55:6b:3c:e6:be:cc:2f:2e:b3:9f:00:50:85:33:57:50:b3:0b: 58:c4:08:65:32:ff:0d:56:32:7c:61:4d:7b:1e:90:c0:30:26: 7d:26:47:d7:fc:be:4f:33:af:24:fd:bd:51:6f:60:c4:63:eb: d6:de:3f:2b:e9:7c:a1:64:07:2f:84:cd:bc:a1:8d:d1:1d:1c: 22:b6:35:12:c9:82:2f:97:a9:cf:6c:8a:11:9b:8a:94:5b:59: 54:ba:9b:21:6d:45:d5:6a:00:36:22:c8:69:47:ba:bd:28:c6: 7e:1c:a5:89:7e:e6:4b:e6:3b:05:53:05:59:fe:17:a9:f4:46: b6:39:b7:e5:59:7c:39:95:26:c8:fb:1c:9b:67:00:e5:d4:14: 71:f7:9a:f6:56:f1:6f:78:67:b5:d0:36:51:9e:69:c4:2a:2b: 0d:60:a0:c4:b7:25:b6:c1:37:d4:e2:39:c0:48:07:5b:22:18: ef:77:ed:af:1a:7c:a1:ed:df:a0:91:1a:4c:b6:a0:e7:88:21: 76:6b:85:ff -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt57KrnoDa4XmMxiShvbk1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTg3MTY5ZTAzMGUzNzI1ZDZlYjQ3OGEzMjdlNmJkZjM2YmU4ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgM5th9jG+0nmyJpuRTyDAb+3qDG az6Zc9XdhK1ER1TdZEIvi35dFIORdw3RMVShzLEac11mGkW4ndK8AfZcTpZfRdj4 Y6onBGTATPkqeKuwnN2vxXpB73jEW7mfMiRHr/yy/QTne/4owJVlIEN1PVOS4XGy B2Vv0MsXrmSmlscgfhPRldEBNmm1xhITbniOJez2zt56fp7E471sJPuPzl9uByub bWDJS3DQKK9ljDuEsUWFoP7k+8y/RMxZ2otYa3Q8SzAplznb+WpQZtZzxNtJn5MN dL/zH5jc+gLCJ6zRii3mEMihDjR4UTZshGFrX5IQYErIV4zWUWiNb5hzNQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFGGHFp4DDjcl1utHijJ+a982vo0vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzc2MTll Yy01NDM4LTQ1NTItYWJhYi00ODBkZjhmNDFlNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvNzYxOWVj LTU0MzgtNDU1Mi1hYmFiLTQ4MGRmOGY0MWU0NC8xL1lZY1duZ01PTnlYVzYwZUtN bjVyM3phLWpTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBDYMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMsJzANBgkqhkiG9w0BAQsFAAOCAQEAm5fhkc1oTMaLdwkTAUnxqnU5DtML LQXcSQU+65B4eysFzFxK/gF0Hp5LjS07qpHb0duFK4p3VWs85r7MLy6znwBQhTNX ULMLWMQIZTL/DVYyfGFNex6QwDAmfSZH1/y+TzOvJP29UW9gxGPr1t4/K+l8oWQH L4TNvKGN0R0cIrY1EsmCL5epz2yKEZuKlFtZVLqbIW1F1WoANiLIaUe6vSjGfhyl iX7mS+Y7BVMFWf4XqfRGtjm35Vl8OZUmyPscm2cA5dQUcfea9lbxb3hntdA2UZ5p xCorDWCgxLcltsE31OI5wEgHWyIY73ftrxp8oe3foJEaTLag54ghdmuF/w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:50 2026 by rpki-client