This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer File: YYzEbXHnhIl4SIlh17UauhVB88Q.cer (raw, json) Hash identifier: U+mmqt79JXtmZ0F9+TnYymeZRIiCAz70ckpAWS2atd8= Subject key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4FE6DF60958582D89DDC7110F324D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49469 IP: 46.30.152.0/21 IP: 89.184.0.0/19 IP: 193.222.251.0/24 IP: 193.223.69.0/24 IP: 193.223.103.0/24 IP: 193.223.108.0/24 IP: 195.248.71.0/24 IP: 2a01:96c0::/29 IP: 2a0c:c240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:fe:6d:f6:09:58:58:2d:89:dd:c7:11:0f:32:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=618cc46d71e7848978488961d7b51aba1541f3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:1c:dc:f5:ad:17:16:ee:ac:62:1b:ba:06: c1:5a:02:c0:98:45:a0:07:96:35:75:7f:92:d5:c5: 48:12:cc:33:b8:92:a2:d3:5e:76:a1:7b:87:6f:b0: 01:ca:89:43:be:ce:2a:c7:cb:14:19:91:1a:df:de: 56:86:f4:4c:6f:bc:26:17:5f:f9:4a:7e:0e:52:de: e5:bb:29:f4:e9:ae:f0:56:b0:68:9e:f9:1d:7a:ab: b2:a4:13:b9:d9:a5:81:dd:ad:5e:3b:e0:9d:5c:f3: 94:01:88:6e:f7:da:7c:9d:b4:52:b5:e6:9e:63:b1: 6d:23:3a:07:f3:8b:de:20:8b:bf:46:0e:01:71:f4: 6d:23:e7:c5:5a:e8:22:5e:1c:63:ac:10:bf:ea:7b: 7e:a2:37:ed:7a:ea:4c:12:15:93:9d:30:9f:6d:38: cb:51:29:83:86:04:f3:3a:d2:c1:42:38:21:fa:03: ae:65:5c:fa:d4:6c:a8:61:b4:71:20:c6:34:8c:26: 69:07:a2:96:86:1d:d5:12:e6:95:04:63:7c:be:d0: 0b:ed:3a:70:77:64:11:66:d1:a1:c6:e6:22:2e:b4: 87:5b:9f:c6:59:dc:f7:be:c6:50:b5:a3:36:0b:88: b1:3e:2a:3a:b3:d1:35:ac:10:c7:0c:90:4b:79:ba: 28:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.152.0/21 89.184.0.0/19 193.222.251.0/24 193.223.69.0/24 193.223.103.0/24 193.223.108.0/24 195.248.71.0/24 IPv6: 2a01:96c0::/29 2a0c:c240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49469 Signature Algorithm: sha256WithRSAEncryption 22:da:a1:52:80:53:cd:34:11:04:45:c4:46:ea:69:de:86:d6: 90:87:b8:d0:df:97:81:52:59:37:2c:12:77:93:08:10:e7:a9: 2a:69:7b:13:e3:5c:ca:a2:44:02:93:2a:f5:de:c8:0d:7e:18: 56:b9:99:c1:69:f0:23:ea:96:14:8e:2e:ec:01:45:0c:df:a7: 36:08:5c:da:10:3c:53:d3:19:52:0a:5e:c4:09:65:b2:db:fb: 61:41:24:4f:36:97:d3:8f:fb:07:ee:85:f3:1a:ab:2e:67:82: 64:f8:45:9a:c9:d9:14:56:ac:fd:68:a8:e8:47:e4:2e:a9:14: 15:ef:a0:b2:7a:0c:ae:ae:ba:16:b5:22:cd:b4:9b:2d:97:45: 92:57:02:05:45:67:d4:78:65:ef:2a:24:79:c5:41:9d:bd:e9: b0:e8:62:05:b1:6e:1f:5d:cc:57:b0:0a:05:b9:ef:6d:f3:3a: 3e:60:73:bb:9e:de:24:1c:12:c3:6f:37:4e:ce:07:0e:d7:d3: 01:b5:4f:c9:f6:53:f4:65:d5:29:66:1d:81:f5:65:28:67:87: 9d:c4:e4:d5:aa:3b:b7:37:17:e8:9b:b0:41:c9:11:fe:ea:81: 8e:67:0c:41:f1:0d:dd:51:9b:0f:80:62:30:a3:b1:8f:aa:94: 45:bc:c1:4a -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt+pP5t9glYWC2J3ccRDzJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MThjYzQ2ZDcxZTc4NDg5Nzg0ODg5NjFkN2I1MWFiYTE1NDFmM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8kc3PWtFxburGIbugbBWgLAmEWg B5Y1dX+S1cVIEswzuJKi0152oXuHb7AByolDvs4qx8sUGZEa395WhvRMb7wmF1/5 Sn4OUt7luyn06a7wVrBonvkdequypBO52aWB3a1eO+CdXPOUAYhu99p8nbRSteae Y7FtIzoH84veIIu/Rg4BcfRtI+fFWugiXhxjrBC/6nt+ojfteupMEhWTnTCfbTjL USmDhgTzOtLBQjgh+gOuZVz61GyoYbRxIMY0jCZpB6KWhh3VEuaVBGN8vtAL7Tpw d2QRZtGhxuYiLrSHW5/GWdz3vsZQtaM2C4ixPio6s9E1rBDHDJBLebooeQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFGGMxG1x54SJeEiJYde1GroVQfPEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzEyNzQz MC1kNGU4LTRkYTMtYmVhMi00ZWYxOWNjYzU3ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvMTI3NDMw LWQ0ZTgtNGRhMy1iZWEyLTRlZjE5Y2NjNTdkMC8xL1lZekViWEhuaElsNFNJbGgx N1VhdWhWQjg4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQDLh6YAwQFWbgAAwQAwd77AwQAwd9FAwQAwd9n AwQAwd9sAwQAw/hHMBQEAgACMA4DBQMqAZbAAwUDKgzCQDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMAwT0wDQYJKoZIhvcNAQELBQADggEBACLaoVKAU800EQRFxEbq ad6G1pCHuNDfl4FSWTcsEneTCBDnqSppexPjXMqiRAKTKvXeyA1+GFa5mcFp8CPq lhSOLuwBRQzfpzYIXNoQPFPTGVIKXsQJZbLb+2FBJE82l9OP+wfuhfMaqy5ngmT4 RZrJ2RRWrP1oqOhH5C6pFBXvoLJ6DK6uuha1Is20my2XRZJXAgVFZ9R4Ze8qJHnF QZ296bDoYgWxbh9dzFewCgW5723zOj5gc7ue3iQcEsNvN07OBw7X0wG1T8n2U/Rl 1SlmHYH1ZShnh53E5NWqO7c3F+ibsEHJEf7qgY5nDEHxDd1Rmw+AYjCjsY+qlEW8 wUo= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:31 2026 by rpki-client