This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer (raw, json) Hash identifier: xWMcjL3ihZKbPW7fchrwKeP+O2hDKoHassiV9BziKDI= Subject key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D4204D90DABFF758CB4BC6B6ABC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.238.142.0/23 IP: 193.9.127.0/24 IP: 195.78.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d4:20:4d:90:da:bf:f7:58:cb:4b:c6:b6:ab:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:07:27:3b:d2:a1:f5:b6:e0:38:74:2c:98: 56:23:6a:49:56:1a:05:8f:31:5f:97:1c:32:68:ab: b0:97:e2:68:3c:1a:0e:35:bc:79:01:16:92:f1:10: bf:a4:47:46:f7:7c:2e:66:52:85:74:50:7d:21:ce: 38:7a:b5:9b:1d:16:31:74:b7:9f:7b:05:97:3e:3f: 27:6f:65:62:24:01:fc:a4:5c:0a:a3:d9:f0:e6:16: 62:0f:a0:25:c4:c5:e1:a4:10:2f:69:1a:a0:3c:b1: c2:57:60:7a:76:f3:8a:28:57:8b:50:39:19:62:99: fd:e7:4c:2e:a0:2f:76:57:3b:dd:ac:bc:92:1c:f6: c3:35:23:83:fa:b4:8e:3b:84:21:3b:7a:bd:2e:c6: cc:f3:77:a3:a8:d3:8a:40:83:e6:f3:77:77:cf:24: 46:c5:6e:e3:77:fa:cd:1e:6c:d5:e0:ba:46:95:43: 52:a2:b4:fd:96:21:b9:da:18:55:0b:61:33:d7:d3: f8:a3:29:f0:2e:52:ec:ca:e6:61:0b:ac:37:e9:53: 17:ba:1a:0a:7d:dd:9b:60:c5:4f:e8:93:07:b7:7d: cf:c4:b1:a0:c0:4a:58:74:8f:d2:5b:a5:59:85:9f: aa:96:e7:6a:15:4d:60:cd:bf:77:fd:5a:5b:fa:9e: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.142.0/23 193.9.127.0/24 195.78.236.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:37:b8:a6:1c:d5:69:30:da:d3:a5:85:57:be:77:6e:b2:5a: 16:75:c1:c6:fc:9b:28:a3:ff:e0:bc:2a:3b:a9:9f:16:2f:c0: 13:f8:43:21:c4:12:b5:38:05:1c:28:eb:10:53:be:f2:29:03: 28:fa:4f:71:09:89:87:d7:89:47:85:3f:06:da:88:8b:89:27: c6:23:ed:34:85:10:d6:8c:55:fd:b1:99:37:c3:35:7a:08:7a: 4f:eb:4d:81:cc:26:14:75:09:a8:f2:b4:09:dd:fc:eb:ff:00: fc:af:e8:0e:c0:71:33:80:85:63:4d:1d:ca:0a:a9:af:4e:15: 69:8f:7b:de:82:9e:3a:f6:84:74:e1:fc:52:59:5c:af:6b:a9: f8:60:75:04:65:88:ee:cd:06:ae:8b:a8:9a:2b:5d:90:bf:a7: 57:34:78:11:b0:a0:ce:f0:a3:56:b8:85:b2:54:ef:a3:1c:b4: 11:75:3f:9a:61:85:86:ce:6f:a3:f6:c6:1a:1d:08:0d:f4:45: c4:5e:c0:c9:c3:dd:8a:df:03:8a:56:14:8a:d8:f7:c3:fd:d7: 26:f3:b7:a9:d6:40:fa:49:c1:c3:41:36:d9:50:db:8d:4e:a9: c7:da:bf:c5:07:53:78:96:a6:7c:3a:84:b4:92:45:d8:ad:65: 8d:70:e4:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt3xtQgTZDav/dYy0vGtqvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2ZhNzE1YzJmNGI5MDA4YzhmNGI2MDY1NGY3ZjNjNzYzNTNhZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk0HJzvSofW24Dh0LJhWI2pJVhoF jzFflxwyaKuwl+JoPBoONbx5ARaS8RC/pEdG93wuZlKFdFB9Ic44erWbHRYxdLef ewWXPj8nb2ViJAH8pFwKo9nw5hZiD6AlxMXhpBAvaRqgPLHCV2B6dvOKKFeLUDkZ Ypn950wuoC92VzvdrLySHPbDNSOD+rSOO4QhO3q9LsbM83ejqNOKQIPm83d3zyRG xW7jd/rNHmzV4LpGlUNSorT9liG52hhVC2Ez19P4oynwLlLsyuZhC6w36VMXuhoK fd2bYMVP6JMHt33PxLGgwEpYdI/SW6VZhZ+qludqFU1gzb93/Vpb+p7IRwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFGP6cVwvS5AIyPS2BlT388djU65nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2JmOWNk Yi02ZTg3LTQ3OWYtOTNhMS02NWE1ZWYwYWYwYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvYmY5Y2Ri LTZlODctNDc5Zi05M2ExLTY1YTVlZjBhZjBiNC8xL1lfcHhYQzlMa0FqSTlMWUdW UGZ6eDJOVHJtYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBW+6OAwQAwQl/AwQCw07sMA0GCSqGSIb3DQEB CwUAA4IBAQA9N7imHNVpMNrTpYVXvndusloWdcHG/Jsoo//gvCo7qZ8WL8AT+EMh xBK1OAUcKOsQU77yKQMo+k9xCYmH14lHhT8G2oiLiSfGI+00hRDWjFX9sZk3wzV6 CHpP602BzCYUdQmo8rQJ3fzr/wD8r+gOwHEzgIVjTR3KCqmvThVpj3vegp469oR0 4fxSWVyva6n4YHUEZYjuzQaui6iaK12Qv6dXNHgRsKDO8KNWuIWyVO+jHLQRdT+a YYWGzm+j9sYaHQgN9EXEXsDJw92K3wOKVhSK2PfD/dcm87ep1kD6ScHDQTbZUNuN TqnH2r/FB1N4lqZ8OoS0kkXYrWWNcOS/ -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:48 2026 by rpki-client