This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer (raw, json) Hash identifier: frHscYLvGRSc+a3XPSl97iQ+r0kbdhcTxlemDIpq6NE= Subject key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79107579FBBE54E0B662D51D9099FFB4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61276 IP: 91.190.156.0/24 IP: 193.47.41.0/24 IP: 2a11:6380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:75:79:fb:be:54:e0:b6:62:d5:1d:90:99:ff:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:17:87:14:dd:32:47:d7:c7:6e:84:e0:7e: 13:d7:38:a9:b6:de:07:f5:87:fb:19:21:16:7f:cc: 24:8a:7b:3d:ca:46:85:70:70:79:55:2b:a7:42:14: e6:38:f6:43:44:10:15:59:dc:80:c9:4e:84:e1:89: 73:85:98:7a:ae:18:99:3c:55:01:bd:da:c9:92:99: 9f:0f:8c:b6:f1:12:c5:ec:85:19:f3:30:99:61:f2: 8e:60:15:9d:3f:5f:c6:87:02:7f:d8:da:6f:7b:b4: f6:34:1a:32:5e:fe:3b:5a:fd:ed:5f:c0:82:09:c9: 22:31:43:cf:d4:31:0b:b7:97:26:9c:ab:15:c0:ab: 83:e4:57:33:71:26:a6:bc:7d:1f:28:4f:9b:fd:83: 26:e6:7a:b1:04:9d:2a:32:46:1d:02:fa:5d:c5:ab: 8f:f2:08:ea:28:eb:3d:77:ad:38:e2:9a:b7:75:59: bb:47:19:e1:59:a6:37:e4:a8:2c:9d:c2:2a:2e:96: 39:6b:6f:de:63:58:6c:b6:79:8b:7a:d3:50:e7:63: d7:97:81:b3:d0:ba:96:ed:01:72:e0:50:23:06:e0: 19:68:e0:26:a6:7c:da:f3:61:db:42:2f:83:f1:9a: 17:b5:c8:5c:ca:de:c1:81:4f:c0:91:1d:de:c3:58: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.190.156.0/24 193.47.41.0/24 IPv6: 2a11:6380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61276 Signature Algorithm: sha256WithRSAEncryption 1d:27:da:f4:5e:a9:a3:f1:e4:60:2b:8e:15:5d:29:ef:a1:92: 2d:3d:d3:4a:8d:94:91:54:27:ef:ea:32:90:cf:a9:53:96:ff: 91:fb:6f:a9:1f:4d:8d:d9:91:39:ef:b8:7e:ef:e4:22:2e:e3: 69:00:77:b0:2d:bb:a9:5a:ce:d7:29:69:84:61:da:7b:ab:9d: ab:ea:92:a5:83:a0:a0:3d:c9:80:2c:fc:82:7c:9f:cc:c0:ae: 58:8a:f1:93:72:79:4f:e1:94:58:55:e7:8f:55:dd:61:bf:f2: 78:84:0a:90:22:22:96:ac:4d:98:cf:fa:9a:2b:7f:d7:9f:27: ee:50:49:75:48:25:e7:fa:17:d1:63:96:a4:b1:87:7c:b2:47: 77:52:3a:47:04:f2:bf:04:27:bb:33:3e:e8:b2:3f:e8:79:ee: f7:bc:8f:a6:cb:02:31:af:b1:ce:b1:1e:da:1a:6c:28:eb:6f: 1b:f6:99:7d:7c:e6:f0:9b:03:bd:f9:65:46:7b:0c:50:87:f3: 7f:73:14:d0:bc:87:2a:c5:f7:d8:70:ed:b6:51:68:d5:d4:67: 31:0f:86:6b:32:5c:9e:4a:11:53:eb:8b:65:66:bb:50:9b:ae: f5:a0:08:12:27:3a:bd:9c:cf:ec:d8:ff:58:79:4b:99:74:87: 52:09:b2:ba -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EHV5+75U4LZi1R2Qmf+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWFlZGZkYzcxMzNlOTVmNDI0OThmNzc2MGY2OGZiODBmYWE4NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhAXhxTdMkfXx26E4H4T1ziptt4H 9Yf7GSEWf8wkins9ykaFcHB5VSunQhTmOPZDRBAVWdyAyU6E4YlzhZh6rhiZPFUB vdrJkpmfD4y28RLF7IUZ8zCZYfKOYBWdP1/GhwJ/2Npve7T2NBoyXv47Wv3tX8CC CckiMUPP1DELt5cmnKsVwKuD5FczcSamvH0fKE+b/YMm5nqxBJ0qMkYdAvpdxauP 8gjqKOs9d6044pq3dVm7RxnhWaY35KgsncIqLpY5a2/eY1hstnmLetNQ52PXl4Gz 0LqW7QFy4FAjBuAZaOAmpnza82HbQi+D8ZoXtchcyt7BgU/AkR3ew1iGNwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGGu39xxM+lfQkmPd2D2j7gPqoSsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzAyYjUy Mi05ZjA4LTQ2ZmMtOTllYS05ZjNlOGY5ZWZjOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMDJiNTIy LTlmMDgtNDZmYy05OWVhLTlmM2U4ZjllZmM5OS8xL1lhN2YzSEV6NlY5Q1NZOTNZ UGFQdUEtcWhLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW76cAwQAwS8pMA0EAgACMAcDBQMqEWOAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDvXDANBgkqhkiG9w0BAQsFAAOCAQEAHSfa 9F6po/HkYCuOFV0p76GSLT3TSo2UkVQn7+oykM+pU5b/kftvqR9NjdmROe+4fu/k Ii7jaQB3sC27qVrO1ylphGHae6udq+qSpYOgoD3JgCz8gnyfzMCuWIrxk3J5T+GU WFXnj1XdYb/yeIQKkCIilqxNmM/6mit/158n7lBJdUgl5/oX0WOWpLGHfLJHd1I6 RwTyvwQnuzM+6LI/6Hnu97yPpssCMa+xzrEe2hpsKOtvG/aZfXzm8JsDvfllRnsM UIfzf3MU0LyHKsX32HDttlFo1dRnMQ+GazJcnkoRU+uLZWa7UJuu9aAIEic6vZzP 7Nj/WHlLmXSHUgmyug== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:38 2026 by rpki-client