This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer File: YcK0WmXBm2irsFFsnMr0VHpcwxI.cer (raw, json) Hash identifier: 1xRs/3OAD72zx2B3AiHlq8KQqZnZEeJ53P2beAIEdzU= Subject key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE116F118C2E6A542E217B36C64B919F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 15:05:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15731 IP: 135.132.144.0/20 IP: 194.56.150.0/24 IP: 2a11:2a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:16:f1:18:c2:e6:a5:42:e2:17:b3:6c:64:b9:19:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 15:05:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:e2:45:54:b9:00:7e:f4:f8:4d:76:45:8e: 6f:7f:58:eb:f9:d0:ab:86:b5:f4:d2:00:5a:bc:4b: 6e:91:c1:90:be:c8:fa:15:21:d3:65:cb:e1:c6:a0: e0:82:c3:e1:99:11:0d:34:3d:4b:a4:19:d1:32:9d: 52:4c:1d:48:b9:1e:90:a7:dd:4d:d9:29:24:3b:d2: c8:da:e1:70:2e:30:62:9a:34:fd:cb:49:3e:5a:40: ce:cb:82:fd:76:03:59:64:e9:3c:83:2a:6b:bc:21: 5a:ec:35:6b:67:bf:5b:1d:a4:c6:a8:9d:71:7e:3f: 64:b1:b8:48:b9:0a:98:81:90:72:ca:64:e4:6e:a8: 1c:0b:d9:a9:55:9a:90:0c:92:81:3e:1b:45:f3:1f: 94:87:fb:3c:02:d8:d2:0f:a8:4d:c1:36:00:79:40: bc:dd:64:05:f7:9f:45:62:b3:47:0b:7b:49:3f:7d: bc:ed:44:1f:13:e5:dd:e9:5f:9e:07:0e:a7:21:49: f6:5f:a5:21:59:56:d8:53:d8:20:61:02:d7:f7:74: f1:4c:65:57:63:2c:e5:85:a0:22:46:80:5b:62:f8: f3:96:22:2e:8e:cb:0a:dc:75:18:6a:97:57:95:6e: b6:ed:48:5c:6f:9a:a4:17:b5:3f:9b:73:67:5b:86: 40:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.132.144.0/20 194.56.150.0/24 IPv6: 2a11:2a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15731 Signature Algorithm: sha256WithRSAEncryption a8:cb:15:fb:6a:11:ae:c3:f3:b2:6f:7b:e4:00:ca:ee:a3:90: 0a:24:63:30:75:fa:86:0f:56:94:67:c0:a1:38:62:90:e7:dd: 26:29:f2:c8:63:11:90:d0:57:12:ab:c7:b2:7b:66:d5:be:26: c2:fe:6e:df:5e:be:05:84:7a:96:ce:2c:84:08:24:fd:d8:8d: cf:b3:58:f7:83:bf:f1:a1:51:be:a6:dc:05:92:76:d8:e2:cb: f0:c3:13:c3:73:df:91:40:5a:ed:88:f1:36:79:2f:03:af:39: 06:f2:40:db:b3:69:f9:44:a5:80:2a:2d:c8:f2:be:fd:fc:a3: f3:b7:61:88:5f:e5:99:2c:dd:28:08:8b:aa:a7:2a:d9:04:c5: 10:37:84:a1:c9:10:c1:6e:c1:d6:67:55:e2:4e:17:04:7a:c5: fe:00:6d:9c:f0:ee:70:af:59:a4:c8:c2:26:7f:e1:8c:59:4b: 53:c8:d3:10:2e:27:46:45:9e:53:26:e8:ac:c0:e9:17:b3:64: de:02:38:1b:ce:03:3d:25:58:e4:12:11:b1:cd:fb:9d:87:9f: 3f:22:b7:cd:3a:d3:ac:b3:11:66:d2:84:5c:97:c4:54:81:27: 96:d2:94:ac:02:db:29:ca:39:7a:e4:ce:0a:46:72:d1:e2:0e: 7b:29:7f:c1 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZvhFvEYwualQuIXs2xkuRn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTUwNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWMyYjQ1YTY1YzE5YjY4YWJiMDUxNmM5Y2NhZjQ1NDdhNWNjMzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCriRVS5AH70+E12RY5vf1jr+dCr hrX00gBavEtukcGQvsj6FSHTZcvhxqDggsPhmRENND1LpBnRMp1STB1IuR6Qp91N 2SkkO9LI2uFwLjBimjT9y0k+WkDOy4L9dgNZZOk8gyprvCFa7DVrZ79bHaTGqJ1x fj9ksbhIuQqYgZByymTkbqgcC9mpVZqQDJKBPhtF8x+Uh/s8AtjSD6hNwTYAeUC8 3WQF959FYrNHC3tJP3287UQfE+Xd6V+eBw6nIUn2X6UhWVbYU9ggYQLX93TxTGVX YyzlhaAiRoBbYvjzliIujssK3HUYapdXlW627Uhcb5qkF7U/m3NnW4ZAqQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFGHCtFplwZtoq7BRbJzK9FR6XMMSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzI4NjJh Yi0zN2RkLTQ3ZjItOGRmMi0yMmMyN2I5OTNhZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvMjg2MmFi LTM3ZGQtNDdmMi04ZGYyLTIyYzI3Yjk5M2FlMi8xL1ljSzBXbVhCbTJpcnNGRnNu TXIwVkhwY3d4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEh4SQAwQAwjiWMA0EAgACMAcDBQMqESoAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj1zMA0GCSqGSIb3DQEBCwUAA4IBAQCoyxX7 ahGuw/Oyb3vkAMruo5AKJGMwdfqGD1aUZ8ChOGKQ590mKfLIYxGQ0FcSq8eye2bV vibC/m7fXr4FhHqWziyECCT92I3Ps1j3g7/xoVG+ptwFknbY4svwwxPDc9+RQFrt iPE2eS8DrzkG8kDbs2n5RKWAKi3I8r79/KPzt2GIX+WZLN0oCIuqpyrZBMUQN4Sh yRDBbsHWZ1XiThcEesX+AG2c8O5wr1mkyMImf+GMWUtTyNMQLidGRZ5TJuiswOkX s2TeAjgbzgM9JVjkEhGxzfudh58/IrfNOtOssxFm0oRcl8RUgSeW0pSsAtspyjl6 5M4KRnLR4g57KX/B -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:30 2026 by rpki-client