This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer File: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer (raw, json) Hash identifier: RqJp25bvexy8tSOnvPe8a5HjrIpfqSlJ/JNd20+dfzI= Subject key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1D0FC83255CEC93591E0BBC17114 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.134.252.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1d:0f:c8:32:55:ce:c9:35:91:e0:bb:c1:71:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:a2:d5:1f:e0:20:cd:ac:81:26:04:11:31: 2b:43:08:35:1b:7c:1d:e0:50:79:93:ef:e2:00:15: 39:18:4b:90:c6:15:ac:74:fa:d2:9c:03:cd:25:7b: e9:32:e1:c5:17:b6:9f:c2:29:9d:b9:2d:99:29:87: 2a:c2:e5:d1:32:98:f8:63:3d:41:81:2a:1e:65:71: 11:4c:22:07:c1:70:40:d3:f5:c6:1f:5f:59:52:4d: 44:f6:be:23:5a:93:48:08:79:69:e0:ea:10:78:fc: 5d:b2:c5:33:56:e5:af:51:97:5a:a6:84:d1:e5:af: d1:3f:42:3f:ab:99:78:56:07:56:6b:b4:27:01:49: d8:03:4f:98:44:80:9f:00:a5:e9:97:3e:04:13:bd: db:da:ba:49:7c:7f:c6:0a:d5:48:27:6b:78:a8:ca: 59:8a:4a:27:5c:95:b0:fb:85:88:23:cb:6d:a6:d6: 38:64:19:6c:c0:08:9c:77:ba:ad:15:6b:8e:eb:aa: e3:cd:83:92:b2:4c:d8:72:38:1e:9a:10:d0:79:e9: f7:e0:9c:35:61:74:b9:39:63:4b:48:8f:db:71:19: c6:b4:f0:59:d4:aa:56:a4:d4:2a:58:c5:bf:e8:75: 81:7e:d0:c1:9c:16:bf:c5:02:82:22:6a:6e:84:89: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.252.0/24 Signature Algorithm: sha256WithRSAEncryption a3:ae:63:ad:ad:05:8a:73:a7:1e:6f:54:f8:8b:14:b2:00:1f: 5c:bd:cf:ef:19:73:5f:a2:09:4c:5e:63:8a:de:f2:12:b9:3c: f1:4e:ed:8c:38:ce:f6:00:4b:55:bd:04:d0:7e:bf:2a:1d:7e: ea:96:72:f3:c0:5e:71:5b:52:4d:c9:42:41:12:26:11:10:b1: 8f:6b:26:ab:49:ed:24:e1:bb:a4:91:26:74:4b:0e:42:7e:b5: ba:14:44:2e:6f:60:15:66:8a:96:f0:b0:0f:76:c3:e2:0f:51: 18:c5:96:c5:66:9a:71:f0:8c:ae:0f:4d:b2:57:08:f5:04:65: e2:6c:8a:d1:f5:41:3f:aa:a6:a3:5b:81:d1:45:51:db:c1:1f: c5:84:56:3d:19:6e:11:88:23:cc:43:02:2b:3a:4a:6b:06:57: 2d:a9:a0:e0:40:a7:f1:30:b1:bd:56:1a:bd:38:d6:fe:f1:82: b5:42:9a:65:eb:69:1c:48:5b:f3:95:83:e0:77:97:39:41:31: 1c:9c:d4:b4:ee:66:07:7d:c4:df:a3:fb:0c:df:ad:9e:7f:03: 92:14:5a:4c:e5:71:de:5f:0a:b2:a6:05:0d:6d:1c:06:50:7e: 5b:ec:6f:08:dc:3a:11:d7:74:28:bc:f8:29:7c:70:12:df:a8: 6c:b4:f0:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fx0PyDJVzsk1keC7wXEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWVkZmU3YTRmYzY0ZGU1MjlkMTYyZGYyZmVkMDc4MGM2ZTVlMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U2i1R/gIM2sgSYEETErQwg1G3wd 4FB5k+/iABU5GEuQxhWsdPrSnAPNJXvpMuHFF7afwimduS2ZKYcqwuXRMpj4Yz1B gSoeZXERTCIHwXBA0/XGH19ZUk1E9r4jWpNICHlp4OoQePxdssUzVuWvUZdapoTR 5a/RP0I/q5l4VgdWa7QnAUnYA0+YRICfAKXplz4EE73b2rpJfH/GCtVIJ2t4qMpZ ikonXJWw+4WII8ttptY4ZBlswAicd7qtFWuO66rjzYOSskzYcjgemhDQeen34Jw1 YXS5OWNLSI/bcRnGtPBZ1KpWpNQqWMW/6HWBftDBnBa/xQKCImpuhIl/HQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGHt/npPxk3lKdFi3y/tB4DG5eGoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2I4MWQw OC02NmM5LTRiZTktYTIyMS1hZmY4NzFiNWI1ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYjgxZDA4 LTY2YzktNGJlOS1hMjIxLWFmZjg3MWI1YjVmNy8xL1llMy1la19HVGVVcDBXTGZM LTBIZ01ibDRhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwYb8MA0GCSqGSIb3DQEBCwUAA4IBAQCjrmOt rQWKc6ceb1T4ixSyAB9cvc/vGXNfoglMXmOK3vISuTzxTu2MOM72AEtVvQTQfr8q HX7qlnLzwF5xW1JNyUJBEiYRELGPayarSe0k4bukkSZ0Sw5CfrW6FEQub2AVZoqW 8LAPdsPiD1EYxZbFZppx8IyuD02yVwj1BGXibIrR9UE/qqajW4HRRVHbwR/FhFY9 GW4RiCPMQwIrOkprBlctqaDgQKfxMLG9Vhq9ONb+8YK1Qppl62kcSFvzlYPgd5c5 QTEcnNS07mYHfcTfo/sM362efwOSFFpM5XHeXwqypgUNbRwGUH5b7G8I3DoR13Qo vPgpfHAS36hstPCI -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:04 2026 by rpki-client