This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer (raw, json) Hash identifier: WZmKdUFLLQMjp8DxowEc4cCosApc7SL+De2SzxumDwY= Subject key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1D96404AAB4D2CC1DDD7EF5CEC05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.99.20.0/24 IP: 185.151.146.0/24 IP: 185.179.91.0/24 IP: 193.7.192.0/22 IP: 2a0d:be00::/29 IP: 2a0d:d340::/29 IP: 2a10:fd40::/29 IP: 2a11:a000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1d:96:40:4a:ab:4d:2c:c1:dd:d7:ef:5c:ec:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=621310302018a387c692146a35efd33a6ed6b1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:21:ec:a5:1e:09:51:d1:e4:60:1c:9d:cf: f6:3a:bd:06:cc:62:0d:f7:a2:f4:15:d9:b9:c0:d8: a2:7d:e5:6c:56:ee:d7:c8:ff:df:bc:9b:dd:66:07: da:89:12:40:3a:e1:ad:d0:8d:df:f3:7e:ab:e3:e8: 52:0e:e5:9e:28:0d:6f:fa:48:9e:22:bd:44:9b:03: 9e:c9:23:56:33:f0:01:90:e6:e9:8a:cf:d9:37:08: 98:c7:97:a9:08:b9:14:d8:4f:c6:a3:67:11:0a:d7: 61:eb:a8:02:2b:5b:90:4f:cc:ce:d9:21:cb:6d:96: 53:d7:d1:27:30:0d:a7:4b:22:34:ab:57:04:d4:26: 00:48:c7:75:a5:c6:53:e7:63:7d:d3:60:d3:45:42: 79:d2:81:24:c2:e0:80:75:87:bf:19:6b:1f:cf:cf: 05:4b:dd:f4:52:3f:e8:15:24:d8:be:7b:9b:25:45: 61:2c:8c:26:d3:d6:71:b6:93:1c:49:0e:96:45:80: b9:91:ce:72:10:00:99:91:54:d2:38:5c:65:68:6d: d7:b4:4f:3b:37:2c:1c:66:ca:c9:6a:b7:79:99:1a: d2:b7:9d:41:56:51:6d:47:81:e8:3c:26:5b:8e:63: d7:80:f7:85:aa:f8:91:d7:4e:91:db:bc:81:dd:3a: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.20.0/24 185.151.146.0/24 185.179.91.0/24 193.7.192.0/22 IPv6: 2a0d:be00::/29 2a0d:d340::/29 2a10:fd40::/29 2a11:a000::/29 Signature Algorithm: sha256WithRSAEncryption 6f:8e:83:76:bc:50:cf:bb:80:46:73:85:d7:51:2a:93:f0:1c: af:ee:31:50:63:b9:ba:81:ab:5d:be:cd:55:8a:00:d2:15:2a: 69:5b:84:09:04:d6:2d:41:48:10:af:aa:e5:85:82:a6:22:2e: 87:aa:da:49:99:9d:74:f2:8a:fa:58:e9:e2:18:d4:93:a0:8f: 80:1a:da:db:9c:bc:39:16:a8:69:a9:f3:d4:b8:e3:b5:36:24: fe:b3:ef:06:9b:43:76:33:43:b4:f2:95:8d:57:89:cd:71:44: 3a:c4:ad:69:59:2e:c5:40:70:da:d6:03:9f:62:2c:05:d5:18: 8a:c5:00:fb:20:29:34:3a:83:75:68:c1:df:4e:c6:89:56:58: db:88:0f:75:08:21:18:30:dd:a9:75:86:bd:5e:bb:a5:86:d2: cd:8a:0f:be:aa:ac:a2:95:16:ba:ca:8c:03:b2:c6:63:62:a0: 5f:ff:24:f5:f8:8f:85:f8:a7:d6:97:9a:d3:32:e4:a9:d3:28: c6:66:c2:b8:6a:13:4c:65:0f:dc:53:34:a6:87:3b:e7:7e:6c: ce:41:7d:e0:0a:d2:4c:75:c5:a7:67:b9:e1:27:21:ea:74:6d: 42:c1:96:ec:51:1e:b9:28:b4:c5:79:f7:e0:04:6d:a8:ba:ed: e9:b9:95:8f -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt5fx2WQEqrTSzB3dfvXOwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjEzMTAzMDIwMThhMzg3YzY5MjE0NmEzNWVmZDMzYTZlZDZiMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgwh7KUeCVHR5GAcnc/2Or0GzGIN 96L0Fdm5wNiifeVsVu7XyP/fvJvdZgfaiRJAOuGt0I3f836r4+hSDuWeKA1v+kie Ir1EmwOeySNWM/ABkObpis/ZNwiYx5epCLkU2E/Go2cRCtdh66gCK1uQT8zO2SHL bZZT19EnMA2nSyI0q1cE1CYASMd1pcZT52N902DTRUJ50oEkwuCAdYe/GWsfz88F S930Uj/oFSTYvnubJUVhLIwm09ZxtpMcSQ6WRYC5kc5yEACZkVTSOFxlaG3XtE87 NywcZsrJard5mRrSt51BVlFtR4HoPCZbjmPXgPeFqviR106R27yB3To+RwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFGITEDAgGKOHxpIUajXv0zpu1rHvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1L2Y1OGFj OC01M2U5LTRjYTYtYWNiMi1iZTU3ZDdkZmEwZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvZjU4YWM4 LTUzZTktNGNhNi1hY2IyLWJlNTdkN2RmYTBkZS8xL1loTVFNQ0FZbzRmR2toUnFO ZV9UT203V3NlOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAeBAIAATAYAwQAuWMUAwQAuZeSAwQAubNbAwQCwQfAMCIEAgAC MBwDBQMqDb4AAwUDKg3TQAMFAyoQ/UADBQMqEaAAMA0GCSqGSIb3DQEBCwUAA4IB AQBvjoN2vFDPu4BGc4XXUSqT8Byv7jFQY7m6gatdvs1VigDSFSppW4QJBNYtQUgQ r6rlhYKmIi6HqtpJmZ108or6WOniGNSToI+AGtrbnLw5FqhpqfPUuOO1NiT+s+8G m0N2M0O08pWNV4nNcUQ6xK1pWS7FQHDa1gOfYiwF1RiKxQD7ICk0OoN1aMHfTsaJ VljbiA91CCEYMN2pdYa9XrulhtLNig++qqyilRa6yowDssZjYqBf/yT1+I+F+KfW l5rTMuSp0yjGZsK4ahNMZQ/cUzSmhzvnfmzOQX3gCtJMdcWnZ7nhJyHqdG1CwZbs UR65KLTFeffgBG2ouu3puZWP -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:25 2026 by rpki-client