This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer File: YhuOSG7srmEk3hBJT9OROe1KN8s.cer (raw, json) Hash identifier: vb1wQGig7nTiOzAozWNhBJAhcPcjvagd5hX1qtGMoHg= Subject key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE6BFA726CE456F209B76638A5D8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.176.128.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e6:bf:a7:26:ce:45:6f:20:9b:76:63:8a:5d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=621b8e486eecae6124de10494fd39139ed4a37cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:aa:c3:75:57:0e:33:61:e2:74:88:b8:df: b4:5a:5a:14:c6:c9:4e:c7:3b:b1:2f:96:fd:b0:d2: e0:2a:4b:b2:a4:8b:ba:59:53:b7:70:cc:c6:64:2d: c3:67:b7:fb:96:63:e3:5a:d6:e0:6f:19:45:aa:15: 28:e2:e0:a5:33:d1:ec:d1:5e:68:15:dd:bf:f2:45: 5d:6f:7b:bf:3c:8b:6f:88:fc:bc:81:1d:23:9d:3f: ea:e0:4d:5b:c9:e4:c6:2e:3b:7b:b5:0d:cc:bb:4d: 84:fe:db:94:46:19:f4:68:2b:88:a0:31:54:04:c9: a9:a9:0c:f7:0c:23:2c:51:1f:7d:dd:a3:78:09:8d: 02:1b:5a:57:b6:67:86:18:9d:54:ce:95:d1:12:ae: 13:2d:89:69:0d:90:69:86:d9:24:aa:f0:a9:95:b4: 01:e4:9d:24:10:99:d4:a2:80:4e:29:ce:4d:c6:0b: d9:03:a0:98:e9:66:65:b6:b9:a5:1e:aa:38:74:ba: b4:28:e7:f5:1d:ca:cc:75:45:c4:87:fc:5b:98:0c: 8e:84:12:d5:81:ee:0b:bb:02:f0:d3:e1:34:b6:18: 7c:92:80:08:24:cd:8b:ae:cf:a2:64:e0:8c:ce:f0: 5f:0a:79:d1:e8:2a:8d:e6:05:b4:2b:3b:8a:3e:ce: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.128.0/22 Signature Algorithm: sha256WithRSAEncryption 58:ec:2a:9f:cc:ea:2d:9d:ad:15:b8:1e:c4:63:d3:5e:27:90: 8e:dd:5f:f3:12:b9:fa:1f:b7:ca:26:be:0b:3e:fc:18:84:13: fb:af:b1:29:94:8e:21:78:42:35:8e:6a:93:90:1f:f7:84:c4: c0:b2:60:5f:ae:2e:4c:da:ad:37:de:f6:cc:9f:f7:a7:6f:c7: 45:71:0a:50:bd:5b:3a:1e:96:c3:af:45:0f:18:07:1c:7f:57: 2b:98:b7:ce:23:64:7e:ad:82:cf:25:3d:f8:ab:df:2f:08:f7: 13:db:be:ce:36:24:a1:48:98:b8:07:71:c1:fe:46:1a:f6:fa: 7c:f3:f2:c5:b8:15:0e:db:41:d3:31:ec:54:66:6e:14:10:a9: d9:0c:93:8b:51:06:24:98:20:93:a1:7d:9e:62:52:69:75:41: d4:6a:67:ad:37:37:b3:fb:2e:e8:aa:12:b3:ed:2f:3e:11:b0: 88:97:2e:b9:c4:1d:ec:a5:54:e4:b6:b5:98:94:64:06:ab:9f: 96:56:f1:47:4f:43:1e:7b:51:74:bf:ae:06:5c:b1:03:4a:b9: 36:05:66:a4:65:ca:c4:e4:8a:bb:bb:fb:f7:85:d2:ef:24:3c: 99:46:49:78:df:58:df:00:d6:39:e6:e1:0b:77:ed:d4:0e:09: 6e:83:b7:78 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9Wua/pybORW8gm3Zjil2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjFiOGU0ODZlZWNhZTYxMjRkZTEwNDk0ZmQzOTEzOWVkNGEzN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupyqw3VXDjNh4nSIuN+0WloUxslO xzuxL5b9sNLgKkuypIu6WVO3cMzGZC3DZ7f7lmPjWtbgbxlFqhUo4uClM9Hs0V5o Fd2/8kVdb3u/PItviPy8gR0jnT/q4E1byeTGLjt7tQ3Mu02E/tuURhn0aCuIoDFU BMmpqQz3DCMsUR993aN4CY0CG1pXtmeGGJ1UzpXREq4TLYlpDZBphtkkqvCplbQB 5J0kEJnUooBOKc5NxgvZA6CY6WZltrmlHqo4dLq0KOf1HcrMdUXEh/xbmAyOhBLV ge4LuwLw0+E0thh8koAIJM2Lrs+iZOCMzvBfCnnR6CqN5gW0KzuKPs7ZWwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGIbjkhu7K5hJN4QSU/TkTntSjfLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzU0MjEz ZC1jM2VkLTRkNjctYjliZi03YmExMzZmNTFlZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNTQyMTNk LWMzZWQtNGQ2Ny1iOWJmLTdiYTEzNmY1MWVmOS8xL1lodU9TRzdzcm1FazNoQkpU OU9ST2UxS044cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubCAMA0GCSqGSIb3DQEBCwUAA4IBAQBY7Cqf zOotna0VuB7EY9NeJ5CO3V/zErn6H7fKJr4LPvwYhBP7r7EplI4heEI1jmqTkB/3 hMTAsmBfri5M2q033vbMn/enb8dFcQpQvVs6HpbDr0UPGAccf1crmLfOI2R+rYLP JT34q98vCPcT277ONiShSJi4B3HB/kYa9vp88/LFuBUO20HTMexUZm4UEKnZDJOL UQYkmCCToX2eYlJpdUHUametNzez+y7oqhKz7S8+EbCIly65xB3spVTktrWYlGQG q5+WVvFHT0Mee1F0v64GXLEDSrk2BWakZcrE5Iq7u/v3hdLvJDyZRkl431jfANY5 5uELd+3UDglug7d4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:17:32 2026 by rpki-client