This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer (raw, json) Hash identifier: 47SZ58DOyIQUY9O+RcjE3aP3lAydUSaxwwYd1s+P1xs= Subject key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4DA670F0615272B199C7D0F94172B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.61.2.0/24 IP: 2a0c:a240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:da:67:0f:06:15:27:2b:19:9c:7d:0f:94:17:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:1b:7e:5d:91:8a:63:99:01:09:4c:3e:3e: 6f:2b:45:d5:34:d6:ae:36:08:04:29:2d:a9:8e:01: ab:e7:d6:d1:dc:ea:a1:2a:4b:c6:d7:ee:31:2b:10: b8:17:05:03:fd:81:58:3a:c5:bc:0a:ee:43:29:69: 35:8f:da:6a:2f:a4:ef:0c:ce:2d:d3:71:69:bb:c2: 22:d0:dc:9e:38:3a:bc:67:fd:f7:08:ae:25:dc:eb: c2:34:5d:43:c3:11:8b:2c:39:f7:0c:03:11:9a:71: a7:af:64:98:00:0c:3f:9a:cd:20:ca:e7:d3:65:5d: 02:9a:85:5a:2c:f5:b4:9f:27:82:7f:05:ee:1a:77: 62:8a:9b:57:2c:a5:7a:a7:67:5e:25:b9:e5:fc:e6: 7b:a4:05:6c:9d:91:bd:db:9f:99:cf:f2:9b:e5:ce: 82:a9:8a:86:b6:73:77:a9:da:46:39:30:59:af:70: 57:93:c7:92:45:86:0b:6d:44:64:77:0b:4a:6d:3d: c7:13:2e:77:d0:a5:62:5a:be:19:ba:28:27:69:ec: e1:65:c6:d1:46:50:52:e7:e4:17:fa:f8:c9:a3:f4: 4b:d0:fd:82:cf:8c:a3:fb:d1:c1:d9:29:93:22:dc: ad:92:6a:76:47:4f:8b:c4:bb:1d:d4:9c:c8:58:ff: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.2.0/24 IPv6: 2a0c:a240::/29 Signature Algorithm: sha256WithRSAEncryption 0c:d7:ea:2b:39:6d:9a:62:a0:85:4a:1e:e6:21:e7:09:e0:cc: 17:54:87:66:bd:37:b6:0e:1c:56:76:61:fa:c0:60:f6:b4:2c: 52:41:dc:f3:c0:23:71:d8:73:df:24:fe:15:9e:c4:15:c5:d2: 93:d4:12:da:58:ad:46:d8:c6:b8:af:10:e9:1c:c5:5b:93:82: c6:99:d0:ab:53:27:f4:01:4b:0c:10:79:2f:94:4a:a6:d2:a0: 8f:89:04:5b:cb:20:40:30:61:60:16:dd:ed:f4:1e:ac:e0:32: e5:e0:98:fe:95:2c:a8:ec:63:79:cb:86:a3:3b:a1:d5:9d:f2: 94:f6:51:24:be:7c:c4:e0:30:a5:b9:70:0d:ba:09:4d:e2:55: 6d:73:22:b6:65:79:eb:d6:37:1a:7d:d9:f2:05:9f:d0:b6:3a: 89:9f:08:55:6c:45:11:96:d8:18:54:44:c9:04:67:5d:c3:d6: f7:0a:05:b2:2d:f2:25:d6:69:f7:65:c7:e0:de:71:53:36:6f: 6b:70:06:b3:4b:89:47:c8:fc:ee:96:f6:e1:9c:61:2d:c7:a4: 49:61:5c:ab:2d:9e:b8:8b:d6:b7:3d:20:30:44:2c:b0:80:70: 75:0c:e8:47:e1:81:08:3d:63:ac:b4:f0:b7:cf:2b:b0:b3:af: b5:1b:fe:7c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pNpnDwYVJysZnH0PlBcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjdhOTk1MDllZDUxZGY5M2EzM2YyYTRlMmZkNjYyZDFjOGQ2NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUsbfl2RimOZAQlMPj5vK0XVNNau NggEKS2pjgGr59bR3OqhKkvG1+4xKxC4FwUD/YFYOsW8Cu5DKWk1j9pqL6TvDM4t 03Fpu8Ii0NyeODq8Z/33CK4l3OvCNF1DwxGLLDn3DAMRmnGnr2SYAAw/ms0gyufT ZV0CmoVaLPW0nyeCfwXuGndiiptXLKV6p2deJbnl/OZ7pAVsnZG925+Zz/Kb5c6C qYqGtnN3qdpGOTBZr3BXk8eSRYYLbURkdwtKbT3HEy530KViWr4ZuignaezhZcbR RlBS5+QX+vjJo/RL0P2Cz4yj+9HB2SmTItytkmp2R0+LxLsd1JzIWP+ufQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGJ6mVCe1R35OjPypOL9Zi0cjWYLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzQ2MzY2 Ni0wMGUwLTQ5MmUtYTQ2My0wMTI4ZDk3MTc5ZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvNDYzNjY2 LTAwZTAtNDkyZS1hNDYzLTAxMjhkOTcxNzllOC8xL1lucVpVSjdWSGZrNk1fS2s0 djFtTFJ5Tlpncy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwj0CMA0EAgACMAcDBQMqDKJAMA0GCSqGSIb3 DQEBCwUAA4IBAQAM1+orOW2aYqCFSh7mIecJ4MwXVIdmvTe2DhxWdmH6wGD2tCxS QdzzwCNx2HPfJP4VnsQVxdKT1BLaWK1G2Ma4rxDpHMVbk4LGmdCrUyf0AUsMEHkv lEqm0qCPiQRbyyBAMGFgFt3t9B6s4DLl4Jj+lSyo7GN5y4ajO6HVnfKU9lEkvnzE 4DCluXANuglN4lVtcyK2ZXnr1jcafdnyBZ/QtjqJnwhVbEURltgYVETJBGddw9b3 CgWyLfIl1mn3Zcfg3nFTNm9rcAazS4lHyPzulvbhnGEtx6RJYVyrLZ64i9a3PSAw RCywgHB1DOhH4YEIPWOstPC3zyuws6+1G/58 -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:13 2026 by rpki-client