This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer File: YoO20dhhAunt8qvdqnyTR6rHF8c.cer (raw, json) Hash identifier: sV5mLztcnNgVmSRIgvNfdPPlXicrAdWFhwGyjkwfNmE= Subject key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA63EA3916CBF8A0B2AD4729DF7F798 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209555 IP: 185.226.166.0/24 IP: 188.116.58.0/23 IP: 2a0f:d3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3e:a3:91:6c:bf:8a:0b:2a:d4:72:9d:f7:f7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:11:d2:7e:52:5a:47:07:08:80:71:5f:14: 25:37:3d:54:76:71:01:8a:6d:a1:cd:20:f0:c4:e0: 9c:31:44:3b:72:38:9f:92:43:2e:c8:b2:54:97:17: b5:f0:45:80:ba:80:aa:3e:9a:4d:9a:e0:b5:97:5e: 5c:96:65:b5:b7:db:18:17:a8:4f:fa:ac:5e:22:4e: 50:0d:f9:69:df:fd:3b:09:4d:70:a9:26:1c:15:c2: 9b:73:e3:c8:0d:60:b3:fa:b0:9a:67:67:99:85:b3: 52:e4:27:10:9f:1f:c8:9d:53:0d:f2:ef:68:a1:48: 1d:b8:76:b7:08:5a:58:d0:72:b6:3d:f7:fa:e4:54: 5e:70:39:25:bd:90:e5:59:29:bf:42:4e:28:9e:64: d9:38:33:88:a0:4c:92:c0:c4:68:7f:88:34:2e:2b: 5b:ef:c9:af:84:2b:1a:49:d8:1c:6e:da:88:6d:aa: 17:a5:be:3f:87:9d:27:15:51:50:25:09:ff:b6:c0: d7:32:e4:3b:46:a3:09:14:1d:cd:6f:7a:82:52:59: 5e:8a:15:84:f4:13:3f:ba:0a:1b:43:34:8f:83:8d: d6:36:b3:5f:0d:c5:f4:0f:b6:bb:cd:28:40:ae:28: 9a:89:97:8d:db:36:b0:d0:6e:62:28:ed:05:95:0d: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.166.0/24 188.116.58.0/23 IPv6: 2a0f:d3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209555 Signature Algorithm: sha256WithRSAEncryption 43:00:a8:68:6a:95:1e:b2:6d:ac:11:c3:15:9e:2d:9a:78:13: 4b:49:95:0f:e5:ea:97:06:46:e2:33:e3:67:4b:31:83:74:cf: cb:6b:b1:08:30:3e:2f:2b:da:4d:be:2d:17:7f:02:cd:32:d0: 8a:e6:70:66:ed:83:8c:af:40:25:50:d6:18:57:54:ba:9e:ea: 18:36:50:13:f5:c0:2d:d8:4e:87:22:68:a9:04:a8:c1:03:a6: 77:bf:25:3d:cc:ed:67:e9:df:97:01:1a:12:e6:69:fa:2d:7a: 63:89:f5:c9:ae:2a:69:75:31:6e:25:76:a1:43:79:6d:09:85: 52:72:3e:b6:84:5e:f2:80:cf:63:d2:68:d3:5f:6e:fb:3b:40: 0a:1e:81:88:fc:95:bd:c2:5e:bc:3a:2c:cf:49:1c:5b:cb:d5: 02:ea:97:60:19:4d:f8:c0:78:df:4d:04:6c:9f:85:c5:1d:bc: bc:74:3c:4d:41:b7:b3:44:6d:66:fb:38:42:86:46:5b:f8:25: 8c:e0:20:77:ac:13:02:cf:b5:0a:1e:09:2f:db:c8:fc:01:14: 8a:85:40:cb:cd:4c:e1:59:4c:38:0a:b5:77:e0:04:38:8f:43: a1:81:d5:9d:32:ce:40:9e:e4:1d:5f:7a:05:7f:a5:06:c4:6b: e9:9a:e9:2e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pj6jkWy/igsq1HKd9/eYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjgzYjZkMWQ4NjEwMmU5ZWRmMmFiZGRhYTdjOTM0N2FhYzcxN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeIR0n5SWkcHCIBxXxQlNz1UdnEB im2hzSDwxOCcMUQ7cjifkkMuyLJUlxe18EWAuoCqPppNmuC1l15clmW1t9sYF6hP +qxeIk5QDflp3/07CU1wqSYcFcKbc+PIDWCz+rCaZ2eZhbNS5CcQnx/InVMN8u9o oUgduHa3CFpY0HK2Pff65FRecDklvZDlWSm/Qk4onmTZODOIoEySwMRof4g0Litb 78mvhCsaSdgcbtqIbaoXpb4/h50nFVFQJQn/tsDXMuQ7RqMJFB3Nb3qCUlleihWE 9BM/ugobQzSPg43WNrNfDcX0D7a7zShAriiaiZeN2zaw0G5iKO0FlQ0bCQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGKDttHYYQLp7fKr3ap8k0eqxxfHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2JkNDMx Ny1iOWVmLTRiMjMtODBhZC05MTRlNDg4MWVlYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvYmQ0MzE3 LWI5ZWYtNGIyMy04MGFkLTkxNGU0ODgxZWVhOC8xL1lvTzIwZGhoQXVudDhxdmRx bnlUUjZySEY4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAueKmAwQBvHQ6MA0EAgACMAcDBQMqD9PAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMykzANBgkqhkiG9w0BAQsFAAOCAQEAQwCo aGqVHrJtrBHDFZ4tmngTS0mVD+XqlwZG4jPjZ0sxg3TPy2uxCDA+LyvaTb4tF38C zTLQiuZwZu2DjK9AJVDWGFdUup7qGDZQE/XALdhOhyJoqQSowQOmd78lPcztZ+nf lwEaEuZp+i16Y4n1ya4qaXUxbiV2oUN5bQmFUnI+toRe8oDPY9Jo019u+ztACh6B iPyVvcJevDosz0kcW8vVAuqXYBlN+MB4300EbJ+FxR28vHQ8TUG3s0RtZvs4QoZG W/gljOAgd6wTAs+1Ch4JL9vI/AEUioVAy81M4VlMOAq1d+AEOI9DoYHVnTLOQJ7k HV96BX+lBsRr6ZrpLg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:07 2026 by rpki-client