This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer (raw, json) Hash identifier: v4jq+ctzLtnA/2ijwOh3LbU95gZp7VH1PcDn217Ei3E= Subject key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA3F0DB18D2E3D1CA501458FC29C81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207265 IP: 45.151.128.0/22 IP: 2a10:20c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3f:0d:b1:8d:2e:3d:1c:a5:01:45:8f:c2:9c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62927b36b138f086358938e3acfda4638e56a792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:58:5f:01:c4:dc:0e:98:fe:00:e7:60:30: 85:10:98:b4:b4:5d:cb:c8:99:56:27:76:7f:d2:b4: 84:bf:c8:15:ab:af:cd:ea:5a:9f:1b:eb:24:b7:fa: a2:ad:f8:36:05:27:51:02:ad:15:77:a7:a1:8b:13: 21:4d:ab:64:15:b1:75:c2:c9:61:c1:9e:57:d7:b8: 50:d9:e9:36:fa:fb:76:55:01:e1:26:ff:aa:fd:e9: 66:e9:fd:2e:4f:39:51:7a:1e:62:02:7c:c7:36:64: a3:17:9d:18:e2:d0:05:ca:49:54:60:0d:a2:ab:4b: 03:5c:e7:92:c8:fd:0e:8a:b2:d8:c0:f4:8b:73:f9: 4d:ee:d1:45:1d:73:28:ad:02:7d:71:20:2d:97:33: 14:f4:99:ab:41:de:7a:2a:93:41:91:46:5c:61:1b: 49:42:42:89:c4:c1:d0:3a:fa:01:31:54:bd:85:5a: 7e:93:da:87:fb:a8:08:c4:b1:9e:dc:54:e0:e0:96: c6:30:a7:15:31:81:5c:14:f0:42:13:f4:c1:6c:2b: 8f:c2:e9:a0:a5:3c:ce:4e:6d:fd:bf:3f:05:fd:c5: 22:30:79:f0:8a:0c:b2:60:69:f0:67:d5:59:91:12: 79:5e:54:f1:ef:3a:c2:56:a4:e0:a7:b7:bf:88:c1: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.128.0/22 IPv6: 2a10:20c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207265 Signature Algorithm: sha256WithRSAEncryption 7f:c9:95:17:f2:67:c2:85:98:c4:2c:95:f8:fa:c5:da:13:40: e0:39:3c:df:52:3e:01:8d:98:72:85:1c:87:68:17:0f:79:0f: d5:4e:7d:5c:b2:ff:d1:9d:82:91:f3:8d:44:70:53:18:3c:2e: 74:d3:b0:79:9e:57:4a:ae:e9:9e:bc:a4:c1:74:ff:30:0b:6e: bc:7e:98:7e:b2:00:c6:1e:01:00:23:db:9c:07:f2:bb:c6:db: e7:52:6d:bf:47:dc:b4:f4:2a:bb:90:ab:a3:90:93:1e:5a:29: 2d:17:76:c0:6c:0d:71:9b:73:05:96:03:e0:2a:76:3c:96:dc: 3a:55:f6:6b:75:f6:cd:bf:6a:31:dd:e1:86:52:c7:fe:af:9e: 70:18:b8:d1:18:74:18:95:40:fd:be:8c:20:80:ce:8d:cb:1f: 73:11:f9:22:8e:60:4e:01:b9:07:74:e6:ff:4c:5e:13:5c:4c: bb:ef:c8:d2:3e:7d:5e:df:cb:a7:00:1c:5b:ab:d6:cb:2b:83: 8b:8a:6b:6d:dc:e6:b4:7e:d7:be:9b:7a:9c:bd:f7:7e:bf:51: 59:b0:29:b8:ab:db:e8:89:7d:e1:ef:e8:2e:2c:a3:64:58:cc: 83:5e:df:7d:96:75:2f:cd:82:3e:9d:7c:17:a2:8c:00:45:06: 16:0d:1c:55 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yj8NsY0uPRylAUWPwpyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjkyN2IzNmIxMzhmMDg2MzU4OTM4ZTNhY2ZkYTQ2MzhlNTZhNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOtYXwHE3A6Y/gDnYDCFEJi0tF3L yJlWJ3Z/0rSEv8gVq6/N6lqfG+skt/qirfg2BSdRAq0Vd6ehixMhTatkFbF1wslh wZ5X17hQ2ek2+vt2VQHhJv+q/elm6f0uTzlReh5iAnzHNmSjF50Y4tAFyklUYA2i q0sDXOeSyP0OirLYwPSLc/lN7tFFHXMorQJ9cSAtlzMU9JmrQd56KpNBkUZcYRtJ QkKJxMHQOvoBMVS9hVp+k9qH+6gIxLGe3FTg4JbGMKcVMYFcFPBCE/TBbCuPwumg pTzOTm39vz8F/cUiMHnwigyyYGnwZ9VZkRJ5XlTx7zrCVqTgp7e/iMGewwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGKSezaxOPCGNYk446z9pGOOVqeSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzhkMjQx Zi03MWVhLTRhMWItOTZlYS1hOTljN2VlNWMyODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvOGQyNDFm LTcxZWEtNGExYi05NmVhLWE5OWM3ZWU1YzI4NC8xL1lwSjdOckU0OElZMWlUampy UDJrWTQ1V3A1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZeAMA0EAgACMAcDBQMqECDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpoTANBgkqhkiG9w0BAQsFAAOCAQEAf8mVF/JnwoWY xCyV+PrF2hNA4Dk831I+AY2YcoUch2gXD3kP1U59XLL/0Z2CkfONRHBTGDwudNOw eZ5XSq7pnrykwXT/MAtuvH6YfrIAxh4BACPbnAfyu8bb51Jtv0fctPQqu5Cro5CT HlopLRd2wGwNcZtzBZYD4Cp2PJbcOlX2a3X2zb9qMd3hhlLH/q+ecBi40Rh0GJVA /b6MIIDOjcsfcxH5Io5gTgG5B3Tm/0xeE1xMu+/I0j59Xt/LpwAcW6vWyyuDi4pr bdzmtH7Xvpt6nL33fr9RWbApuKvb6Il94e/oLiyjZFjMg17ffZZ1L82CPp18F6KM AEUGFg0cVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:22 2026 by rpki-client