This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer File: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer (raw, json) Hash identifier: n1r9N8tjth611Ar9j/UtrPyoWXvRrwHDryERCTlLnfE= Subject key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AC0A4D633EAE103A0335B286CCBD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.239.189.0/24 IP: 2a13:d000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:c0:a4:d6:33:ea:e1:03:a0:33:5b:28:6c:cb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62beaa57c67aeb5bafd99793ab4846850a796c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:68:7b:c7:4c:01:39:51:d6:43:69:52:58: 80:97:fd:3b:16:63:0a:43:0f:5a:53:e0:fa:c8:ac: 3d:da:ad:e2:17:56:64:58:ff:2b:13:58:fa:8f:9a: f5:0d:9a:65:9c:9f:4b:29:cb:45:ac:fa:75:a4:2d: d6:a3:fc:d1:26:4e:01:ee:8f:45:a4:61:ae:a1:d8: 6e:cb:3e:f1:8a:e8:50:c8:ba:4a:15:2b:65:30:b1: 66:63:19:2d:fd:21:3f:3e:6a:7c:0b:92:0a:4e:4d: 22:ea:8b:0b:81:f6:0d:be:2e:01:95:bd:01:1e:8b: 5b:09:92:96:5a:65:ca:3f:93:2a:90:11:b4:a5:d6: 21:ea:f4:f1:3f:b0:9c:e2:1e:23:3c:48:3b:5e:62: 45:33:81:a8:b7:ef:67:02:44:0a:68:80:42:be:2b: 8e:fc:5a:23:e2:bc:14:78:e2:7e:73:1c:c7:7b:96: d4:21:bf:31:5b:48:a1:af:26:5f:bd:c6:24:69:1c: 6c:8e:de:b7:2e:00:8f:b3:7b:bc:d8:f2:3e:3f:49: 35:c4:05:b4:c8:9a:0f:c6:10:86:44:d9:75:4d:23: 11:94:8e:5f:9b:a0:e6:18:35:1d:4c:18:2c:a4:2f: 69:cc:4a:04:5e:77:86:a8:25:df:12:5d:23:41:9b: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.189.0/24 IPv6: 2a13:d000::/29 Signature Algorithm: sha256WithRSAEncryption 20:6b:cf:19:a2:e3:8d:55:02:ee:89:24:93:27:ce:d9:fd:03: 3e:d1:a9:50:40:13:ef:32:da:c9:02:75:89:b3:03:e9:88:ca: 6a:72:ea:fb:23:22:dd:e4:17:8c:e6:da:25:ed:e6:f1:f9:27: 07:97:50:55:7e:9a:c3:85:44:d0:a6:cf:57:0b:32:a2:eb:39: fe:bb:60:21:d6:34:21:a4:55:33:d8:c5:9a:7b:fd:c8:5f:d5: d0:62:29:b2:dd:b3:ec:07:e9:90:09:59:cc:28:da:d6:d5:70: 57:02:1f:9b:8d:34:bf:49:6e:75:c2:21:5c:0e:87:ce:99:ca: f0:e2:31:ec:bb:ff:c7:18:86:8f:1b:e9:ed:02:03:db:c9:99: c2:7d:23:36:d8:3b:e0:12:96:51:da:ab:ee:27:82:99:10:11: b3:a0:89:a1:74:5f:f6:ee:b1:81:b0:95:a7:a2:29:21:9c:ca: fe:ee:91:8c:af:3e:de:43:cb:3b:72:5f:1c:f6:31:11:e7:5e: 6e:3b:92:27:63:bb:d3:a2:64:42:9f:f7:6d:ac:5e:fb:d2:b1: 67:e2:cb:f0:4a:b0:94:97:eb:97:b5:32:98:3b:74:f3:a8:26: fe:e2:7f:d1:e1:1b:93:d4:9d:4c:60:23:aa:a4:19:1e:f9:11: be:7f:cf:2f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9WsCk1jPq4QOgM1sobMvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmJlYWE1N2M2N2FlYjViYWZkOTk3OTNhYjQ4NDY4NTBhNzk2YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksdoe8dMATlR1kNpUliAl/07FmMK Qw9aU+D6yKw92q3iF1ZkWP8rE1j6j5r1DZplnJ9LKctFrPp1pC3Wo/zRJk4B7o9F pGGuodhuyz7xiuhQyLpKFStlMLFmYxkt/SE/Pmp8C5IKTk0i6osLgfYNvi4Blb0B HotbCZKWWmXKP5MqkBG0pdYh6vTxP7Cc4h4jPEg7XmJFM4Got+9nAkQKaIBCviuO /Foj4rwUeOJ+cxzHe5bUIb8xW0ihryZfvcYkaRxsjt63LgCPs3u82PI+P0k1xAW0 yJoPxhCGRNl1TSMRlI5fm6DmGDUdTBgspC9pzEoEXneGqCXfEl0jQZu4+QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGK+qlfGeutbr9mXk6tIRoUKeWwoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzIyNTgx ZS1mZThjLTRmYjgtOTU4NS05ODgwZjA0ZGI5NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMjI1ODFl LWZlOGMtNGZiOC05NTg1LTk4ODBmMDRkYjk0YS8xL1lyNnFWOFo2NjF1djJaZVRx MGhHaFFwNWJDZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW++9MA0EAgACMAcDBQMqE9AAMA0GCSqGSIb3 DQEBCwUAA4IBAQAga88ZouONVQLuiSSTJ87Z/QM+0alQQBPvMtrJAnWJswPpiMpq cur7IyLd5BeM5tol7ebx+ScHl1BVfprDhUTQps9XCzKi6zn+u2Ah1jQhpFUz2MWa e/3IX9XQYimy3bPsB+mQCVnMKNrW1XBXAh+bjTS/SW51wiFcDofOmcrw4jHsu//H GIaPG+ntAgPbyZnCfSM22DvgEpZR2qvuJ4KZEBGzoImhdF/27rGBsJWnoikhnMr+ 7pGMrz7eQ8s7cl8c9jER515uO5InY7vTomRCn/dtrF770rFn4svwSrCUl+uXtTKY O3TzqCb+4n/R4RuT1J1MYCOqpBke+RG+f88v -----END CERTIFICATE-----Generated at Sun Jan 25 23:07:11 2026 by rpki-client