This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer (raw, json) Hash identifier: 8Vke4bqhM8O6dytHvu+jHh1pmAiyBD7dUZkfoiMLz6A= Subject key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E9AEC0CEF78D905C22F9AD65D37C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202108 IP: 89.31.136.0/21 IP: 185.61.8.0/22 IP: 2a00:a8e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e9:ae:c0:ce:f7:8d:90:5c:22:f9:ad:65:d3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62c66267943d413cdf760dc6850104c1c0fc1d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:37:99:72:32:a9:e3:56:b8:e5:1f:40:16: ce:1a:70:1d:14:05:4a:ef:3f:16:f6:88:30:a9:c8: 52:7a:0d:d7:d3:91:41:5f:43:37:96:f2:0d:11:ec: f5:75:86:db:a5:07:24:40:65:78:5f:2e:c7:88:89: b7:2a:e4:44:dd:f9:3e:0b:02:6a:56:1c:b4:d9:4f: 18:8e:b0:e8:fe:21:ae:d7:f8:19:96:c7:19:8f:95: 2c:3b:40:23:a2:1e:dd:1c:1d:fe:07:9f:9c:e8:e4: a8:37:42:75:69:7e:89:52:d0:a1:37:29:10:26:e0: d0:ee:d4:1f:41:cc:ee:7f:cd:88:cc:2c:e5:f6:dc: c1:b9:0b:90:23:05:4e:65:64:a4:2b:86:9c:8f:c8: b5:15:b4:e2:6c:2d:29:82:f5:24:83:a0:64:6d:2f: 08:5e:2f:3b:be:21:bf:d2:3d:8a:5a:33:9b:0d:dd: 7e:9a:c9:5f:bc:70:5e:ab:42:4e:2c:20:be:28:52: 0d:c9:ec:bc:ff:d4:d9:7a:3d:a4:4f:76:22:fa:03: 37:88:a3:c0:b5:e8:e1:8a:de:f8:46:d0:74:ec:f1: 9e:20:b8:27:25:54:3f:cf:f1:c6:f0:d1:1b:57:e9: 68:a1:b4:a6:2d:1a:2a:59:6f:c0:0c:44:3f:b2:b4: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.136.0/21 185.61.8.0/22 IPv6: 2a00:a8e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202108 Signature Algorithm: sha256WithRSAEncryption 42:93:0e:9b:2f:a5:c7:5a:75:48:00:cb:fd:ba:53:57:d3:2b: 5e:ac:e9:89:83:b9:ff:09:9b:fe:a8:c2:75:07:44:59:59:2c: 0d:0b:56:a6:50:ec:1b:a2:db:94:83:4f:e3:9e:10:bb:1a:df: b0:4c:a4:1f:86:d9:9a:3d:42:78:d0:38:26:e5:82:0b:3b:84: 71:55:ef:1b:04:40:19:c1:a4:a0:32:32:33:ce:e4:32:a9:1d: 26:d2:7a:83:30:69:db:fd:18:96:6a:72:1e:aa:79:88:26:c2: 82:cc:97:44:b3:79:3e:d8:03:04:25:41:b2:25:4e:79:c8:7d: 46:21:21:f0:8a:f7:32:0b:d2:7a:22:3f:fe:f4:cf:22:4c:35: 66:51:31:ee:05:8a:3f:cc:6d:6c:58:8a:c6:3f:bb:c4:6f:3c: e2:74:2c:ce:60:52:fa:e0:1f:f7:f1:75:c1:73:2d:a3:ee:7a: 5e:7b:6d:da:c0:ae:35:d3:21:11:5c:c4:0b:ac:b5:b4:24:62: 64:4d:eb:09:53:35:02:3f:ba:2e:40:62:15:16:a5:16:53:a9: 38:9f:1e:3a:33:41:82:50:9b:f1:ab:27:41:69:55:f7:1a:cf: 3f:f9:58:9b:98:44:85:59:b8:00:a6:4f:32:52:5f:9b:e5:f9: e1:b4:ec:6e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NemuwM73jZBcIvmtZdN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmM2NjI2Nzk0M2Q0MTNjZGY3NjBkYzY4NTAxMDRjMWMwZmMxZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRw3mXIyqeNWuOUfQBbOGnAdFAVK 7z8W9ogwqchSeg3X05FBX0M3lvINEez1dYbbpQckQGV4Xy7HiIm3KuRE3fk+CwJq Vhy02U8YjrDo/iGu1/gZlscZj5UsO0Ajoh7dHB3+B5+c6OSoN0J1aX6JUtChNykQ JuDQ7tQfQczuf82IzCzl9tzBuQuQIwVOZWSkK4acj8i1FbTibC0pgvUkg6BkbS8I Xi87viG/0j2KWjObDd1+mslfvHBeq0JOLCC+KFINyey8/9TZej2kT3Yi+gM3iKPA tejhit74RtB07PGeILgnJVQ/z/HG8NEbV+loobSmLRoqWW/ADEQ/srStOwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGLGYmeUPUE833YNxoUBBMHA/B1lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzUwZjRm Ny00OWNjLTRjODItOTMyNC1hOWQ3YWQ0NDJiM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvNTBmNGY3 LTQ5Y2MtNGM4Mi05MzI0LWE5ZDdhZDQ0MmIzYi8xL1lzWmlaNVE5UVR6ZmRnM0do UUVFd2NEOEhXVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDWR+IAwQCuT0IMA0EAgACMAcDBQAqAKjgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVfDANBgkqhkiG9w0BAQsFAAOCAQEAQpMO my+lx1p1SADL/bpTV9MrXqzpiYO5/wmb/qjCdQdEWVksDQtWplDsG6LblINP454Q uxrfsEykH4bZmj1CeNA4JuWCCzuEcVXvGwRAGcGkoDIyM87kMqkdJtJ6gzBp2/0Y lmpyHqp5iCbCgsyXRLN5PtgDBCVBsiVOech9RiEh8Ir3MgvSeiI//vTPIkw1ZlEx 7gWKP8xtbFiKxj+7xG884nQszmBS+uAf9/F1wXMto+56Xntt2sCuNdMhEVzEC6y1 tCRiZE3rCVM1Aj+6LkBiFRalFlOpOJ8eOjNBglCb8asnQWlV9xrPP/lYm5hEhVm4 AKZPMlJfm+X54bTsbg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:37:30 2026 by rpki-client