This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer File: YtHWd-U82GA27g-wYpBs1C-8G-E.cer (raw, json) Hash identifier: vmkhi3fCetaRlf0gR7nKnDBrWQuQS2UxdKixmJblDt0= Subject key identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB8C5EEFF9DAF2B7A146856A8BDE80E03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 25 Nov 2025 02:09:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42357 IP: 185.218.196.0/24 IP: 194.140.194.0/24 IP: 2a10:c680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b8:c5:ee:ff:9d:af:2b:7a:14:68:56:a8:bd:e8:0e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 25 02:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:6e:82:70:6c:be:52:06:67:89:c8:2b:30: 41:14:1e:7c:0f:f2:ba:3b:fe:4c:4e:34:45:df:3e: d9:4c:7e:0a:e6:04:26:1a:11:b4:57:c1:80:aa:f1: 0e:5d:74:db:b7:bd:90:ac:0b:56:14:e0:de:8c:bd: 63:7a:5e:ad:36:45:2f:df:2c:ae:b3:88:2f:8d:36: c8:95:6b:9b:ed:c5:2d:32:18:f6:55:a2:91:05:54: 86:16:ac:3c:b7:69:cc:59:92:dc:98:08:3d:0b:a8: bd:c1:ca:2c:96:60:c3:3d:63:67:8a:a8:71:7d:69: 45:e4:c7:fe:c9:dc:91:b1:c2:f7:dd:8f:46:89:93: 27:dd:c3:64:3f:af:e4:e8:5a:f5:78:6d:49:2d:ec: 1d:db:63:e3:72:05:27:55:68:da:02:71:cd:83:05: 04:da:6d:95:54:d6:44:fe:02:27:da:32:e4:84:19: cb:ff:00:c5:80:a7:c6:4d:4b:6f:4e:51:7e:e1:1f: fd:58:5d:b1:56:14:0d:f1:80:25:90:87:4f:41:27: 00:24:8c:47:3b:1e:ce:a1:5f:bf:ec:fe:3c:12:2d: 19:7b:29:85:b0:84:19:26:44:a0:53:81:f6:5c:33: f6:2c:15:e9:dc:63:7e:97:4f:0d:36:39:7a:bb:f3: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.196.0/24 194.140.194.0/24 IPv6: 2a10:c680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42357 Signature Algorithm: sha256WithRSAEncryption 95:05:3e:00:26:6d:d3:15:1b:73:d3:b1:4a:72:5e:5e:d0:52: b7:cf:46:0f:1f:1d:85:cc:46:c9:7c:c0:9a:60:0d:d5:36:11: 74:06:ad:86:c8:77:eb:ef:04:ce:f0:06:23:a6:c0:cc:6f:eb: 4f:5f:c1:0d:1a:a8:bb:ce:f7:a5:9a:da:05:45:0f:32:24:51: 99:ce:ad:aa:98:ac:8a:ec:89:df:ee:8b:19:7e:35:e3:0b:46: 16:e3:bf:8b:16:73:2e:c3:c4:44:96:0f:9b:ec:e3:24:22:b6: a7:f8:e9:7a:d8:70:db:36:cb:c8:aa:d7:6b:b8:88:65:96:d2: 30:2c:dc:ec:03:06:c6:46:dc:9c:2e:7c:50:20:b3:94:fd:27: c5:3b:6a:eb:c1:cb:4c:8a:4e:b7:1e:78:f1:c2:19:5c:6f:4f: 99:ee:fe:43:8b:ea:b7:ff:fd:82:8e:34:f9:f2:01:3c:8b:5b: 7c:2d:1d:4f:ad:d6:b5:13:16:e4:46:34:9f:98:e9:b1:07:85: a6:a0:f7:19:c4:d8:f9:b5:8e:27:50:d5:46:3c:f1:f9:c3:d5: 3f:c8:39:e4:01:f4:e7:0b:60:67:43:c9:ad:a5:2d:16:fa:33: 19:4c:50:2a:c1:1d:4a:af:29:3c:33:32:a4:69:13:54:4c:6c: e6:42:9d:33 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZq4xe7/na8rehRoVqi96A4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI1MDIwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmQxZDY3N2U1M2NkODYwMzZlZTBmYjA2MjkwNmNkNDJmYmMxYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw31ugnBsvlIGZ4nIKzBBFB58D/K6 O/5MTjRF3z7ZTH4K5gQmGhG0V8GAqvEOXXTbt72QrAtWFODejL1jel6tNkUv3yyu s4gvjTbIlWub7cUtMhj2VaKRBVSGFqw8t2nMWZLcmAg9C6i9wcoslmDDPWNniqhx fWlF5Mf+ydyRscL33Y9GiZMn3cNkP6/k6Fr1eG1JLewd22PjcgUnVWjaAnHNgwUE 2m2VVNZE/gIn2jLkhBnL/wDFgKfGTUtvTlF+4R/9WF2xVhQN8YAlkIdPQScAJIxH Ox7OoV+/7P48Ei0ZeymFsIQZJkSgU4H2XDP2LBXp3GN+l08NNjl6u/MFLQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGLR1nflPNhgNu4PsGKQbNQvvBvhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3Lzc2NGZm Mi1kN2U4LTQwNjEtYmZlNi0zY2VmOTk0MGE2OTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNzY0ZmYy LWQ3ZTgtNDA2MS1iZmU2LTNjZWY5OTQwYTY5OS8xL1l0SFdkLVU4MkdBMjdnLXdZ cEJzMUMtOEctRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAudrEAwQAwozCMA0EAgACMAcDBQMqEMaAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCldTANBgkqhkiG9w0BAQsFAAOCAQEAlQU+ ACZt0xUbc9OxSnJeXtBSt89GDx8dhcxGyXzAmmAN1TYRdAathsh36+8EzvAGI6bA zG/rT1/BDRqou873pZraBUUPMiRRmc6tqpisiuyJ3+6LGX414wtGFuO/ixZzLsPE RJYPm+zjJCK2p/jpethw2zbLyKrXa7iIZZbSMCzc7AMGxkbcnC58UCCzlP0nxTtq 68HLTIpOtx548cIZXG9Pme7+Q4vqt//9go40+fIBPItbfC0dT63WtRMW5EY0n5jp sQeFpqD3GcTY+bWOJ1DVRjzx+cPVP8g55AH05wtgZ0PJraUtFvozGUxQKsEdSq8p PDMypGkTVExs5kKdMw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:25 2025 by rpki-client