This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer File: _YmzSchPx7NBKlLWX_Jg0swomrk.cer (raw, json) Hash identifier: XUMz2lbvBQxqfd8VIt6CbKRonoRNfrD7PvYbCl/DFXc= Subject key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D09F01898309C286A86DDD6C6FDFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 149.255.96.0/20 IP: 185.88.192.0/22 IP: 2a03:ca80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:09:f0:18:98:30:9c:28:6a:86:dd:d6:c6:fd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:39:90:62:88:52:fc:38:6d:a5:d9:64:e3: 7c:59:bd:0b:30:7c:08:85:31:2a:8c:ea:00:bf:40: 62:52:ae:e9:84:5a:58:08:bc:a5:b6:6d:42:4a:38: f3:ec:e3:42:6c:1c:79:16:1a:28:fa:40:46:75:7f: 60:a4:f7:22:61:f0:ad:7c:de:4e:37:2d:8f:ed:ec: 30:de:b5:a2:25:16:3d:b2:65:0d:63:97:c9:32:d3: 6d:36:20:b8:b8:72:61:ac:03:68:11:57:c2:46:81: c5:01:55:9f:26:39:ff:6c:c4:8e:2b:ea:94:0b:24: 70:94:38:44:85:0b:5d:fa:44:78:f2:01:d3:ae:e9: 26:fc:a4:d8:a6:0e:13:2f:b9:1c:05:fa:be:31:96: c0:a9:0e:98:5c:d9:2f:e0:68:f5:44:91:02:27:7e: 7d:11:c7:43:0c:c1:55:32:5c:59:d6:c4:76:ba:c9: 3b:86:0c:00:67:30:ed:b9:17:90:25:57:de:6e:2b: 64:dd:f6:7c:c4:2d:fa:bb:4d:b7:c3:fe:5e:27:d8: 3a:8a:a7:e5:1a:66:5e:67:e5:0f:c4:43:a2:a6:08: d8:0e:4c:36:d7:76:ce:dd:cb:a3:fe:93:e9:ea:00: f4:05:4b:51:03:c8:60:f4:ac:a9:bb:74:7b:bf:be: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.255.96.0/20 185.88.192.0/22 IPv6: 2a03:ca80::/29 Signature Algorithm: sha256WithRSAEncryption 31:29:8a:96:d1:46:7e:9a:aa:a8:30:c3:d1:1f:86:de:ed:fe: 49:b7:d7:c4:38:d7:f9:09:83:53:69:66:07:00:b9:0c:4a:50: 23:72:d1:cb:86:b6:43:16:22:08:3f:b9:5b:62:1f:93:e6:62: da:ce:76:a8:fa:a2:41:72:56:d4:39:03:87:8e:d4:5e:93:5a: 0e:15:96:35:9e:85:a4:4a:4c:67:80:6f:d2:e6:aa:fb:e6:25: 73:a8:61:f8:46:29:0b:5d:a6:ab:ed:f1:9f:4b:a0:9c:0c:f2: 58:67:7d:3c:53:57:6f:70:c0:a0:2c:80:b8:4f:ad:2e:2f:e7: 35:18:9c:83:34:34:db:ca:56:8b:44:70:0e:92:93:33:21:fb: 9a:b5:e1:da:cd:54:49:fb:d6:1a:50:4d:6a:21:61:78:69:f0: 30:2b:20:4e:3f:dc:50:73:f9:cf:a7:a0:3f:c7:e4:e5:7e:04: f9:a6:3b:e9:50:1b:79:37:e8:58:e4:63:23:18:0d:6d:5c:92: 4d:93:8f:a9:e1:de:b0:e1:a2:54:19:ca:a6:35:8a:cd:2d:ae: 41:d3:79:7f:98:e1:2a:29:f1:17:98:02:93:1d:ac:d3:2b:91: b1:cc:3b:e9:4d:c9:69:78:41:1b:f5:cf:d7:02:9a:a9:42:0b: c5:a6:e5:82 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9XQnwGJgwnChqht3Wxv36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDg5YjM0OWM4NGZjN2IzNDEyYTUyZDY1ZmYyNjBkMmNjMjg5YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaU5kGKIUvw4baXZZON8Wb0LMHwI hTEqjOoAv0BiUq7phFpYCLyltm1CSjjz7ONCbBx5Fhoo+kBGdX9gpPciYfCtfN5O Ny2P7eww3rWiJRY9smUNY5fJMtNtNiC4uHJhrANoEVfCRoHFAVWfJjn/bMSOK+qU CyRwlDhEhQtd+kR48gHTrukm/KTYpg4TL7kcBfq+MZbAqQ6YXNkv4Gj1RJECJ359 EcdDDMFVMlxZ1sR2usk7hgwAZzDtuReQJVfebitk3fZ8xC36u023w/5eJ9g6iqfl GmZeZ+UPxEOipgjYDkw213bO3cuj/pPp6gD0BUtRA8hg9Kypu3R7v77xLQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFP2Js0nIT8ezQSpS1l/yYNLMKJq5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2VlNzE0 YS0yMWFjLTQzODYtODJmNS1lODE3NjEwMmM1ZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvZWU3MTRh LTIxYWMtNDM4Ni04MmY1LWU4MTc2MTAyYzVmZi8xL19ZbXpTY2hQeDdOQktsTFdY X0pnMHN3b21yay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQElf9gAwQCuVjAMA0EAgACMAcDBQMqA8qAMA0G CSqGSIb3DQEBCwUAA4IBAQAxKYqW0UZ+mqqoMMPRH4be7f5Jt9fEONf5CYNTaWYH ALkMSlAjctHLhrZDFiIIP7lbYh+T5mLaznao+qJBclbUOQOHjtRek1oOFZY1noWk SkxngG/S5qr75iVzqGH4RikLXaar7fGfS6CcDPJYZ308U1dvcMCgLIC4T60uL+c1 GJyDNDTbylaLRHAOkpMzIfuateHazVRJ+9YaUE1qIWF4afAwKyBOP9xQc/nPp6A/ x+TlfgT5pjvpUBt5N+hY5GMjGA1tXJJNk4+p4d6w4aJUGcqmNYrNLa5B03l/mOEq KfEXmAKTHazTK5GxzDvpTclpeEEb9c/XApqpQgvFpuWC -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:53 2026 by rpki-client