This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer File: _ymks_Cjr4u-1gKaiyZdyTIE594.cer (raw, json) Hash identifier: uTiVBAq5QCErtyswUlMgiLPaeIfuuoOrzBfv1Bv4934= Subject key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15A4920DADA63EC200DDE80291D056 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215687 IP: 193.56.200.0/23 IP: 193.56.226.0/23 IP: 2a13:4300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a4:92:0d:ad:a6:3e:c2:00:dd:e8:02:91:d0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:30:e3:8d:2d:32:6a:21:0d:78:ff:4e:18: d5:3e:56:ab:79:ef:ec:0f:4e:7b:5d:a4:3e:b0:f3: d7:f5:cb:01:84:f1:23:13:4e:df:c8:8c:2f:de:03: 53:32:d8:16:ce:6d:53:4e:a6:ec:87:d1:d9:86:20: 07:6e:4c:b2:0c:7e:a6:93:fa:50:7d:bc:e8:5b:a6: 43:5c:b8:4d:3c:b6:c0:4d:83:c9:60:1f:f9:20:f0: c3:8e:21:fa:96:f3:92:c0:0a:e2:9e:32:0f:af:3f: f5:56:dd:23:27:40:27:ef:b4:df:c0:fe:a2:42:62: 50:48:e9:28:11:6d:33:1b:c5:51:9a:1c:46:e8:b1: ed:4b:0f:c2:10:6a:07:ec:0e:0a:5e:a1:52:b5:11: 50:11:d1:df:c1:79:e7:f2:71:6f:e2:b3:8b:49:8e: 0b:3b:74:77:e9:19:2d:ec:39:22:c9:06:90:b2:5a: d5:78:6d:0a:52:ad:c6:2c:45:a6:fe:a7:7a:e5:00: 65:b6:d0:b7:13:d8:af:1e:5e:26:c3:9d:90:aa:6c: 43:f0:70:b3:92:82:6f:58:ca:64:fe:36:92:42:41: de:eb:d4:e7:1f:c6:4a:51:9e:80:02:fb:03:cc:98: 9c:4a:40:b3:ea:70:16:ff:dd:55:1d:e7:ec:8b:8b: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.200.0/23 193.56.226.0/23 IPv6: 2a13:4300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215687 Signature Algorithm: sha256WithRSAEncryption 77:07:45:ee:6d:a3:54:b9:bb:e5:89:e5:9e:df:02:8c:a3:77: e7:32:50:5a:e7:29:f8:3c:a2:a0:4a:2d:b5:63:ec:46:88:1c: ea:a5:67:be:89:8e:e6:eb:8c:8b:23:15:85:b2:bf:74:08:23: 91:60:30:b2:55:0b:f2:04:b4:76:66:d9:ba:a1:24:9e:72:d4: b7:d8:2b:d1:42:51:cb:46:0b:6b:34:1c:96:ae:e9:31:ff:71: 1f:96:59:e5:4c:88:8b:0f:b7:f3:2b:56:b7:2c:51:e3:16:da: 97:75:21:25:f3:97:8d:6b:14:b6:05:a1:9c:d9:c0:f9:90:d8: ae:42:1f:c9:7a:d3:63:60:1c:5c:d6:bb:8c:ac:d6:16:fb:58: d1:c0:8b:63:e8:a8:a2:c4:b9:ba:70:01:77:8e:2f:6b:bb:2a: a3:7e:db:00:a2:e5:c9:ff:58:4e:54:99:14:9a:6f:d2:3a:c7: f5:91:0e:dc:f5:16:61:cc:f8:15:1c:26:2f:de:0c:96:37:0b: a3:1c:e6:74:6a:b9:3b:fe:fc:97:7b:cf:bd:21:f4:b8:1c:6e: 59:57:18:00:4e:79:73:12:be:47:06:da:f1:96:fe:64:2e:3c: 7e:cd:71:21:96:ba:d7:6a:0a:3f:81:32:c6:23:dc:14:64:7c: 98:cd:61:ea -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FaSSDa2mPsIA3egCkdBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjI5YTRiM2YwYTNhZjhiYmVkNjAyOWE4YjI2NWRjOTMyMDRlN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqEw440tMmohDXj/ThjVPlaree/s D057XaQ+sPPX9csBhPEjE07fyIwv3gNTMtgWzm1TTqbsh9HZhiAHbkyyDH6mk/pQ fbzoW6ZDXLhNPLbATYPJYB/5IPDDjiH6lvOSwArinjIPrz/1Vt0jJ0An77TfwP6i QmJQSOkoEW0zG8VRmhxG6LHtSw/CEGoH7A4KXqFStRFQEdHfwXnn8nFv4rOLSY4L O3R36Rkt7DkiyQaQslrVeG0KUq3GLEWm/qd65QBlttC3E9ivHl4mw52QqmxD8HCz koJvWMpk/jaSQkHe69TnH8ZKUZ6AAvsDzJicSkCz6nAW/91VHefsi4tl2QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFP8ppLPwo6+LvtYCmosmXckyBOfeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2Q3YTQ4 NC0zZDRhLTQ4YmYtYjUxNi1jYWYyZjdhNWI1ZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvZDdhNDg0 LTNkNGEtNDhiZi1iNTE2LWNhZjJmN2E1YjVmNC8xL195bWtzX0NqcjR1LTFnS2Fp eVpkeVRJRTU5NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwTjIAwQBwTjiMA0EAgACMAcDBQMqE0MAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKhzANBgkqhkiG9w0BAQsFAAOCAQEAdwdF 7m2jVLm75Ynlnt8CjKN35zJQWucp+DyioEottWPsRogc6qVnvomO5uuMiyMVhbK/ dAgjkWAwslUL8gS0dmbZuqEknnLUt9gr0UJRy0YLazQclq7pMf9xH5ZZ5UyIiw+3 8ytWtyxR4xbal3UhJfOXjWsUtgWhnNnA+ZDYrkIfyXrTY2AcXNa7jKzWFvtY0cCL Y+ioosS5unABd44va7sqo37bAKLlyf9YTlSZFJpv0jrH9ZEO3PUWYcz4FRwmL94M ljcLoxzmdGq5O/78l3vPvSH0uBxuWVcYAE55cxK+Rwba8Zb+ZC48fs1xIZa612oK P4EyxiPcFGR8mM1h6g== -----END CERTIFICATE-----Generated at Tue Jan 27 06:24:04 2026 by rpki-client