This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer (raw, json) Hash identifier: KWI3WifnVHBhOhcpAHEb9247FOvNQkI4ro9xLEfoqlg= Subject key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78342F2087E3B4D46CBD58C0E77B588A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35337 AS: 51237 IP: 91.216.224.0/24 IP: 194.56.211.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:2f:20:87:e3:b4:d4:6c:bd:58:c0:e7:7b:58:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:98:fa:10:1a:ce:ea:fb:00:b7:48:11:33: e7:d9:86:f1:65:5e:3f:fd:c3:b2:0a:95:70:c2:3a: 0c:e9:a2:fd:ab:e8:7c:eb:42:6e:bb:fa:d6:09:02: e0:32:ae:1d:d9:e0:ae:b7:ba:85:1d:35:fd:0c:99: ae:28:61:9d:07:94:e7:b0:c5:14:f6:56:19:4b:f5: 3d:80:35:70:c1:bd:3d:83:17:cf:91:a8:ac:6c:40: 7e:07:35:a3:f4:14:25:c9:5d:e3:e5:ed:5b:f4:7e: da:a0:d1:75:d0:d5:d8:95:b0:14:dc:a0:cf:2b:82: 44:58:51:75:a5:bf:e2:93:e0:6b:34:2d:4f:09:9b: 80:7c:33:f4:a4:17:68:bb:0b:be:79:f7:bf:98:49: ab:f7:69:04:92:8e:5b:a3:c4:d1:db:c6:4a:30:a2: 79:ce:a6:a2:38:8a:e2:29:aa:90:73:94:67:e7:8e: 5e:10:9b:ce:39:a8:a1:a0:f3:46:2d:ac:0d:36:6d: 72:b7:f0:17:22:21:af:de:8b:d3:89:fa:11:af:ca: ee:dc:f7:b9:1b:50:ac:b5:6e:4d:b0:2d:a6:2e:06: d4:8b:78:00:c1:22:12:3f:f7:c4:8e:a4:48:45:f0: 39:42:66:c9:a3:81:70:83:42:d6:e5:d2:f1:26:00: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.224.0/24 194.56.211.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35337 51237 Signature Algorithm: sha256WithRSAEncryption b1:eb:8f:ef:d1:8e:4d:82:87:0b:a7:49:24:c6:37:6f:6b:dd: 1c:f9:36:fe:88:a7:73:be:d2:4a:e0:55:6f:01:c0:04:f5:9f: cf:5d:1d:78:1f:2e:83:cf:f5:ab:f7:8f:06:70:cc:be:ef:fe: dd:b9:55:b4:23:c0:7a:08:c2:15:f8:da:99:03:6c:f8:c3:e8: 89:f9:a0:9e:af:90:cb:aa:c5:78:12:54:dd:ae:4a:70:a1:25: a1:fe:ae:56:d7:db:1f:46:81:5b:28:53:da:27:8b:99:c0:96: d0:38:47:98:4a:e3:b2:c5:fc:cf:0a:8b:3e:7b:68:82:25:4d: 9b:d3:b1:76:e3:eb:6e:7b:16:5f:07:66:21:61:f3:29:f9:81: 3b:b1:63:9e:82:70:15:ba:b1:3b:fd:f6:54:e3:a6:c4:6d:b3: d5:d0:83:65:87:3e:f2:30:9c:53:d3:dc:3e:06:d0:48:ec:5b: 42:4a:fa:55:72:e5:19:99:e8:99:ae:78:04:d6:96:cc:c2:dd: f0:df:d9:a1:74:90:93:54:2f:8b:c3:26:d4:20:38:a6:c2:45: 23:6c:f2:0d:10:af:68:53:e3:75:bb:f2:5a:18:c9:b4:e5:74: f8:27:17:03:a1:20:4d:48:6b:66:f1:10:4f:7e:ab:39:55:44: 4c:71:05:ac -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt4NC8gh+O01Gy9WMDne1iKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTg4NjA0ZDI1Yjg3YjgyZmQxMjU5ZGZlMjk0Y2Q4ZmI5ZmY0OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTCY+hAazur7ALdIETPn2YbxZV4/ /cOyCpVwwjoM6aL9q+h860Juu/rWCQLgMq4d2eCut7qFHTX9DJmuKGGdB5TnsMUU 9lYZS/U9gDVwwb09gxfPkaisbEB+BzWj9BQlyV3j5e1b9H7aoNF10NXYlbAU3KDP K4JEWFF1pb/ik+BrNC1PCZuAfDP0pBdouwu+efe/mEmr92kEko5bo8TR28ZKMKJ5 zqaiOIriKaqQc5Rn545eEJvOOaihoPNGLawNNm1yt/AXIiGv3ovTifoRr8ru3Pe5 G1CstW5NsC2mLgbUi3gAwSISP/fEjqRIRfA5QmbJo4Fwg0LW5dLxJgD5YwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFKWIYE0luHuC/RJZ3+KUzY+5/0m0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzUxMGE0 ZS02NmVmLTRkYzEtODAzYi0yMGRkZGJjMTI4MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvNTEwYTRl LTY2ZWYtNGRjMS04MDNiLTIwZGRkYmMxMjgxZC8xL3BZaGdUU1c0ZTRMOUVsbmY0 cFROajduX1NiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9jgAwQAwjjTMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCKCQIDAMglMA0GCSqGSIb3DQEBCwUAA4IBAQCx64/v0Y5NgocLp0kk xjdva90c+Tb+iKdzvtJK4FVvAcAE9Z/PXR14Hy6Dz/Wr948GcMy+7/7duVW0I8B6 CMIV+NqZA2z4w+iJ+aCer5DLqsV4ElTdrkpwoSWh/q5W19sfRoFbKFPaJ4uZwJbQ OEeYSuOyxfzPCos+e2iCJU2b07F24+tuexZfB2YhYfMp+YE7sWOegnAVurE7/fZU 46bEbbPV0INlhz7yMJxT09w+BtBI7FtCSvpVcuUZmeiZrngE1pbMwt3w39mhdJCT VC+LwybUIDimwkUjbPINEK9oU+N1u/JaGMm05XT4JxcDoSBNSGtm8RBPfqs5VURM cQWs -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:42 2026 by rpki-client