This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer File: yAA8l5YD986hKsoB68IFfDb9fzA.cer (raw, json) Hash identifier: WvxN2NPOFooSDjqsOFtbr7tgdjvNtTa7vOJyEbjUigg= Subject key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A341C12309AA4C5C44D3396B01E89D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29311 AS: 48645 IP: 62.112.224.0/19 IP: 94.143.208.0/21 IP: 185.61.224.0/22 IP: 185.63.20.0/22 IP: 213.108.29.0/24 IP: 2a00:1558::/32 IP: 2a02:27c8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:41:c1:23:09:aa:4c:5c:44:d3:39:6b:01:e8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:fa:c4:07:ce:7e:69:e9:35:7a:98:76:bc: 2a:69:59:fc:e1:1c:10:06:ca:34:f5:2c:97:9c:5f: f3:96:04:0e:ee:51:2e:a4:53:ad:23:5e:d5:f8:0a: f5:33:92:4b:48:03:37:7c:60:8c:85:79:74:8c:ce: 37:f8:be:9d:39:fa:7f:d0:1b:f0:b3:45:f1:6b:80: 30:69:08:95:71:df:fe:13:9e:34:d8:94:96:62:4a: 2c:c1:98:e8:77:21:35:ac:8c:a6:ca:d9:34:3b:5c: 06:fd:63:05:6b:de:b9:64:a2:83:4f:c2:47:f5:f6: 89:09:5a:38:9a:e2:6f:cc:75:36:60:85:bb:f6:04: 47:65:dd:0d:89:77:51:42:45:c5:e3:57:af:03:9d: d3:3c:ac:bc:03:80:93:fb:82:3c:9f:d0:0a:14:91: b2:10:94:06:6b:21:97:c6:c3:19:4b:19:1a:7d:b9: 1a:65:56:9e:77:84:84:4e:10:75:c5:ec:bf:09:76: 1e:93:47:7b:ab:7b:6c:ee:f3:f9:e7:80:e2:61:c6: 47:7c:1f:bd:f7:52:94:e9:6f:ff:d7:6a:88:8b:78: 6a:73:e4:dc:35:f0:81:2c:0f:6f:33:c4:22:51:13: 5f:b5:4c:50:95:c3:d2:ac:33:7c:bf:1f:7b:05:93: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.224.0/19 94.143.208.0/21 185.61.224.0/22 185.63.20.0/22 213.108.29.0/24 IPv6: 2a00:1558::/32 2a02:27c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29311 48645 Signature Algorithm: sha256WithRSAEncryption 65:34:02:30:34:be:ce:fb:db:cb:6a:94:f3:58:46:3a:e2:e7: 16:d8:d0:16:1f:72:7f:cd:0c:1e:eb:6e:2e:68:83:91:5d:16: 33:e2:8e:5c:f6:77:07:bf:cb:c9:1e:a7:fc:92:ed:fa:b9:47: 27:30:67:f4:cd:d6:29:67:5b:d3:74:f2:21:3e:87:50:d0:81: d9:00:f8:c9:76:c4:0c:5f:d8:57:47:48:2f:98:0b:bb:0f:6c: 53:32:b4:74:a0:90:14:f1:f7:7b:4d:db:50:28:9a:71:fa:60: f8:20:2d:7f:55:27:0a:58:97:37:3a:77:7e:66:0a:a9:89:d5: 17:21:35:7c:12:fa:95:a5:21:4a:3c:93:49:16:58:e5:0e:b6: 6e:07:88:ce:b4:09:f0:fa:ca:3f:64:09:d2:d1:dc:37:0c:bd: 79:34:98:17:3e:ad:c2:75:3a:c6:31:70:e1:12:b1:63:91:35: 3c:9e:fd:ec:0a:d0:0e:cd:b3:bb:aa:4c:33:72:a7:80:27:ee: df:d8:c7:f1:96:18:27:6c:30:fe:40:e6:89:93:70:bc:2b:5b: cf:d5:21:15:41:af:80:28:ad:05:76:7c:f1:76:d0:98:9e:53: f6:88:1b:16:98:a9:87:6c:b5:3b:15:b6:27:c9:4b:28:6c:8f: 1d:71:27:4a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt4o0HBIwmqTFxE0zlrAeidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODAwM2M5Nzk2MDNmN2NlYTEyYWNhMDFlYmMyMDU3YzM2ZmQ3ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT76xAfOfmnpNXqYdrwqaVn84RwQ Bso09SyXnF/zlgQO7lEupFOtI17V+Ar1M5JLSAM3fGCMhXl0jM43+L6dOfp/0Bvw s0Xxa4AwaQiVcd/+E5402JSWYkoswZjodyE1rIymytk0O1wG/WMFa965ZKKDT8JH 9faJCVo4muJvzHU2YIW79gRHZd0NiXdRQkXF41evA53TPKy8A4CT+4I8n9AKFJGy EJQGayGXxsMZSxkafbkaZVaed4SEThB1xey/CXYek0d7q3ts7vP554DiYcZHfB+9 91KU6W//12qIi3hqc+TcNfCBLA9vM8QiURNftUxQlcPSrDN8vx97BZPoIQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFMgAPJeWA/fOoSrKAevCBXw2/X8wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzAzY2Ew MS1iOTU5LTQxYTYtODEzMy0wNzIyODgxMmQwMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMDNjYTAx LWI5NTktNDFhNi04MTMzLTA3MjI4ODEyZDAxNy8xL3lBQThsNVlEOTg2aEtzb0I2 OElGZkRiOWZ6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQFPnDgAwQDXo/QAwQCuT3gAwQCuT8UAwQA1Wwd MBQEAgACMA4DBQAqABVYAwUAKgInyDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJy fwIDAL4FMA0GCSqGSIb3DQEBCwUAA4IBAQBlNAIwNL7O+9vLapTzWEY64ucW2NAW H3J/zQwe624uaIORXRYz4o5c9ncHv8vJHqf8ku36uUcnMGf0zdYpZ1vTdPIhPodQ 0IHZAPjJdsQMX9hXR0gvmAu7D2xTMrR0oJAU8fd7TdtQKJpx+mD4IC1/VScKWJc3 Ond+ZgqpidUXITV8EvqVpSFKPJNJFljlDrZuB4jOtAnw+so/ZAnS0dw3DL15NJgX Pq3CdTrGMXDhErFjkTU8nv3sCtAOzbO7qkwzcqeAJ+7f2MfxlhgnbDD+QOaJk3C8 K1vP1SEVQa+AKK0FdnzxdtCYnlP2iBsWmKmHbLU7FbYnyUsobI8dcSdK -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:27 2026 by rpki-client