This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer File: yIYjh23RrY5iSiPdUossZMgKhSE.cer (raw, json) Hash identifier: CRLfv3OQMbG4Ip6BQJpXdg33y67rIeV7uSb6ONYAISQ= Subject key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4480191985D6CE1D91681EF17E246 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34806 AS: 62107 IP: 45.159.56.0/22 IP: 193.107.23.0/24 IP: 2a0f:7a80::/29 IP: 2a11:4580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:48:01:91:98:5d:6c:e1:d9:16:81:ef:17:e2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:7a:ae:16:d1:36:ac:5b:15:25:61:56:c7: 96:71:a6:da:f4:0f:59:e1:09:b1:b1:11:1e:31:5d: 09:fc:8f:19:cc:c9:46:34:ea:ca:2e:63:d9:f0:80: 59:49:36:89:57:6f:16:ff:15:bd:8a:f7:5c:13:59: 92:e7:cc:08:4b:24:95:9a:3f:09:ea:db:43:cc:6c: 0e:a9:d9:5a:ee:f2:b7:d1:b7:1c:6a:03:10:a3:b2: 4b:99:49:2d:8c:c9:97:f1:b8:4d:0e:1d:e9:02:e6: 7a:eb:df:b7:0c:fb:7a:7e:7d:2b:f2:40:0a:fa:3d: d3:d0:58:b6:76:6f:9c:04:b4:ab:e2:3d:b4:8b:86: f0:29:fc:40:1c:9a:d1:7a:f7:84:06:fc:39:aa:ed: 5a:70:ef:dc:29:2b:07:93:bb:87:69:db:1f:1f:6b: 99:d6:0e:56:77:d4:56:57:94:5b:c4:cf:84:42:83: eb:d9:cd:51:21:cb:5e:9b:b7:25:d7:fa:56:32:31: 0a:dc:99:c5:cd:ca:9a:59:8d:2a:1d:4b:5e:a3:c4: c5:e2:2c:03:36:c1:dc:4a:e9:46:86:17:91:56:6b: 9b:62:2a:7d:2f:ff:db:65:48:c1:62:81:8a:ca:f2: 24:e8:0f:bc:20:a3:61:63:bd:50:43:63:37:3d:15: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.56.0/22 193.107.23.0/24 IPv6: 2a0f:7a80::/29 2a11:4580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34806 62107 Signature Algorithm: sha256WithRSAEncryption 93:d0:19:47:a7:9c:87:1c:e6:11:cf:69:89:7b:e7:be:8f:a8: 84:ef:c5:67:59:d9:a4:d8:f3:f1:bf:cc:17:73:e2:de:c0:c4: 00:82:98:db:dd:03:32:9a:e7:af:04:ce:c8:73:c6:8b:1b:f6: 32:71:d3:e1:49:3d:10:c3:1b:30:43:7e:3b:09:7a:7a:97:f2: 81:07:27:ff:0c:88:2f:97:f2:0f:f5:03:23:06:d5:de:d4:c0: fb:b0:99:1a:6e:00:52:c8:92:b2:83:b4:4d:42:ce:bb:35:70: 5b:80:90:ed:5d:31:b3:41:63:16:b9:88:b2:f1:17:42:0b:df: 4b:e1:7a:ca:e7:db:6c:c0:35:0d:0a:1a:73:21:f2:c1:cb:67: 93:63:55:40:d3:25:cf:df:7b:51:22:ad:7a:72:e6:fe:42:e5: cd:da:8c:9d:4c:d8:e4:0d:35:d1:f2:c6:94:82:d9:cb:8b:35: de:0b:99:f8:af:e4:3a:63:0a:08:b6:57:af:70:3f:2c:b0:93: fa:ad:49:e2:9e:b0:50:28:16:c2:65:1b:0e:cf:6d:28:45:11: 70:5c:c7:59:ab:68:6f:f7:a7:65:0f:b4:39:93:de:4b:ad:c3: ba:2a:1d:35:fd:79:7c:92:1e:84:bd:a8:3d:56:65:db:15:77: 3d:3d:ea:10 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+pEgBkZhdbOHZFoHvF+JGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODg2MjM4NzZkZDFhZDhlNjI0YTIzZGQ1MjhiMmM2NGM4MGE4NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqh6rhbRNqxbFSVhVseWcaba9A9Z 4QmxsREeMV0J/I8ZzMlGNOrKLmPZ8IBZSTaJV28W/xW9ivdcE1mS58wISySVmj8J 6ttDzGwOqdla7vK30bccagMQo7JLmUktjMmX8bhNDh3pAuZ669+3DPt6fn0r8kAK +j3T0Fi2dm+cBLSr4j20i4bwKfxAHJrReveEBvw5qu1acO/cKSsHk7uHadsfH2uZ 1g5Wd9RWV5RbxM+EQoPr2c1RIctem7cl1/pWMjEK3JnFzcqaWY0qHUteo8TF4iwD NsHcSulGhheRVmubYip9L//bZUjBYoGKyvIk6A+8IKNhY71QQ2M3PRUUZQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFMiGI4dt0a2OYkoj3VKLLGTICoUhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzE4MjVk MS03YzAxLTQ5MTUtYTQ0NC0yZWI1MTI2MWRkYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMTgyNWQx LTdjMDEtNDkxNS1hNDQ0LTJlYjUxMjYxZGRiYS8xL3lJWWpoMjNSclk1aVNpUGRV b3NzWk1nS2hTRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLZ84AwQAwWsXMBQEAgACMA4DBQMqD3qAAwUD KhFFgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAh/YCAwDymzANBgkqhkiG9w0B AQsFAAOCAQEAk9AZR6echxzmEc9piXvnvo+ohO/FZ1nZpNjz8b/MF3Pi3sDEAIKY 290DMprnrwTOyHPGixv2MnHT4Uk9EMMbMEN+Owl6epfygQcn/wyIL5fyD/UDIwbV 3tTA+7CZGm4AUsiSsoO0TULOuzVwW4CQ7V0xs0FjFrmIsvEXQgvfS+F6yufbbMA1 DQoacyHywctnk2NVQNMlz997USKtenLm/kLlzdqMnUzY5A010fLGlILZy4s13guZ +K/kOmMKCLZXr3A/LLCT+q1J4p6wUCgWwmUbDs9tKEURcFzHWatob/enZQ+0OZPe S63DuiodNf15fJIehL2oPVZl2xV3PT3qEA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:19 2026 by rpki-client