This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer File: yKS714rzY_pb7uYy6L3Ei2KXNDw.cer (raw, json) Hash identifier: LbgqOGh+ZeFcdX1A2JzZF8vD3JxvgYvHar9RrwBd/KU= Subject key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED0E3D155912224EEB540AFBBB925D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 198.151.157.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0e:3d:15:59:12:22:4e:eb:54:0a:fb:bb:92:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:21:af:ad:9b:d3:c3:ba:da:70:8b:35:ee: cf:35:41:0b:42:36:96:e4:b7:86:c8:72:55:c7:08: fb:dd:ea:82:3b:85:cc:62:13:65:d7:42:4b:f0:e2: e3:aa:aa:d6:e0:9b:fa:d3:f8:17:04:2c:3d:4b:cd: 20:39:fe:e5:5b:f3:1e:70:ce:67:ec:90:1f:d1:7b: c4:85:bf:7c:5d:d4:a3:5b:94:fd:90:57:75:91:53: 2f:1e:e6:09:98:e6:2a:26:3f:0f:4a:7b:33:1a:57: 1a:7a:bd:0f:79:fc:9d:e9:21:5a:09:d2:7d:7c:78: b8:39:ea:7d:e7:70:11:54:b9:14:b3:7f:f5:40:d7: f7:83:54:f8:e2:2b:56:28:4a:4d:4c:da:29:59:b2: 42:7f:be:b3:c5:ef:c3:e9:8a:1d:e7:3d:74:08:df: 7d:61:aa:cb:dc:03:ce:f8:48:6d:f7:75:84:82:36: 9f:a1:5a:9e:87:40:e8:b0:8b:61:9c:28:a5:0b:e8: 3a:eb:ed:e0:66:60:35:5a:aa:94:d7:4e:a2:ea:ab: 68:38:cf:25:5c:77:26:a6:2c:ac:d7:92:57:5c:27: c1:36:b7:4e:62:80:2f:00:b8:6f:47:39:6f:af:f3: 02:c0:11:26:47:69:9e:cf:12:be:58:fc:31:60:8e: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.151.157.0/24 Signature Algorithm: sha256WithRSAEncryption 22:ff:53:7a:f4:01:e7:db:46:71:02:b0:4b:4c:6c:25:77:8e: 66:6d:9b:4b:a2:44:ba:09:27:5a:e3:a1:a6:63:3d:53:17:85: a9:d0:fe:37:ff:ff:6e:d5:ec:1b:3d:02:aa:7e:43:8b:35:03: 72:48:1e:e7:8a:7d:31:a7:de:db:d8:2e:44:4c:e7:b5:85:c2: 84:d5:e4:1d:d4:f3:06:0a:e0:cc:f5:ce:69:b2:21:b0:55:30: 8d:07:6c:88:7e:25:53:6b:6e:f5:84:3e:9b:44:ae:f9:66:8a: a6:d0:3d:ce:c0:e5:b3:14:d5:1c:26:63:49:df:80:32:c6:e4: 0b:db:34:a8:f0:d2:c9:9c:d5:3f:e7:91:6e:12:d8:0f:42:2c: 43:3e:bf:4b:a6:45:79:8b:c4:81:d3:0f:53:1b:c9:10:7c:a7: 3f:d8:9a:d0:cd:4e:92:d2:a0:8b:c6:fe:bf:34:ee:9d:ae:bf: 1a:a2:a5:10:ed:4e:2b:63:e5:1b:81:f4:85:40:0d:dd:ef:9a: 05:6b:92:51:67:fb:a8:e8:e6:97:f3:90:1a:77:3a:d9:dc:01: e4:6e:03:ed:3a:73:38:9d:1b:09:d9:5a:de:72:c4:a1:b0:d0: 6b:60:da:aa:f2:c1:52:e7:ad:56:03:34:37:2c:5b:c7:7f:ad: 0a:49:74:65 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87Q49FVkSIk7rVAr7u5JdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGE0YmJkNzhhZjM2M2ZhNWJlZWU2MzJlOGJkYzQ4YjYyOTczNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bMhr62b08O62nCLNe7PNUELQjaW 5LeGyHJVxwj73eqCO4XMYhNl10JL8OLjqqrW4Jv60/gXBCw9S80gOf7lW/MecM5n 7JAf0XvEhb98XdSjW5T9kFd1kVMvHuYJmOYqJj8PSnszGlcaer0Pefyd6SFaCdJ9 fHi4Oep953ARVLkUs3/1QNf3g1T44itWKEpNTNopWbJCf76zxe/D6Yod5z10CN99 YarL3APO+Eht93WEgjafoVqeh0DosIthnCilC+g66+3gZmA1WqqU106i6qtoOM8l XHcmpiys15JXXCfBNrdOYoAvALhvRzlvr/MCwBEmR2mezxK+WPwxYI4dyQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMiku9eK82P6W+7mMui9xItilzQ8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzI0NmI0 ZC00ZDNlLTRlMDItOGMwNy1hYzY4YTUwZDBjOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvMjQ2YjRk LTRkM2UtNGUwMi04YzA3LWFjNjhhNTBkMGM5OS8xL3lLUzcxNHJ6WV9wYjd1WXk2 TDNFaTJLWE5Edy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAxpedMA0GCSqGSIb3DQEBCwUAA4IBAQAi/1N6 9AHn20ZxArBLTGwld45mbZtLokS6CSda46GmYz1TF4Wp0P43//9u1ewbPQKqfkOL NQNySB7nin0xp97b2C5ETOe1hcKE1eQd1PMGCuDM9c5psiGwVTCNB2yIfiVTa271 hD6bRK75Zoqm0D3OwOWzFNUcJmNJ34AyxuQL2zSo8NLJnNU/55FuEtgPQixDPr9L pkV5i8SB0w9TG8kQfKc/2JrQzU6S0qCLxv6/NO6drr8aoqUQ7U4rY+UbgfSFQA3d 75oFa5JRZ/uo6OaX85AadzrZ3AHkbgPtOnM4nRsJ2VrecsShsNBrYNqq8sFS561W AzQ3LFvHf60KSXRl -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:37 2026 by rpki-client