This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer (raw, json) Hash identifier: FvDsZMhVN/88keOX+jOdilUB+NsWkWdSVLYHMcPPR00= Subject key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CFC7A2DE4B46C2E8D8D555B7434BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.1.168.0/21 IP: 37.252.200.0/21 IP: 185.15.32.0/22 IP: 2a03:b7c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fc:7a:2d:e4:b4:6c:2e:8d:8d:55:5b:74:34:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8d335041718b18830b1f58c15d3518510fe6118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:14:20:7f:05:13:e2:17:24:4a:f6:07:a9: 0e:cd:0c:70:07:1c:50:da:f1:81:f5:62:3e:04:ef: 12:25:59:4e:c3:f2:b5:04:97:a9:49:7d:d6:25:28: 22:aa:a4:67:1f:56:ad:6b:65:9b:b2:00:5f:84:00: 5a:42:e1:57:69:54:39:16:3a:8f:b0:fc:17:1d:30: ad:a8:6e:bb:b5:83:c1:86:13:64:e8:4a:db:11:fe: 05:8a:6b:06:d9:83:79:a5:3d:7c:3d:bc:2a:75:ca: 2c:ea:26:ca:64:65:ff:4d:e2:c6:3b:7d:c7:a7:a7: 49:8b:13:d4:c6:99:83:11:e0:19:21:74:0e:0e:86: b4:a7:ce:56:3e:b3:19:88:11:c8:e6:98:30:31:80: 0f:1d:cd:2d:9d:5c:0c:61:11:c0:7d:01:c6:7f:fc: c0:6c:31:f1:a0:60:46:b7:2d:f0:b9:19:d6:a2:f4: 5e:a5:b7:6e:ad:77:c9:b4:3d:f5:e5:54:09:aa:7f: dd:ae:ad:c7:4a:50:00:09:f7:cd:70:1b:68:3a:bc: ab:36:03:e5:1c:0c:e9:bf:60:a1:f3:6c:5e:c9:e6: c6:35:21:10:cd:c8:4b:11:05:c1:bb:0c:0d:f6:f4: b6:22:a8:30:44:ab:10:88:27:0b:22:79:0d:39:bd: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.168.0/21 37.252.200.0/21 185.15.32.0/22 IPv6: 2a03:b7c0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:a0:cf:01:1e:a0:dc:1b:50:73:e9:20:de:dc:43:21:43:c5: 52:60:46:51:bb:cd:ab:37:21:ba:de:e1:07:79:ba:8a:1e:ff: a9:b7:e6:68:4d:07:98:72:a1:fb:e5:fa:de:66:d8:22:f0:14: a4:b5:94:fe:aa:82:50:e7:37:57:b5:69:c5:ad:17:aa:f6:76: 05:74:6d:30:6b:e1:7b:f7:6b:07:23:c6:55:74:75:66:6f:3e: 57:df:e9:89:43:ee:ec:c1:45:0d:a0:bc:6e:5f:1c:72:cd:cc: cd:3a:3f:c1:39:da:f5:b6:ad:62:1a:85:62:61:4b:a8:51:ef: b8:37:ba:f4:00:a6:25:77:2e:b5:75:ec:99:6f:fb:f5:24:c9: e3:87:85:3d:51:96:59:b0:69:e2:80:2f:af:42:a9:c1:ae:17: bf:a7:df:6b:fd:0e:3b:26:93:6a:19:19:73:55:e4:86:9b:d8: 0c:c5:15:63:ac:44:c1:95:60:63:f9:da:2e:58:a1:40:8d:b2: ff:64:d5:b6:6b:c8:2c:fb:a3:7c:84:dd:8f:41:3c:ea:48:69: 0c:f4:59:85:9c:75:fd:85:9b:c7:5f:a9:c6:aa:bc:3a:34:ac: 89:2f:dc:7f:45:e0:e3:7b:b7:d3:27:23:2b:f0:75:44:51:4e: 8f:e0:71:88 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9XPx6LeS0bC6NjVVbdDS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGQzMzUwNDE3MThiMTg4MzBiMWY1OGMxNWQzNTE4NTEwZmU2MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCsUIH8FE+IXJEr2B6kOzQxwBxxQ 2vGB9WI+BO8SJVlOw/K1BJepSX3WJSgiqqRnH1ata2WbsgBfhABaQuFXaVQ5FjqP sPwXHTCtqG67tYPBhhNk6ErbEf4FimsG2YN5pT18Pbwqdcos6ibKZGX/TeLGO33H p6dJixPUxpmDEeAZIXQODoa0p85WPrMZiBHI5pgwMYAPHc0tnVwMYRHAfQHGf/zA bDHxoGBGty3wuRnWovRepbdurXfJtD315VQJqn/drq3HSlAACffNcBtoOryrNgPl HAzpv2Ch82xeyebGNSEQzchLEQXBuwwN9vS2IqgwRKsQiCcLInkNOb38VwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzhhMzQ0 ZS0wZWQ4LTQyYjItYTc0NC1hOWU4NDY4NzEwYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvOGEzNDRl LTBlZDgtNDJiMi1hNzQ0LWE5ZTg0Njg3MTBhMy8xL3lOTTFCQmNZc1lnd3NmV01G ZE5SaFJELVlSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJQGoAwQDJfzIAwQCuQ8gMA0EAgACMAcDBQAq A7fAMA0GCSqGSIb3DQEBCwUAA4IBAQCaoM8BHqDcG1Bz6SDe3EMhQ8VSYEZRu82r NyG63uEHebqKHv+pt+ZoTQeYcqH75freZtgi8BSktZT+qoJQ5zdXtWnFrReq9nYF dG0wa+F792sHI8ZVdHVmbz5X3+mJQ+7swUUNoLxuXxxyzczNOj/BOdr1tq1iGoVi YUuoUe+4N7r0AKYldy61deyZb/v1JMnjh4U9UZZZsGnigC+vQqnBrhe/p99r/Q47 JpNqGRlzVeSGm9gMxRVjrETBlWBj+douWKFAjbL/ZNW2a8gs+6N8hN2PQTzqSGkM 9FmFnHX9hZvHX6nGqrw6NKyJL9x/ReDje7fTJyMr8HVEUU6P4HGI -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:50 2026 by rpki-client