This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer (raw, json) Hash identifier: kDVJIxHCn3xW6qysXxQmbD4yquZ7E1CAxKnqz6X7eYE= Subject key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79109D1E3330E05970CC650DD3FB8925 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208512 IP: 185.136.128.0/22 IP: 2a03:a4e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9d:1e:33:30:e0:59:70:cc:65:0d:d3:fb:89:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:0c:57:c7:b7:c9:b5:6e:14:14:68:53:7b: d8:13:03:ba:c0:fb:52:88:18:f4:a1:82:aa:79:70: cc:19:20:c9:d9:80:ce:52:50:23:1f:e3:4d:0d:d7: 55:3b:da:3d:97:74:ad:44:e2:79:ef:66:b0:fc:43: e2:9c:bd:9c:b5:b9:1b:31:3f:0a:82:b4:a2:46:b8: 0f:33:fd:ec:a6:42:7f:73:78:de:e0:12:56:55:b5: 82:c2:fa:20:5f:66:39:5d:fd:eb:96:3d:59:8c:a4: f1:8b:33:20:7a:fb:e7:f1:56:bd:51:70:52:ce:1b: 5d:5f:29:01:9a:5c:d4:33:f3:92:45:ec:53:e6:a9: 3c:11:85:33:3b:27:28:6b:3d:7e:0f:25:02:d6:1c: 25:d5:62:08:1f:c1:a3:bd:85:94:07:35:11:75:c3: 5b:ae:c9:89:d1:fc:4f:05:48:ca:d6:2d:03:1d:27: 12:a7:5e:4b:14:60:9a:e8:e8:a4:18:73:e8:68:12: 92:56:c2:37:0f:07:50:a8:91:dd:4f:83:8a:23:69: c8:02:c3:a9:4c:87:5d:34:c8:14:21:33:35:00:fd: f3:0c:0a:50:4f:5d:fe:09:30:d8:f8:90:df:0d:d7: 88:8b:9b:2d:2e:ad:a3:f4:f0:78:20:b4:3c:b1:b1: f2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.128.0/22 IPv6: 2a03:a4e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208512 Signature Algorithm: sha256WithRSAEncryption 29:35:6c:94:27:92:47:23:dc:6f:7f:f3:5b:23:f9:c3:be:b1: 70:f8:f5:ff:b8:3c:33:34:78:c7:91:f8:15:2a:d3:f2:e0:f7: 2e:9b:29:8b:f1:e8:dc:1b:b7:d9:0f:3f:b6:20:b1:54:82:ee: c8:10:a9:69:2d:d9:94:ab:eb:00:27:27:d6:db:db:f1:4c:d2: ad:94:52:22:bb:c4:78:5a:6a:ef:4d:e0:aa:77:70:86:f4:93: 95:ab:22:74:d3:c8:66:37:15:d6:27:42:2e:5b:a4:cd:89:39: 3d:c8:ce:83:35:1b:e2:f3:b3:3c:bf:3d:a8:e4:d6:0a:c2:84: d7:5f:b8:b4:59:6a:41:55:03:6a:82:86:57:60:c9:6f:0c:86: b8:19:25:00:d4:2a:ea:8a:2a:38:82:bf:eb:c5:85:ef:f8:32: 6d:71:ad:af:6c:b0:ce:c0:10:36:fe:44:2f:5b:36:f7:ae:6d: 3b:b4:1b:db:ea:62:a4:cf:a5:f8:bb:83:5a:5c:a9:da:75:76: e7:ad:23:67:96:b2:89:6a:05:3d:b5:61:f3:99:e5:f4:3d:f7: bd:d6:d3:af:54:e4:91:bc:5a:cb:23:8f:17:db:f0:a3:fb:a9: 49:25:b8:d8:b7:95:0f:3a:86:82:98:f8:d8:b3:6f:89:c5:1b: ea:e5:35:ce -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EJ0eMzDgWXDMZQ3T+4klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTUwZDdiMTk3NWEzNzAzYWUyN2IzMWFkMmY5MzJhZTQ2YTRjYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs50MV8e3ybVuFBRoU3vYEwO6wPtS iBj0oYKqeXDMGSDJ2YDOUlAjH+NNDddVO9o9l3StROJ572aw/EPinL2ctbkbMT8K grSiRrgPM/3spkJ/c3je4BJWVbWCwvogX2Y5Xf3rlj1ZjKTxizMgevvn8Va9UXBS zhtdXykBmlzUM/OSRexT5qk8EYUzOycoaz1+DyUC1hwl1WIIH8GjvYWUBzURdcNb rsmJ0fxPBUjK1i0DHScSp15LFGCa6OikGHPoaBKSVsI3DwdQqJHdT4OKI2nIAsOp TIddNMgUITM1AP3zDApQT13+CTDY+JDfDdeIi5stLq2j9PB4ILQ8sbHy+QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMlQ17GXWjcDriezGtL5Mq5GpMyUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzBjNzMx OC1iMzQ4LTRiMjQtYjllNS1jNmE4ODIxYWRlYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMGM3MzE4 LWIzNDgtNGIyNC1iOWU1LWM2YTg4MjFhZGVhOS8xL3lWRFhzWmRhTndPdUo3TWEw dmt5cmtha3pKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYiAMA0EAgACMAcDBQAqA6TgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMugDANBgkqhkiG9w0BAQsFAAOCAQEAKTVslCeSRyPc b3/zWyP5w76xcPj1/7g8MzR4x5H4FSrT8uD3Lpspi/Ho3Bu32Q8/tiCxVILuyBCp aS3ZlKvrACcn1tvb8UzSrZRSIrvEeFpq703gqndwhvSTlasidNPIZjcV1idCLluk zYk5PcjOgzUb4vOzPL89qOTWCsKE11+4tFlqQVUDaoKGV2DJbwyGuBklANQq6ooq OIK/68WF7/gybXGtr2ywzsAQNv5EL1s2965tO7Qb2+pipM+l+LuDWlyp2nV2560j Z5ayiWoFPbVh85nl9D33vdbTr1TkkbxayyOPF9vwo/upSSW42LeVDzqGgpj42LNv icUb6uU1zg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:58 2026 by rpki-client