This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer File: yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer (raw, json) Hash identifier: W0biJ+V3jkrQExNDUxCihnTgjeprqslsq+aw1ekbZA0= Subject key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1566CDFB1AF045FEA3971411DC46B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.166.140.0/22 IP: 2a0a:ea00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:66:cd:fb:1a:f0:45:fe:a3:97:14:11:dc:46:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9633fa6fc66b43639c056d02174f80c2426614b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:27:1b:6c:d4:26:5c:c4:6f:17:28:e5:13: 7d:12:94:95:cc:94:a7:4d:fb:c5:b3:27:31:57:c2: 47:7d:b9:94:0d:51:8a:3e:47:57:9a:8a:19:f5:fa: 9e:cd:ab:78:b0:c6:e3:33:f2:07:eb:10:18:41:60: b7:97:c3:b8:e5:b2:e1:5c:6a:4e:fa:45:77:ec:7a: ee:59:d3:c1:c6:69:65:82:f4:66:90:de:c2:4b:8a: e5:0e:ca:9d:03:e4:7a:a6:69:80:ca:ca:55:0a:e7: 32:a7:6c:72:ec:2b:1e:10:81:48:66:c9:bc:c0:90: d7:8f:a9:30:47:ee:12:d1:e2:0f:30:19:a0:6c:cc: 41:ec:82:aa:3e:d1:96:5d:40:a2:ea:dd:88:cb:16: 58:6e:de:46:d4:77:5f:37:09:22:16:18:8a:f6:19: d2:42:0f:b5:4a:29:54:3a:4c:be:9c:ef:ec:a9:db: 07:78:da:51:91:19:45:75:07:23:86:1c:f4:a7:8b: 25:11:5a:d9:8c:41:90:4e:0c:8b:85:9c:f8:8f:33: 7c:b1:11:d0:eb:5b:43:28:fa:31:bf:0d:cb:e2:5b: a2:91:62:05:8c:21:23:30:03:16:c0:87:c0:fd:fe: 83:ad:0d:55:c1:be:85:8b:58:f6:bf:99:61:bd:67: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.140.0/22 IPv6: 2a0a:ea00::/32 Signature Algorithm: sha256WithRSAEncryption 62:77:96:15:f1:87:83:9d:3e:d1:7e:64:2d:a4:7d:c5:3e:7f: 61:88:fa:4c:07:06:d8:14:a2:95:de:59:e4:f8:87:7d:f4:25: 25:80:6a:80:22:29:25:a1:83:ea:63:01:76:5e:0c:a5:91:b2: b3:f1:13:7d:74:21:8a:ac:35:f4:c7:de:ef:94:72:51:16:85: 6f:e5:8d:91:92:49:3c:60:97:a2:62:0b:98:e1:c6:aa:3a:d4: ac:d2:4a:75:62:4c:0e:d5:1f:cc:46:fe:37:ae:4d:4a:14:85: f6:05:8f:74:73:96:a0:ca:35:55:3b:c4:92:f9:7a:4d:30:7b: 6c:05:b5:b7:64:f4:fd:b8:e9:ef:15:89:81:3a:b5:b4:dd:72: ca:31:2d:5b:33:11:1d:95:c5:30:b7:38:bb:60:9d:1c:4e:c3: 85:cc:a5:e1:7a:b4:2b:81:11:92:86:83:f9:bd:8b:4b:48:68: f8:6e:06:2f:cf:e8:ef:2d:04:ef:d2:7f:d3:7b:dd:a6:27:65: a6:45:94:0e:d6:6d:33:2d:02:63:df:96:17:b6:e0:78:83:d0: 52:9f:08:9f:9e:80:4e:e7:50:61:6e:c3:9c:e9:cb:94:9f:0e: cd:bd:06:22:6c:5e:3c:d8:d1:f2:f1:f5:b3:7a:cc:15:6e:94: 1b:82:59:8c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FWbN+xrwRf6jlxQR3EaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTYzM2ZhNmZjNjZiNDM2MzljMDU2ZDAyMTc0ZjgwYzI0MjY2MTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwEnG2zUJlzEbxco5RN9EpSVzJSn TfvFsycxV8JHfbmUDVGKPkdXmooZ9fqezat4sMbjM/IH6xAYQWC3l8O45bLhXGpO +kV37HruWdPBxmllgvRmkN7CS4rlDsqdA+R6pmmAyspVCucyp2xy7CseEIFIZsm8 wJDXj6kwR+4S0eIPMBmgbMxB7IKqPtGWXUCi6t2IyxZYbt5G1HdfNwkiFhiK9hnS Qg+1SilUOky+nO/sqdsHeNpRkRlFdQcjhhz0p4slEVrZjEGQTgyLhZz4jzN8sRHQ 61tDKPoxvw3L4luikWIFjCEjMAMWwIfA/f6DrQ1Vwb6Fi1j2v5lhvWfWWQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMljP6b8ZrQ2OcBW0CF0+AwkJmFLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzljYjMy OS0wZmU5LTRmZmUtYmU1Zi0wMzhhNTRlMzkxMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvOWNiMzI5 LTBmZTktNGZmZS1iZTVmLTAzOGE1NGUzOTEyZi8xL3lXTV9wdnhtdERZNXdGYlFJ WFQ0RENRbVlVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaaMMA0EAgACMAcDBQAqCuoAMA0GCSqGSIb3 DQEBCwUAA4IBAQBid5YV8YeDnT7RfmQtpH3FPn9hiPpMBwbYFKKV3lnk+Id99CUl gGqAIikloYPqYwF2XgylkbKz8RN9dCGKrDX0x97vlHJRFoVv5Y2Rkkk8YJeiYguY 4caqOtSs0kp1YkwO1R/MRv43rk1KFIX2BY90c5agyjVVO8SS+XpNMHtsBbW3ZPT9 uOnvFYmBOrW03XLKMS1bMxEdlcUwtzi7YJ0cTsOFzKXherQrgRGShoP5vYtLSGj4 bgYvz+jvLQTv0n/Te92mJ2WmRZQO1m0zLQJj35YXtuB4g9BSnwifnoBO51BhbsOc 6cuUnw7NvQYibF482NHy8fWzeswVbpQbglmM -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:45 2026 by rpki-client