This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer File: yZE15YfLs4vh63tt6cSAKdBF0nM.cer (raw, json) Hash identifier: 7+xt1rG5XFwep8LkkNPJ9HS7mfC72hNFh3SYrFkOVYs= Subject key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AF8F62C2AB20E0C941C7637929D07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214247 IP: 62.108.88.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f8:f6:2c:2a:b2:0e:0c:94:1c:76:37:92:9d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c99135e587cbb38be1eb7b6de9c48029d045d273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:52:11:c6:f0:6f:58:0e:56:f3:7f:e0:ce: aa:dd:5d:2b:aa:bf:7c:78:d0:12:90:26:64:ce:cb: d9:b5:64:98:0e:2c:bb:8e:aa:db:34:da:e0:65:25: ff:cd:75:68:34:60:b9:cf:ec:81:1e:a8:9d:05:86: f9:70:35:27:af:a9:97:00:18:ed:0d:37:27:1e:9e: 15:73:a6:92:91:8a:20:15:f2:bd:66:7c:c6:48:74: 92:31:33:4a:44:bb:e2:70:3f:7f:11:99:e8:be:3b: 7b:50:42:7c:8c:f1:6a:f8:c8:00:79:f0:f9:e9:c4: cb:71:e3:81:23:33:db:c3:62:4f:90:a9:05:83:70: ef:0f:01:48:10:b4:d9:c8:0d:f2:3a:5b:a1:1f:1f: f5:69:65:9f:76:72:47:a5:c8:33:4e:95:e2:f2:57: 42:9d:95:f1:9b:c2:5a:3d:f5:68:0e:a2:a0:24:a4: b0:83:07:bd:70:91:44:df:1a:be:1b:46:4e:fc:e1: 70:10:02:df:1c:92:24:0a:23:2c:4d:00:62:2f:d7: 23:45:cf:f2:16:d9:0c:2d:3a:da:b2:71:98:62:ef: 4c:d1:69:69:df:1a:cf:e5:a0:cc:60:4e:9f:68:06: bd:4a:97:53:a1:d2:7f:33:60:c2:32:3a:06:14:5f: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.88.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214247 Signature Algorithm: sha256WithRSAEncryption 61:c6:1a:ea:d3:4b:8d:2f:be:48:35:e7:04:d2:0b:37:84:b6: be:bf:84:a6:ec:7f:77:ec:0f:39:28:f9:f6:f4:63:cb:96:b4: bc:53:53:8b:37:11:69:1a:5f:d7:36:54:ff:94:d3:6e:4b:80: 73:14:a1:a9:19:d0:77:17:57:11:ac:e0:7c:a2:d3:38:1a:a6: 64:5a:5a:78:ad:41:15:8d:9f:e0:96:b1:96:83:b3:38:9b:82: 00:39:1d:db:0e:de:26:af:4b:e0:8d:9d:c8:1f:47:94:67:b5: 31:c6:d1:a3:37:13:5a:17:63:cf:c8:84:d1:d9:98:6a:74:e8: 82:99:df:a5:a1:68:94:77:89:44:49:ec:a9:b6:79:ff:7f:e0: 9d:74:14:94:72:d5:a1:3e:9e:35:2d:c1:c5:35:c3:b5:c6:aa: 26:9d:e8:78:95:9c:11:d5:0d:20:22:66:75:f8:2a:a8:2d:bf: 6a:8d:0d:12:9b:ed:eb:d5:ca:db:7e:91:45:b3:be:dd:3d:df: 6c:f3:8c:6e:9f:94:fd:13:b0:f5:a1:46:c2:05:db:2b:e3:55: 96:c9:d0:0e:9d:3e:28:c5:cb:da:3b:ec:2f:5a:da:5a:10:db: 1f:80:76:b6:0f:fc:8e:aa:76:47:72:8b:55:d9:d3:b3:57:86: 08:42:4e:19 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6Wvj2LCqyDgyUHHY3kp0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTkxMzVlNTg3Y2JiMzhiZTFlYjdiNmRlOWM0ODAyOWQwNDVkMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxFSEcbwb1gOVvN/4M6q3V0rqr98 eNASkCZkzsvZtWSYDiy7jqrbNNrgZSX/zXVoNGC5z+yBHqidBYb5cDUnr6mXABjt DTcnHp4Vc6aSkYogFfK9ZnzGSHSSMTNKRLvicD9/EZnovjt7UEJ8jPFq+MgAefD5 6cTLceOBIzPbw2JPkKkFg3DvDwFIELTZyA3yOluhHx/1aWWfdnJHpcgzTpXi8ldC nZXxm8JaPfVoDqKgJKSwgwe9cJFE3xq+G0ZO/OFwEALfHJIkCiMsTQBiL9cjRc/y FtkMLTrasnGYYu9M0Wlp3xrP5aDMYE6faAa9SpdTodJ/M2DCMjoGFF9LHwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMmRNeWHy7OL4et7benEgCnQRdJzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzMwOTUx ZS1hMzA5LTQ1YzMtYmExNi0xMzRkOTUzY2EwOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMzA5NTFl LWEzMDktNDVjMy1iYTE2LTEzNGQ5NTNjYTA5My8xL3laRTE1WWZMczR2aDYzdHQ2 Y1NBS2RCRjBuTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDPmxYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNE5zANBgkqhkiG9w0BAQsFAAOCAQEAYcYa6tNLjS++SDXnBNILN4S2vr+Epux/ d+wPOSj59vRjy5a0vFNTizcRaRpf1zZU/5TTbkuAcxShqRnQdxdXEazgfKLTOBqm ZFpaeK1BFY2f4JaxloOzOJuCADkd2w7eJq9L4I2dyB9HlGe1McbRozcTWhdjz8iE 0dmYanTogpnfpaFolHeJREnsqbZ5/3/gnXQUlHLVoT6eNS3BxTXDtcaqJp3oeJWc EdUNICJmdfgqqC2/ao0NEpvt69XK236RRbO+3T3fbPOMbp+U/ROw9aFGwgXbK+NV lsnQDp0+KMXL2jvsL1raWhDbH4B2tg/8jqp2R3KLVdnTs1eGCEJOGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:55:05 2026 by rpki-client