This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer (raw, json) Hash identifier: qJkmWxnUO4+zXs1BBoXyK+3sTfIEeuVxc9jqknX5Nxc= Subject key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BA03E4609249F475F507540BCEAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.4.4.0/22 IP: 2a02:5e40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ba:03:e4:60:92:49:f4:75:f5:07:54:0b:ce:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9b:9a:e7:e0:be:3d:cb:db:f5:e7:0e:7c:80: d2:a6:c6:51:0e:9b:96:a1:e9:ee:78:c6:a2:fe:00: 39:23:dc:17:75:46:4c:b7:83:a9:19:c5:f4:61:91: 2c:b0:dc:c9:b4:c2:50:3e:8b:9b:e3:b5:5f:12:38: 27:d7:0c:ee:df:81:04:f8:cf:ec:6e:85:de:59:bd: 44:33:55:06:3d:e8:78:47:05:43:27:a8:ae:da:b9: 6a:ff:bd:c9:f9:d2:8d:0d:ab:12:1a:c7:18:ec:7c: f1:96:8b:b0:bd:16:5a:9c:a5:dc:df:59:d4:1d:a5: 38:5b:d6:2f:6a:ac:ad:6d:02:83:f7:d7:cb:92:ae: 1e:8c:4c:32:b3:3c:88:21:01:be:b7:38:7f:f3:de: e1:25:5c:46:ff:91:6c:77:28:58:06:9e:ce:74:4a: dc:28:2a:f0:39:6a:f2:89:93:b3:51:56:86:64:5e: c5:7d:d8:d8:07:ac:db:ce:0b:4d:57:31:93:63:ea: 31:89:94:15:d8:14:1c:2d:4e:cd:61:04:67:b5:8d: 32:33:af:27:c5:09:fd:cb:ec:02:b6:46:a8:6e:1d: b3:e3:78:79:3e:79:85:20:82:cd:c1:11:66:15:5c: 54:c7:5c:67:26:2a:9c:4e:25:0b:6b:3a:40:4a:65: 73:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.4.0/22 IPv6: 2a02:5e40::/32 Signature Algorithm: sha256WithRSAEncryption 8c:53:2b:8f:09:70:bc:8f:a4:b1:b2:ab:69:9b:22:b3:d5:92: 95:c3:0f:98:41:7c:11:ff:0d:fd:e6:01:18:ee:46:c5:d4:ec: a7:0c:e4:ce:6c:23:4b:5f:51:fb:0e:87:93:38:86:f5:e8:71: 12:64:7a:4a:65:5a:70:ba:00:f4:da:dd:59:38:ff:3e:dd:18: 37:ac:c7:17:b3:22:dc:91:07:a4:49:d9:ec:d8:eb:8d:3b:e8: 4e:ab:6a:5a:7a:75:6a:14:92:0e:b7:b8:fb:c5:c6:aa:69:18: f7:d7:4d:53:70:7b:ff:00:a5:a0:ca:b4:3d:40:ca:a0:ba:93: 67:7a:7a:f4:41:93:69:05:8d:30:7f:af:38:47:7c:87:a5:4c: 92:a8:6b:ac:23:5d:13:8e:d4:10:ee:4d:37:ac:6b:5a:10:6a: af:af:fc:1f:27:d9:79:c5:7e:27:ab:ff:a9:8f:ff:cf:91:b6: 19:3d:d7:e9:2b:04:c3:2f:6e:8d:f7:de:6a:47:e2:e3:3c:3c: 68:98:84:db:ce:c3:77:f8:0c:0a:82:15:78:45:13:83:3f:31: f8:d9:6e:ba:1c:06:a1:61:20:2a:0f:8c:20:52:01:7b:3b:ce: 03:6a:8a:d4:8a:18:62:30:da:40:16:66:79:48:2f:bb:56:38: ff:27:43:c0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FboD5GCSSfR19QdUC86vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTBjMmRhY2FmZGZhNTM5OTdlZDNiMGE3MGRmYmMyNzBhOTMzYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pua5+C+Pcvb9ecOfIDSpsZRDpuW oenueMai/gA5I9wXdUZMt4OpGcX0YZEssNzJtMJQPoub47VfEjgn1wzu34EE+M/s boXeWb1EM1UGPeh4RwVDJ6iu2rlq/73J+dKNDasSGscY7HzxlouwvRZanKXc31nU HaU4W9YvaqytbQKD99fLkq4ejEwyszyIIQG+tzh/897hJVxG/5FsdyhYBp7OdErc KCrwOWryiZOzUVaGZF7FfdjYB6zbzgtNVzGTY+oxiZQV2BQcLU7NYQRntY0yM68n xQn9y+wCtkaobh2z43h5PnmFIILNwRFmFVxUx1xnJiqcTiULazpASmVzkwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMoMLayv36U5l+07CnDfvCcKkzv0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzczMzU5 OC03NGU4LTQ3YWEtOGM4ZS05OWVjODhjNDc3NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvNzMzNTk4 LTc0ZTgtNDdhYS04YzhlLTk5ZWM4OGM0Nzc2MC8xL3lnd3RyS19mcFRtWDdUc0tj Ti04SndxVE9fUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQQEMA0EAgACMAcDBQAqAl5AMA0GCSqGSIb3 DQEBCwUAA4IBAQCMUyuPCXC8j6SxsqtpmyKz1ZKVww+YQXwR/w395gEY7kbF1Oyn DOTObCNLX1H7DoeTOIb16HESZHpKZVpwugD02t1ZOP8+3Rg3rMcXsyLckQekSdns 2OuNO+hOq2paenVqFJIOt7j7xcaqaRj3101TcHv/AKWgyrQ9QMqgupNnenr0QZNp BY0wf684R3yHpUySqGusI10TjtQQ7k03rGtaEGqvr/wfJ9l5xX4nq/+pj//PkbYZ PdfpKwTDL26N995qR+LjPDxomITbzsN3+AwKghV4RRODPzH42W66HAahYSAqD4wg UgF7O84DaorUihhiMNpAFmZ5SC+7Vjj/J0PA -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:10 2026 by rpki-client