This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer File: yjNIUNrzcSIFIBmSKevekO8osBg.cer (raw, json) Hash identifier: ikcb78kiGuj6qtsO9ZBZcnxTrvjll6KQFH6liSh20TY= Subject key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F856B88C2C46FA28EA34921D7C40EE8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.160.162.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6b:88:c2:c4:6f:a2:8e:a3:49:21:d7:c4:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca334850daf371220520199229ebde90ef28b018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:20:34:58:ce:2d:cc:43:ba:68:62:cc:ad: 54:54:65:b4:4c:09:fe:c6:56:4f:a9:05:45:2b:af: 5d:60:7b:15:79:e5:23:bc:96:ae:9e:4a:ec:78:f5: 25:55:c4:f8:7e:93:33:e7:62:1d:d4:2f:56:0d:73: 0b:68:e6:2b:2d:83:82:9b:be:2f:33:72:47:66:ec: ab:c4:25:1c:c4:48:be:ce:03:59:59:4c:32:61:ba: b9:5c:cb:3d:c9:9f:6b:72:76:3c:d7:61:c7:54:47: 2f:39:f9:10:7d:4d:aa:27:77:84:da:59:fe:1e:50: 2b:73:fc:1f:65:f6:ed:5b:74:ab:23:12:e2:c3:b9: 26:43:ac:1c:a0:90:b4:14:ff:90:ba:ef:92:c1:40: 5a:b7:ad:15:2b:56:5a:3d:5d:98:1a:9b:0a:86:23: 6f:b2:46:dc:21:05:1c:38:5e:66:59:17:13:ad:2a: 20:28:0c:f8:11:3a:0e:9f:bf:3c:3a:82:0e:e9:67: 79:b6:18:40:06:95:39:be:59:19:42:65:90:44:f2: dd:6e:5f:8c:7f:1f:42:63:8c:ee:c1:02:cd:a5:40: ae:f5:fc:01:3a:4a:7c:f2:7d:0c:ed:22:50:fb:ce: ee:b0:a8:37:d5:f4:ae:c7:e7:5c:79:76:da:36:4e: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.162.0/23 Signature Algorithm: sha256WithRSAEncryption 71:8d:84:c5:0b:05:eb:13:7b:4f:56:84:e8:eb:8d:5d:c9:f1: 2d:c8:53:d5:c5:48:a1:ff:1c:5a:38:1e:17:86:d4:2b:b0:b5: 18:ca:dc:f0:5a:b7:79:b2:6a:4c:0e:fe:a2:a0:bf:73:06:50: 1d:64:dd:46:ba:b4:9d:59:23:28:ed:5d:d6:da:29:30:e5:64: c9:c2:05:f6:79:fd:ea:7c:e8:bf:2e:0b:d2:5e:45:b2:7a:4b: 72:aa:40:6e:d1:e3:a3:53:54:7a:ea:62:92:5a:00:d4:cd:a0: 6d:dc:9e:38:5c:4a:95:90:08:d7:9f:0a:2b:1a:e7:7f:b1:01: 11:05:a1:4c:38:7c:f0:c6:41:70:a0:39:9a:74:57:e9:69:ca: cb:e0:e2:df:06:ec:bd:5e:25:d0:36:da:76:a3:ba:30:ec:ae: dd:ba:a1:20:f1:b5:e6:2b:a5:82:2b:4f:e1:c4:f4:84:1e:67: 69:7a:39:87:be:71:8c:74:20:ff:82:10:ac:c9:12:b1:30:7a: 39:3d:d2:13:2b:53:e6:d0:0f:dd:2e:da:4e:1f:d1:a6:aa:8d: c9:15:5c:5f:33:33:73:8b:a6:ad:54:a8:56:28:af:f2:6b:d6: 5f:e1:d0:df:4b:0f:ed:20:41:6e:ab:d9:8b:6d:b3:9d:5f:f6: ea:21:fc:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hWuIwsRvoo6jSSHXxA7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTMzNDg1MGRhZjM3MTIyMDUyMDE5OTIyOWViZGU5MGVmMjhiMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XMgNFjOLcxDumhizK1UVGW0TAn+ xlZPqQVFK69dYHsVeeUjvJaunkrsePUlVcT4fpMz52Id1C9WDXMLaOYrLYOCm74v M3JHZuyrxCUcxEi+zgNZWUwyYbq5XMs9yZ9rcnY812HHVEcvOfkQfU2qJ3eE2ln+ HlArc/wfZfbtW3SrIxLiw7kmQ6wcoJC0FP+Quu+SwUBat60VK1ZaPV2YGpsKhiNv skbcIQUcOF5mWRcTrSogKAz4EToOn788OoIO6Wd5thhABpU5vlkZQmWQRPLdbl+M fx9CY4zuwQLNpUCu9fwBOkp88n0M7SJQ+87usKg31fSux+dceXbaNk4UbQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMozSFDa83EiBSAZkinr3pDvKLAYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2VlNWU0 Ny00ZTI5LTQ2MDMtYjk2Mi0wZTAwNDZjOGE4N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZWU1ZTQ3 LTRlMjktNDYwMy1iOTYyLTBlMDA0NmM4YTg3Yi8xL3lqTklVTnJ6Y1NJRklCbVNL ZXZla084b3NCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw6CiMA0GCSqGSIb3DQEBCwUAA4IBAQBxjYTF CwXrE3tPVoTo641dyfEtyFPVxUih/xxaOB4XhtQrsLUYytzwWrd5smpMDv6ioL9z BlAdZN1GurSdWSMo7V3W2ikw5WTJwgX2ef3qfOi/LgvSXkWyektyqkBu0eOjU1R6 6mKSWgDUzaBt3J44XEqVkAjXnworGud/sQERBaFMOHzwxkFwoDmadFfpacrL4OLf Buy9XiXQNtp2o7ow7K7duqEg8bXmK6WCK0/hxPSEHmdpejmHvnGMdCD/ghCsyRKx MHo5PdITK1Pm0A/dLtpOH9Gmqo3JFVxfMzNzi6atVKhWKK/ya9Zf4dDfSw/tIEFu q9mLbbOdX/bqIfxN -----END CERTIFICATE-----Generated at Sun Jan 25 22:33:52 2026 by rpki-client