This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer File: ylIg5T5PgcoljM_qGHKAKA9fYho.cer (raw, json) Hash identifier: Nn0XjipUreNGel89cKNdLvo8z6oGOkjCG7pYDQk3hes= Subject key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C808CAAC9BB9DE0D6A01E8E5AED9B25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.5.24.0/22 IP: 2a02:78c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8c:aa:c9:bb:9d:e0:d6:a0:1e:8e:5a:ed:9b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca5220e53e4f81ca258ccfea187280280f5f621a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:61:5b:3a:ec:28:8a:e3:42:a8:a8:87:85: 8d:fe:27:3a:c3:af:68:43:84:13:51:e5:91:a9:80: 62:24:f7:ca:51:ca:d2:fa:cd:b3:5f:ef:55:68:67: 4a:2d:5a:4a:5f:9c:9c:22:d7:4f:21:ba:ea:d7:4e: f8:66:3c:2c:7e:4f:de:26:74:54:ca:35:4b:05:89: d7:1b:91:58:cc:ea:62:76:35:79:fc:d3:5d:3e:45: 3f:e1:e5:ca:1a:2b:2f:62:98:5b:86:60:be:63:b7: d2:d1:1d:a3:f8:9a:97:02:4d:db:49:69:b4:2f:39: d2:b1:06:76:6c:f2:e0:d0:39:8d:8c:d0:57:db:4d: 51:05:33:c9:84:a6:09:15:63:c6:70:66:69:3d:5b: 23:a4:ae:fe:d3:af:eb:79:d4:7e:71:85:83:a0:30: ee:f3:b5:e4:ff:86:c7:54:93:d9:fc:5f:f5:63:af: e1:ff:34:37:24:81:b2:6a:85:b9:6d:e2:61:bf:4c: 6f:42:e9:42:ad:b4:02:5b:c5:fb:bb:1a:0c:f9:4d: 16:85:82:68:b2:4a:79:76:f0:60:63:fb:2a:95:eb: 14:08:69:b9:76:5f:b0:38:fe:1d:39:7a:4f:40:f5: 90:58:6f:86:e7:c3:a3:18:67:c9:f5:bc:8d:98:a1: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.24.0/22 IPv6: 2a02:78c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:53:3c:95:4d:e4:1c:6e:5e:d1:ce:a1:8c:93:4c:39:01:a9: 28:b5:b3:80:d6:e4:1c:72:d3:24:80:a5:47:09:d4:0e:10:5f: 45:d4:c1:3a:95:ca:26:23:61:82:0f:e7:e6:24:22:45:0d:1c: 3d:6e:5e:18:e7:1f:3e:b4:29:78:fd:a0:67:4d:b0:9e:74:c9: 73:21:29:25:f2:45:46:07:c5:ab:08:a2:7d:04:d4:3f:4d:49: 87:f2:cc:db:d4:96:5b:d2:48:05:57:17:c0:63:0c:0f:30:5e: c5:20:b5:a8:08:c4:6d:6e:53:27:7f:f3:8f:f8:a0:ae:c6:a6: 0b:78:c6:20:3d:c9:9a:93:35:d0:6d:9a:63:d6:dc:2b:d3:90: 56:c0:5c:b0:af:9e:46:59:19:b9:1a:46:b6:98:c3:38:a8:d2: e6:07:12:46:f8:ca:6b:a3:7a:91:a0:0b:b1:27:44:d5:7a:c8: 5f:f3:85:c4:15:06:68:10:6b:8b:8e:6c:7e:74:fc:61:87:03: 2a:17:35:9c:fc:1e:ac:ac:1e:1b:0d:e3:90:de:d1:2a:42:6b: aa:bc:fd:82:30:c0:48:b2:b3:71:e2:21:61:97:3b:30:83:fb: 6a:71:d7:91:04:8c:c7:4b:19:cb:c6:40:e9:34:cd:57:fd:43: 9e:a8:e4:07 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8gIyqybud4NagHo5a7ZslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTUyMjBlNTNlNGY4MWNhMjU4Y2NmZWExODcyODAyODBmNWY2MjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1BhWzrsKIrjQqioh4WN/ic6w69o Q4QTUeWRqYBiJPfKUcrS+s2zX+9VaGdKLVpKX5ycItdPIbrq1074Zjwsfk/eJnRU yjVLBYnXG5FYzOpidjV5/NNdPkU/4eXKGisvYphbhmC+Y7fS0R2j+JqXAk3bSWm0 LznSsQZ2bPLg0DmNjNBX201RBTPJhKYJFWPGcGZpPVsjpK7+06/redR+cYWDoDDu 87Xk/4bHVJPZ/F/1Y6/h/zQ3JIGyaoW5beJhv0xvQulCrbQCW8X7uxoM+U0WhYJo skp5dvBgY/sqlesUCGm5dl+wOP4dOXpPQPWQWG+G58OjGGfJ9byNmKG+LQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMpSIOU+T4HKJYzP6hhygCgPX2IaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzQyNDk0 Ny0xYzZhLTQ4ZTktYjI4OS1mMjNjNWE1MzE4MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNDI0OTQ3 LTFjNmEtNDhlOS1iMjg5LWYyM2M1YTUzMTgyMy8xL3lsSWc1VDVQZ2NvbGpNX3FH SEtBS0E5Zlloby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQUYMA0EAgACMAcDBQAqAnjAMA0GCSqGSIb3 DQEBCwUAA4IBAQBYUzyVTeQcbl7RzqGMk0w5AakotbOA1uQcctMkgKVHCdQOEF9F 1ME6lcomI2GCD+fmJCJFDRw9bl4Y5x8+tCl4/aBnTbCedMlzISkl8kVGB8WrCKJ9 BNQ/TUmH8szb1JZb0kgFVxfAYwwPMF7FILWoCMRtblMnf/OP+KCuxqYLeMYgPcma kzXQbZpj1twr05BWwFywr55GWRm5Gka2mMM4qNLmBxJG+Mpro3qRoAuxJ0TVeshf 84XEFQZoEGuLjmx+dPxhhwMqFzWc/B6srB4bDeOQ3tEqQmuqvP2CMMBIsrNx4iFh lzswg/tqcdeRBIzHSxnLxkDpNM1X/UOeqOQH -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:48 2026 by rpki-client