This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer File: yohtVYfshfcSQs1XztQJVEUoFo0.cer (raw, json) Hash identifier: IuFMvykq5lwpyjX+fLaubTPHONP51xfY9KLG28IFaso= Subject key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A724A643DF4FA7B1417F9A02AD45F30A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 09:41:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203909 IP: 2001:678:d88::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:4a:64:3d:f4:fa:7b:14:17:f9:a0:2a:d4:5f:30:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 09:41:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca886d5587ec85f71242cd57ced409544528168d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:0d:1b:20:01:7f:fd:12:d1:a3:25:f9:b9: 67:41:d5:3f:61:42:eb:1f:10:95:a7:d7:99:c0:2b: 8c:9b:dc:9f:e3:68:c1:1e:db:d0:52:5c:a1:dc:b3: 47:c8:d3:bd:1d:51:17:91:fa:b0:bd:1c:e4:31:bd: b9:4a:5a:30:11:e5:15:a9:18:fa:d6:7d:f6:1c:1f: 59:38:28:d9:fa:6a:77:7b:40:70:2d:e6:5b:df:b0: 3f:ef:9c:70:98:ff:89:68:9d:25:75:3b:23:8d:8e: 57:17:5e:85:97:3f:f7:80:02:23:52:6d:ff:ce:2a: 18:b5:42:ee:ec:2b:32:46:f3:7b:5a:1a:19:12:3c: cc:fb:6f:8f:a1:e4:78:d6:7b:3e:60:1c:ad:33:2e: 73:b6:95:51:f2:6e:9d:f3:d2:de:10:96:4a:be:21: 44:93:0d:33:66:58:39:0a:ec:c5:5a:8b:bb:53:51: bf:99:60:af:b2:25:ae:bc:c2:47:4f:65:f1:96:a2: f9:45:4d:d7:08:de:b7:96:c0:5b:83:1a:93:e5:5e: a2:b9:e6:00:fd:d2:18:0f:1e:00:eb:5c:26:5b:59: 73:64:60:c9:17:47:e9:74:dc:85:1c:15:e5:9c:71: 79:ca:60:f7:67:35:ff:83:59:05:cc:ac:65:55:bd: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d88::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203909 Signature Algorithm: sha256WithRSAEncryption 69:66:32:cd:c3:62:7a:fb:7e:11:cc:8f:d0:c1:bd:e8:58:b6: 57:0c:a8:3f:6e:be:20:b4:1c:da:ed:7d:01:be:38:ca:6a:2e: 51:8b:81:fc:a2:6b:34:0b:4d:fc:59:30:bd:7a:88:8a:3e:57: 4b:e9:88:8c:bc:2d:76:b5:9b:79:36:aa:65:10:28:22:44:f2: a3:e3:f9:99:41:6e:a9:ce:50:36:8a:85:79:98:9c:b6:c6:f3: 1d:31:ee:08:a8:4c:c1:93:a1:7d:84:6b:64:7d:4b:b3:13:ea: ae:d3:fd:8c:d7:99:9e:e6:2c:f5:c4:64:c0:a7:31:8b:ca:72: 4b:0d:2d:8b:ab:e0:6e:a5:12:9e:cd:6d:d8:49:14:95:8e:b4: b9:0a:4e:55:a8:7b:59:12:6b:cb:f3:86:91:e2:29:5a:03:d0: 2f:4a:a3:e6:2d:4b:2c:e2:33:d4:d2:7e:e3:78:2a:4e:ab:df: 7d:29:c3:2c:6a:f5:5e:66:56:9a:fd:8c:99:42:f2:34:3c:90: fd:85:ad:a7:59:be:ef:6c:27:f3:d8:c9:0e:61:3d:72:24:2d: 32:64:2e:2c:75:ae:cd:58:7a:84:ca:20:ef:5d:b0:9a:6a:87: be:8f:cb:5a:5e:5f:57:f9:86:b4:8b:67:41:32:c8:cf:71:2b: d2:6f:c5:b7 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZpySmQ99Pp7FBf5oCrUXzChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMDk0MTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg4NmQ1NTg3ZWM4NWY3MTI0MmNkNTdjZWQ0MDk1NDQ1MjgxNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaMNGyABf/0S0aMl+blnQdU/YULr HxCVp9eZwCuMm9yf42jBHtvQUlyh3LNHyNO9HVEXkfqwvRzkMb25SlowEeUVqRj6 1n32HB9ZOCjZ+mp3e0BwLeZb37A/75xwmP+JaJ0ldTsjjY5XF16Flz/3gAIjUm3/ zioYtULu7CsyRvN7WhoZEjzM+2+PoeR41ns+YBytMy5ztpVR8m6d89LeEJZKviFE kw0zZlg5CuzFWou7U1G/mWCvsiWuvMJHT2XxlqL5RU3XCN63lsBbgxqT5V6iueYA /dIYDx4A61wmW1lzZGDJF0fpdNyFHBXlnHF5ymD3ZzX/g1kFzKxlVb3ilQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMqIbVWH7IX3EkLNV87UCVRFKBaNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2ZlODJk MS0xNTc1LTQ3YzEtOWYyMi1jN2UyNTIwYzRjZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvZmU4MmQx LTE1NzUtNDdjMS05ZjIyLWM3ZTI1MjBjNGNlYS8xL3lvaHRWWWZzaGZjU1FzMVh6 dFFKVkVVb0ZvMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA2IMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMchTANBgkqhkiG9w0BAQsFAAOCAQEAaWYyzcNievt+EcyP0MG96Fi2Vwyo P26+ILQc2u19Ab44ymouUYuB/KJrNAtN/FkwvXqIij5XS+mIjLwtdrWbeTaqZRAo IkTyo+P5mUFuqc5QNoqFeZictsbzHTHuCKhMwZOhfYRrZH1LsxPqrtP9jNeZnuYs 9cRkwKcxi8pySw0ti6vgbqUSns1t2EkUlY60uQpOVah7WRJry/OGkeIpWgPQL0qj 5i1LLOIz1NJ+43gqTqvffSnDLGr1XmZWmv2MmULyNDyQ/YWtp1m+72wn89jJDmE9 ciQtMmQuLHWuzVh6hMog712wmmqHvo/LWl5fV/mGtItnQTLIz3Er0m/Ftw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:31 2025 by rpki-client