This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer File: yu5BB041mQr-T1CoTkLrCVhKLxk.cer (raw, json) Hash identifier: bQTP9El/PDhTv6AC5rRpHXHr7GOzCO3vBvjE53MIdbQ= Subject key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B0D737D615B1A49EE0FC2570CEF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.250.44.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b0:d7:37:d6:15:b1:a4:9e:e0:fc:25:70:ce:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caee41074e35990afe4f50a84e42eb09584a2f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:c5:b7:34:0f:65:87:76:95:6e:c0:ae:b9: 42:c4:ff:de:49:c5:40:3d:6f:78:3f:41:43:4d:5e: 7a:c0:39:62:b2:5f:cc:25:ac:6c:8f:e5:a8:ea:4d: 41:e8:2a:b0:37:63:6c:28:6f:a0:40:4f:05:62:30: c8:69:9c:d5:6d:14:3f:b6:72:a2:f1:47:d4:91:9a: b9:1d:80:1f:e3:c3:a1:da:5f:fe:2e:cd:c7:bd:44: 21:7a:fd:cb:46:b7:a6:a4:75:a5:56:28:ad:4b:0c: 79:d4:2e:5c:b4:c1:b5:b0:67:5a:1e:fc:24:f4:85: 27:82:5c:34:40:0e:dd:76:96:4c:ca:8f:1b:9a:18: 18:4a:e6:dd:71:0c:15:37:33:db:5b:f6:05:b8:72: a1:fa:6f:69:da:e3:d3:7b:1a:fa:c0:06:9b:e6:35: 4c:c8:ec:4e:98:f7:94:57:34:17:a5:4a:79:7b:6a: ab:00:0f:0b:49:b1:3b:d7:af:eb:df:87:cd:dc:26: 66:9d:5e:07:0b:96:dd:d2:7a:c5:2b:7b:a9:34:36: 5d:62:21:d0:84:2a:df:81:9b:10:95:16:77:91:f5: e3:39:f3:0e:bb:6e:16:e0:b2:a6:78:8f:4c:04:b2: 08:3c:ec:1a:e4:24:13:0b:a2:b9:20:19:10:aa:93: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.250.44.0/24 Signature Algorithm: sha256WithRSAEncryption 41:93:fd:42:df:a8:83:45:27:e4:00:99:19:ca:db:cf:21:c3: 0a:f8:3b:a5:32:8e:c3:a3:b0:8a:71:91:fa:cc:59:6d:00:f4: b6:ae:04:2c:eb:b5:74:fe:7b:de:68:80:73:5e:c0:ed:00:30: 6e:de:c1:e7:32:7f:50:6f:e7:2f:e4:26:ae:60:66:d4:07:36: 4a:3d:09:9a:c7:27:13:b9:b7:35:6a:1a:1a:51:e1:2b:34:e4: 46:a9:3a:17:a6:8d:2e:8d:37:8b:06:25:c0:28:4d:71:e9:da: 66:db:bd:f4:ba:1a:35:f0:37:98:27:07:cb:fc:1a:1a:e9:bf: d7:ad:3c:57:6e:d0:fd:ec:36:4c:56:03:8b:c0:b9:1b:52:34: 47:eb:17:c3:f0:dc:5f:65:e8:58:7a:da:35:94:0c:b6:fc:b7: d5:9c:ac:cc:7d:df:06:9b:1b:3d:5e:9a:cd:a4:af:15:35:25: 17:06:d7:3c:52:22:c9:1c:fe:e1:d2:5b:f7:46:ff:02:c4:b4: b6:ae:be:47:41:eb:e2:2e:b8:6a:5a:63:19:7a:a3:b2:86:3e: f4:94:8a:04:6a:a9:a4:d4:d6:b1:11:33:8e:1a:e6:b5:d1:e1: ed:0c:b3:5f:f2:b1:83:4e:8a:69:50:b4:a8:5b:71:eb:aa:26: c6:be:bc:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xrDXN9YVsaSe4PwlcM70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWVlNDEwNzRlMzU5OTBhZmU0ZjUwYTg0ZTQyZWIwOTU4NGEyZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcHFtzQPZYd2lW7ArrlCxP/eScVA PW94P0FDTV56wDlisl/MJaxsj+Wo6k1B6CqwN2NsKG+gQE8FYjDIaZzVbRQ/tnKi 8UfUkZq5HYAf48Oh2l/+Ls3HvUQhev3LRrempHWlViitSwx51C5ctMG1sGdaHvwk 9IUnglw0QA7ddpZMyo8bmhgYSubdcQwVNzPbW/YFuHKh+m9p2uPTexr6wAab5jVM yOxOmPeUVzQXpUp5e2qrAA8LSbE716/r34fN3CZmnV4HC5bd0nrFK3upNDZdYiHQ hCrfgZsQlRZ3kfXjOfMOu24W4LKmeI9MBLIIPOwa5CQTC6K5IBkQqpNOrwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMruQQdONZkK/k9QqE5C6wlYSi8ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzVkODBi MC1mYzRhLTRjZGUtOWM1My1iODUxODkwOTgyMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNWQ4MGIw LWZjNGEtNGNkZS05YzUzLWI4NTE4OTA5ODIwZi8xL3l1NUJCMDQxbVFyLVQxQ29U a0xyQ1ZoS0x4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw/osMA0GCSqGSIb3DQEBCwUAA4IBAQBBk/1C 36iDRSfkAJkZytvPIcMK+DulMo7Do7CKcZH6zFltAPS2rgQs67V0/nveaIBzXsDt ADBu3sHnMn9Qb+cv5CauYGbUBzZKPQmaxycTubc1ahoaUeErNORGqToXpo0ujTeL BiXAKE1x6dpm2730uho18DeYJwfL/Boa6b/XrTxXbtD97DZMVgOLwLkbUjRH6xfD 8NxfZehYeto1lAy2/LfVnKzMfd8Gmxs9XprNpK8VNSUXBtc8UiLJHP7h0lv3Rv8C xLS2rr5HQeviLrhqWmMZeqOyhj70lIoEaqmk1NaxETOOGua10eHtDLNf8rGDTopp ULSoW3HrqibGvrzY -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:34 2026 by rpki-client