This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer File: YAJlJf1EpPx1siRPgNAiY09fdjU.cer (raw, json) Hash identifier: WhWnbqiqiq2roadBNM9CghxYNOa452TltBY+ieOp4c8= Subject key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F08ED1F2343E7CB9DFC77858CC69D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203787 AS: 216172 IP: 185.30.108.0/22 IP: 2a00:9e60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:08:ed:1f:23:43:e7:cb:9d:fc:77:85:8c:c6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60026525fd44a4fc75b2244f80d022634f5f7635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:a5:37:a4:64:06:e7:b5:76:2c:bd:4e:54: 91:73:45:4f:1e:63:8b:bb:46:13:cb:9c:54:df:f0: 19:d7:b4:55:81:dc:6c:ef:5e:f8:a7:e5:48:e1:bd: bc:35:c3:b7:1a:19:6a:de:7e:1c:8c:24:c9:36:f4: ae:82:79:91:d3:0f:f0:d8:ef:e8:90:ee:e4:46:dd: 44:92:7e:fa:e5:37:3b:cd:01:23:4c:30:19:90:f9: 62:ae:b1:1c:20:23:98:ce:ab:73:e8:e4:18:3b:7b: fa:a6:76:ef:2d:52:92:58:30:d1:dc:a4:ff:1e:1a: 7f:d9:1c:dc:d1:dc:92:bb:72:48:23:42:8f:c1:9d: 8f:68:fe:a1:80:ee:d1:73:6f:f8:20:25:ec:a9:9c: c0:3f:7c:2d:61:66:97:04:a9:f4:a5:9b:67:3d:de: c7:18:fe:21:de:1f:e0:ad:cf:67:f9:24:49:60:30: ae:1f:c0:94:09:1e:17:92:85:f8:41:5b:3a:18:1c: cf:6f:d4:dc:02:47:a6:bd:86:78:d6:72:b6:6d:30: be:28:c4:34:cc:f9:93:89:d5:f5:29:e1:66:fc:27: 98:42:29:8d:33:b4:35:1b:be:77:38:e5:5b:20:c7: 98:50:20:ab:d6:f2:fe:37:b5:46:68:1a:54:28:b0: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.108.0/22 IPv6: 2a00:9e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203787 216172 Signature Algorithm: sha256WithRSAEncryption af:b3:d1:9f:51:ac:f0:d2:25:94:13:6c:d8:0f:b2:0f:3c:29: 6e:3c:38:64:11:a8:67:1d:b2:f4:54:f3:18:87:72:22:cf:70: 9d:6f:13:49:89:b0:d9:cd:ed:be:57:1e:b1:1d:81:6a:63:58: 24:5a:ed:35:4d:9b:23:06:dc:6b:79:10:b7:f7:41:24:4a:60: 47:9a:5b:a4:c0:aa:1c:f9:72:f3:3c:94:3e:c5:3c:83:d7:71: 31:62:80:36:58:1a:35:e8:e1:5b:33:ad:60:b0:73:fd:c7:1c: 97:a6:6d:35:5f:44:2c:95:a8:a9:56:0a:54:bf:6f:4e:d3:2f: da:f4:2b:a6:7d:e1:24:f4:bc:e5:47:a6:a4:3f:37:f2:3a:d0: 41:2e:fc:cc:f0:78:91:8a:70:6f:1d:f2:73:c9:0b:73:ff:73: 50:0a:d2:a7:2e:14:b4:2c:d7:4a:d9:0c:07:d1:e0:e9:79:4a: cd:c0:34:3a:a8:8d:f6:a4:a7:d4:d8:64:7b:f0:eb:b2:be:2e: fb:b5:cf:77:a4:59:35:04:05:ea:37:98:c0:ee:e8:6b:6c:c1: 09:2c:96:cb:57:e2:3f:b2:42:fa:ee:c3:a2:bc:fa:5f:2a:49: 2c:f9:cb:1a:56:1e:79:a1:c9:fa:40:81:49:da:85:71:2d:13: 4c:33:b3:bf -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5fwjtHyND58ud/HeFjMadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDAyNjUyNWZkNDRhNGZjNzViMjI0NGY4MGQwMjI2MzRmNWY3NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RmlN6RkBue1diy9TlSRc0VPHmOL u0YTy5xU3/AZ17RVgdxs7174p+VI4b28NcO3Ghlq3n4cjCTJNvSugnmR0w/w2O/o kO7kRt1Ekn765Tc7zQEjTDAZkPlirrEcICOYzqtz6OQYO3v6pnbvLVKSWDDR3KT/ Hhp/2Rzc0dySu3JII0KPwZ2PaP6hgO7Rc2/4ICXsqZzAP3wtYWaXBKn0pZtnPd7H GP4h3h/grc9n+SRJYDCuH8CUCR4XkoX4QVs6GBzPb9TcAkemvYZ41nK2bTC+KMQ0 zPmTidX1KeFm/CeYQimNM7Q1G753OOVbIMeYUCCr1vL+N7VGaBpUKLD11QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFGACZSX9RKT8dbIkT4DQImNPX3Y1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzdhZmI2 ZC1hODk5LTRiZDMtOGUyYy1mYTkyMzM1MzVmZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvN2FmYjZk LWE4OTktNGJkMy04ZTJjLWZhOTIzMzUzNWZmMS8xL1lBSmxKZjFFcFB4MXNpUlBn TkFpWTA5ZmRqVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR5sMA0EAgACMAcDBQAqAJ5gMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMcCwIDA0xsMA0GCSqGSIb3DQEBCwUAA4IBAQCvs9Gf Uazw0iWUE2zYD7IPPCluPDhkEahnHbL0VPMYh3Iiz3CdbxNJibDZze2+Vx6xHYFq Y1gkWu01TZsjBtxreRC390EkSmBHmlukwKoc+XLzPJQ+xTyD13ExYoA2WBo16OFb M61gsHP9xxyXpm01X0QslaipVgpUv29O0y/a9CumfeEk9LzlR6akPzfyOtBBLvzM 8HiRinBvHfJzyQtz/3NQCtKnLhS0LNdK2QwH0eDpeUrNwDQ6qI32pKfU2GR78Ouy vi77tc93pFk1BAXqN5jA7uhrbMEJLJbLV+I/skL67sOivPpfKkks+csaVh55ocn6 QIFJ2oVxLRNMM7O/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:00 2026 by rpki-client