This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer File: YBgyh-sI7ODGX6SaP0ViHGEt29E.cer (raw, json) Hash identifier: p+0E7QtKPH5E5HvfVF7X/Ekfp1oZAXukEZdn+ZsiXsQ= Subject key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9A8B5F93250AADB074CD37A049E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft caRepository: rsync://rpki.xindi.eu/repo/XINDI/0/ Notify URL: https://rpki.xindi.eu/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39002 AS: 48112 AS: 57984 AS: 206763 IP: 45.89.164.0/22 IP: 91.207.120.0/23 IP: 91.208.179.0/24 IP: 185.173.16.0/22 IP: 2001:678:2ac::/48 IP: 2a0b:2f00::/29 IP: 2a0c:4200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9a:8b:5f:93:25:0a:ad:b0:74:cd:37:a0:49:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:82:1d:6d:75:99:f7:a2:98:4d:51:da:40: 7c:57:e5:78:be:eb:0e:8c:3b:08:73:8c:96:1b:ef: 88:de:55:0f:e0:63:54:11:94:2f:3e:1a:8a:4a:68: 1d:89:e4:84:93:8c:f0:a3:15:6b:8c:ee:fd:e7:35: e6:6b:56:df:53:30:38:4d:cd:e2:89:8b:7e:29:3b: 38:74:2a:d4:52:5e:86:0c:f5:c1:67:b7:22:69:8e: c4:cb:2f:1e:99:69:b2:22:16:2b:d3:f5:17:1d:65: 44:2c:0f:82:af:6b:c7:06:f6:a1:0b:a6:bc:b4:2c: c0:20:fe:d4:5b:fb:72:a3:2c:14:cb:8b:a3:99:fe: a0:86:a2:7b:d7:7a:49:f8:83:02:c2:e9:7f:84:1c: 35:a9:fc:b6:5f:d7:32:27:d0:f2:d2:e4:93:4e:8c: 96:c8:e3:23:45:59:a0:9c:76:e3:71:24:3f:a8:94: bd:b2:54:59:a8:55:3b:38:9e:c2:9e:76:e2:3e:65: e2:77:f4:f7:4d:76:aa:48:cf:6c:6f:e4:dd:f2:1b: be:65:12:79:27:2c:5f:c8:17:e3:82:4c:2d:cd:07: 49:c1:11:7e:fb:70:89:6e:ab:22:c6:ac:ca:2f:57: 87:6e:89:82:84:03:f3:29:bb:fb:80:84:f5:a8:50: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.xindi.eu/repo/XINDI/0/ RPKI Manifest - URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft RPKI Notify - URI:https://rpki.xindi.eu/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.164.0/22 91.207.120.0/23 91.208.179.0/24 185.173.16.0/22 IPv6: 2001:678:2ac::/48 2a0b:2f00::/29 2a0c:4200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39002 48112 57984 206763 Signature Algorithm: sha256WithRSAEncryption 62:25:64:e6:d3:69:f2:fe:a5:0d:ba:1e:9f:6f:1b:67:e4:05: 31:4b:a3:47:fb:91:df:71:73:ad:f1:73:54:94:79:79:c8:7b: 69:bc:c1:d4:9d:f6:74:99:dd:0d:2b:62:e1:5d:6f:90:f8:e3: 15:83:68:af:a9:2f:2e:5e:5e:7f:2d:2f:c5:4b:d3:f2:0b:0f: 0b:81:8d:7d:15:27:16:39:e9:3f:3d:8e:df:44:29:aa:2f:2e: e7:94:82:9b:80:82:5a:de:ba:49:bd:8f:f5:5b:fd:71:38:5f: 3f:5e:b2:29:50:49:66:2d:08:17:3b:9f:e0:51:56:ae:d5:ee: 3e:b7:85:f9:87:e0:50:91:ef:da:33:a7:15:ae:8b:0b:05:09: a1:6f:75:29:9f:c3:05:98:e5:29:e5:63:f4:d7:81:aa:93:44: 90:5b:19:15:ab:3b:fc:41:af:61:40:c6:69:9f:ce:f4:88:2d: 7d:36:b4:fd:64:48:52:67:44:b3:6a:3d:7c:ab:31:c7:08:28: a8:18:fb:6a:63:b9:7c:15:5f:9b:68:33:e8:5a:f9:df:b7:fb: e0:23:22:1b:f3:d4:8e:34:fa:09:76:99:f8:f1:89:41:13:72: ca:00:03:96:44:bb:91:d1:ea:8b:2f:73:db:c5:61:21:61:5e: 97:e0:3a:cc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt265qLX5MlCq2wdM03oEnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDE4MzI4N2ViMDhlY2UwYzY1ZmE0OWEzZjQ1NjIxYzYxMmRkYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vyCHW11mfeimE1R2kB8V+V4vusO jDsIc4yWG++I3lUP4GNUEZQvPhqKSmgdieSEk4zwoxVrjO795zXma1bfUzA4Tc3i iYt+KTs4dCrUUl6GDPXBZ7ciaY7Eyy8emWmyIhYr0/UXHWVELA+Cr2vHBvahC6a8 tCzAIP7UW/tyoywUy4ujmf6ghqJ713pJ+IMCwul/hBw1qfy2X9cyJ9Dy0uSTToyW yOMjRVmgnHbjcSQ/qJS9slRZqFU7OJ7CnnbiPmXid/T3TXaqSM9sb+Td8hu+ZRJ5 JyxfyBfjgkwtzQdJwRF++3CJbqsixqzKL1eHbomChAPzKbv7gIT1qFDUWwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGAYMofrCOzgxl+kmj9FYhxhLdvRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgdcGCCsGAQUFBwELBIHKMIHHMC8GCCsGAQUFBzAFhiNyc3lu YzovL3Jwa2kueGluZGkuZXUvcmVwby9YSU5ESS8wLzBbBggrBgEFBQcwCoZPcnN5 bmM6Ly9ycGtpLnhpbmRpLmV1L3JlcG8vWElOREkvMC82MDE4MzI4N0VCMDhFQ0Uw QzY1RkE0OUEzRjQ1NjIxQzYxMkREQkQxLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6 Ly9ycGtpLnhpbmRpLmV1L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBQBggrBgEFBQcBBwEB/wRBMD8wHgQCAAEwGAMEAi1ZpAMEAVvP eAMEAFvQswMEArmtEDAdBAIAAjAXAwcAIAEGeAKsAwUDKgsvAAMFAyoMQgAwKQYI KwYBBQUHAQgBAf8EGjAYoBYwFAIDAJhaAgMAu/ACAwDigAIDAyerMA0GCSqGSIb3 DQEBCwUAA4IBAQBiJWTm02ny/qUNuh6fbxtn5AUxS6NH+5HfcXOt8XNUlHl5yHtp vMHUnfZ0md0NK2LhXW+Q+OMVg2ivqS8uXl5/LS/FS9PyCw8LgY19FScWOek/PY7f RCmqLy7nlIKbgIJa3rpJvY/1W/1xOF8/XrIpUElmLQgXO5/gUVau1e4+t4X5h+BQ ke/aM6cVrosLBQmhb3Upn8MFmOUp5WP014Gqk0SQWxkVqzv8Qa9hQMZpn870iC19 NrT9ZEhSZ0Szaj18qzHHCCioGPtqY7l8FV+baDPoWvnft/vgIyIb89SONPoJdpn4 8YlBE3LKAAOWRLuR0eqLL3PbxWEhYV6X4DrM -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:13 2026 by rpki-client