This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer File: YBnBFsiuMYr9S4Iun07uoMNLqso.cer (raw, json) Hash identifier: zP0GbKkgCN4fHb3bmJev22X3WksXYlzdp7nZpXsD57k= Subject key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59EE11C7B6659FF3C335FE32D34C3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48700 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:ee:11:c7:b6:65:9f:f3:c3:35:fe:32:d3:4c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:d2:b5:e1:f0:a6:5a:73:df:45:21:82:db: 80:ed:50:45:64:b0:72:f5:5e:41:8f:5d:8a:6f:64: 37:af:30:65:98:88:5d:e6:2b:dc:c9:b9:5a:89:3a: ad:1b:e8:60:a7:9e:87:41:ca:fc:13:0e:ad:a1:a0: b8:84:5f:06:7e:f7:a6:85:f3:ba:a3:8a:43:15:18: e8:74:7d:31:03:bc:65:6d:6d:89:a0:a4:9e:d3:d5: f8:9d:46:07:45:0c:08:27:09:8c:ce:a2:87:b8:3c: 35:21:55:1f:ad:ff:cf:24:3b:79:59:95:d7:8a:cc: b3:9d:eb:67:2d:c9:45:bf:ac:f3:f1:e7:f6:29:97: 56:b8:19:14:7f:0a:51:54:21:5b:ca:b3:69:69:cf: 49:88:d6:f8:ae:47:f3:7e:55:9b:cb:bb:d3:03:69: 33:87:56:d7:6e:fc:4b:21:a6:af:7f:41:ee:3d:6a: 52:3a:b1:40:0c:5a:90:f8:5e:43:05:eb:47:98:1f: 09:43:9e:89:32:bc:56:f4:7e:a4:f2:14:58:de:be: be:cb:16:42:28:56:6e:29:7d:2c:7a:ee:a3:88:b3: 02:38:9c:64:98:f6:48:1a:43:08:19:fc:c3:24:99: 36:13:80:96:9b:19:63:93:1c:ce:ef:94:b3:1a:b6: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48700 Signature Algorithm: sha256WithRSAEncryption 32:7f:85:1b:1f:89:d5:3d:4f:65:0f:54:dd:03:52:82:03:be: aa:a1:fb:0f:1f:de:b0:04:9a:3e:5d:4c:60:3f:97:78:b9:5a: 35:ea:b4:b3:1f:f5:ea:86:b5:91:1c:9c:71:2a:84:87:62:49: 1e:94:c3:2b:e3:f1:d7:76:88:81:7c:54:1e:85:47:af:74:23: 4a:a4:90:64:19:38:4c:1d:0a:a1:fc:37:f7:3a:18:1a:39:10: 38:74:fa:cd:88:ae:42:02:25:e0:f6:d9:62:6c:e6:2b:24:0d: ef:a4:7b:fa:b9:a5:57:12:4b:f4:e2:c9:60:50:10:b2:00:68: dc:bb:cf:10:c0:43:94:ab:cb:3e:03:50:81:d4:fc:b5:bb:1f: 1a:53:99:bc:d8:7c:2b:2e:71:3c:f9:d4:a3:24:bf:2e:8f:20: b6:83:f6:f5:3c:75:5d:e7:a1:c0:a2:7a:81:97:07:77:18:2c: 89:3c:32:e3:15:65:6d:e2:7a:63:f9:fa:2d:46:21:dc:00:d3: fe:be:7c:89:8f:fa:d1:3f:45:2d:df:fe:81:b2:3f:5d:20:dc: e5:ee:aa:cc:82:1d:42:b9:e2:d2:8b:3f:27:60:26:ae:07:1a: c2:73:d6:87:ef:55:ad:e9:f3:cb:8f:87:c8:b5:aa:77:79:05: c8:36:20:cb -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt6We4Rx7Zln/PDNf4y00w6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDE5YzExNmM4YWUzMThhZmQ0YjgyMmU5ZjRlZWVhMGMzNGJhYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PnSteHwplpz30UhgtuA7VBFZLBy 9V5Bj12Kb2Q3rzBlmIhd5ivcyblaiTqtG+hgp56HQcr8Ew6toaC4hF8GfvemhfO6 o4pDFRjodH0xA7xlbW2JoKSe09X4nUYHRQwIJwmMzqKHuDw1IVUfrf/PJDt5WZXX isyznetnLclFv6zz8ef2KZdWuBkUfwpRVCFbyrNpac9JiNb4rkfzflWby7vTA2kz h1bXbvxLIaavf0HuPWpSOrFADFqQ+F5DBetHmB8JQ56JMrxW9H6k8hRY3r6+yxZC KFZuKX0seu6jiLMCOJxkmPZIGkMIGfzDJJk2E4CWmxljkxzO75SzGrYREQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFGAZwRbIrjGK/UuCLp9O7qDDS6rKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJhZjcz YTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8zLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFm NzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzMvNjAxOUMxMTZDOEFF MzE4QUZENEI4MjJFOUY0RUVFQTBDMzRCQUFDQS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAvjww DQYJKoZIhvcNAQELBQADggEBADJ/hRsfidU9T2UPVN0DUoIDvqqh+w8f3rAEmj5d TGA/l3i5WjXqtLMf9eqGtZEcnHEqhIdiSR6Uwyvj8dd2iIF8VB6FR690I0qkkGQZ OEwdCqH8N/c6GBo5EDh0+s2IrkICJeD22WJs5iskDe+ke/q5pVcSS/TiyWBQELIA aNy7zxDAQ5Sryz4DUIHU/LW7HxpTmbzYfCsucTz51KMkvy6PILaD9vU8dV3nocCi eoGXB3cYLIk8MuMVZW3iemP5+i1GIdwA0/6+fImP+tE/RS3f/oGyP10g3OXuqsyC HUK54tKLPydgJq4HGsJz1ofvVa3p88uPh8i1qnd5Bcg2IMs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:34 2026 by rpki-client