This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer File: YCGk2qfc9KTLCKxHRzdfaYquhkM.cer (raw, json) Hash identifier: F8LFJLFesAUD9gax2cwIxAOqzSACyZNCJUBoX2oZcoc= Subject key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E380E68E6634126D4CC159277C57938 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208447 IP: 2001:678:9e8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0e:68:e6:63:41:26:d4:cc:15:92:77:c5:79:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:ee:df:8c:2e:54:4d:50:3e:41:dc:db:54: 88:a1:2a:95:3f:4b:d1:57:78:61:82:4b:42:75:b0: c3:5b:97:ca:fd:25:50:5c:a5:f8:28:20:e3:86:f1: 7e:63:eb:e7:34:60:15:e3:7a:91:cd:8c:e1:bc:f0: ee:8a:85:ac:f5:2d:ae:ea:c9:c3:56:ba:63:3a:9f: 37:b1:b2:67:de:bb:40:91:b7:23:a5:65:09:2a:4a: d0:e8:4c:e6:c1:4e:a5:21:2c:d1:e6:bd:a2:67:d0: 11:a9:63:92:9d:88:bb:8a:61:ba:fd:04:0f:c4:61: ad:91:2c:a4:cf:84:81:f0:b1:68:b7:13:5f:24:7e: a3:28:e3:3e:56:e2:47:0f:5f:e2:c0:0a:fa:11:00: ac:a1:f5:f0:78:72:16:42:dc:4d:80:ca:4d:92:a0: 62:1b:92:be:cc:b9:0f:c8:77:af:19:82:17:c2:b8: 95:07:28:0a:83:0f:35:f4:24:8f:e9:03:2a:24:00: 9d:67:74:79:0a:24:05:86:cc:ae:a0:d0:fb:82:29: a6:8f:29:d8:0b:6f:98:99:0f:bc:bf:90:e7:59:72: 63:5e:48:43:4a:c8:f1:43:24:98:3a:88:9c:63:9c: d1:f3:f0:67:39:60:53:67:9a:c5:1a:71:c0:6b:17: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:9e8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208447 Signature Algorithm: sha256WithRSAEncryption 3a:f3:51:92:72:62:40:79:ef:72:da:20:5f:62:2c:18:c9:ff: 7c:a7:52:23:26:cf:8a:87:92:23:d7:eb:9a:94:75:a0:a6:42: 9b:0a:7b:5d:e2:f3:79:0e:08:95:02:18:03:87:73:c8:33:d6: b6:12:4a:95:33:76:21:5b:ed:60:b7:24:4b:8b:5e:3c:63:85: 82:a7:e6:fe:bf:2b:57:95:f8:1e:a6:c6:e6:fb:59:5b:5a:7d: 0f:bd:76:1f:0f:df:d7:dc:a1:b9:82:96:36:7e:40:03:3e:56: 2c:73:a2:85:7d:5c:d2:cf:d1:15:ba:4e:d4:c8:7f:8d:74:00: e5:6d:17:9f:97:4f:b4:2e:8e:3c:f1:44:1d:5e:42:7c:36:74: 85:d5:d2:c1:e9:79:6e:15:24:d7:cc:40:8d:e8:63:8b:a3:e2: 26:bd:6e:a4:0a:3c:f5:72:bf:21:60:d9:45:ba:a2:dc:a8:d5: 6d:73:d7:2a:11:27:77:96:73:b2:63:e1:92:b8:1c:98:09:04: c1:ab:d6:ca:01:7c:05:a0:1a:e0:ad:d7:5a:44:65:11:86:d6: 5d:74:5c:1a:66:e0:34:ad:25:16:91:f0:4e:e1:2e:67:4b:e5: d8:75:63:cc:18:0b:ed:97:2a:a9:7a:c8:fd:d8:df:2e:81:1c: 5c:53:65:cd -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt+OA5o5mNBJtTMFZJ3xXk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDIxYTRkYWE3ZGNmNGE0Y2IwOGFjNDc0NzM3NWY2OThhYWU4NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Hu34wuVE1QPkHc21SIoSqVP0vR V3hhgktCdbDDW5fK/SVQXKX4KCDjhvF+Y+vnNGAV43qRzYzhvPDuioWs9S2u6snD VrpjOp83sbJn3rtAkbcjpWUJKkrQ6EzmwU6lISzR5r2iZ9ARqWOSnYi7imG6/QQP xGGtkSykz4SB8LFotxNfJH6jKOM+VuJHD1/iwAr6EQCsofXweHIWQtxNgMpNkqBi G5K+zLkPyHevGYIXwriVBygKgw819CSP6QMqJACdZ3R5CiQFhsyuoND7gimmjynY C2+YmQ+8v5DnWXJjXkhDSsjxQySYOoicY5zR8/BnOWBTZ5rFGnHAaxcncQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFGAhpNqn3PSkywisR0c3X2mKroZDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzgwZjQy Yy1kMjQ5LTQ0NjEtOWZkNy00ZDJhNjMzNGRlNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvODBmNDJj LWQyNDktNDQ2MS05ZmQ3LTRkMmE2MzM0ZGU3Ny8xL1lDR2sycWZjOUtUTENLeEhS emRmYVlxdWhrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAnoMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMuPzANBgkqhkiG9w0BAQsFAAOCAQEAOvNRknJiQHnvctogX2IsGMn/fKdS IybPioeSI9frmpR1oKZCmwp7XeLzeQ4IlQIYA4dzyDPWthJKlTN2IVvtYLckS4te PGOFgqfm/r8rV5X4HqbG5vtZW1p9D712Hw/f19yhuYKWNn5AAz5WLHOihX1c0s/R FbpO1Mh/jXQA5W0Xn5dPtC6OPPFEHV5CfDZ0hdXSwel5bhUk18xAjehji6PiJr1u pAo89XK/IWDZRbqi3KjVbXPXKhEnd5ZzsmPhkrgcmAkEwavWygF8BaAa4K3XWkRl EYbWXXRcGmbgNK0lFpHwTuEuZ0vl2HVjzBgL7ZcqqXrI/djfLoEcXFNlzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:38 2026 by rpki-client