This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer File: YCmxoIE54dqWQ90EJPXNZFB-N3E.cer (raw, json) Hash identifier: BIwR3VqVTYUby4wVDNm0oS3vCdVKnvEjTsQ+C33xiUk= Subject key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14F0B9A027ADE8F6B3228630D47122 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204002 IP: 185.43.88.0/22 IP: 194.176.103.0/24 IP: 2a01:6d20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f0:b9:a0:27:ad:e8:f6:b3:22:86:30:d4:71:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6029b1a08139e1da9643dd0424f5cd64507e3771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:b1:06:77:5d:19:e6:ba:59:81:2c:87:ad: 10:0e:f0:37:85:ad:f1:61:e5:b4:72:fd:e7:b7:89: 74:a4:f5:27:24:59:20:fd:27:b2:32:4b:3c:48:96: 40:dc:cb:22:35:d9:ab:6f:4a:10:79:e1:04:d1:7e: af:62:ef:d9:cd:b0:7c:78:d7:df:f6:32:c4:1e:2e: 8f:35:2a:bc:c8:2c:a3:81:2d:f3:71:e2:58:5d:c5: 47:e5:2a:e3:70:4e:ba:e0:03:39:2d:39:19:1e:1a: 19:44:3b:fe:35:13:81:4b:40:36:4d:df:44:ce:91: ff:64:fa:4b:e6:4c:7b:95:fc:d8:df:d9:36:88:b8: 97:c2:5d:86:c0:55:ca:a9:2b:77:a3:b3:e3:0a:dd: 2b:42:dc:31:61:32:30:83:e5:a6:7b:4d:5f:22:d3: 6c:e7:93:3a:a8:9d:e3:8a:81:28:56:0c:bf:50:a1: a1:bb:b6:c5:ad:62:58:06:ad:03:98:ac:e7:f7:db: b6:06:96:8b:b0:05:be:e6:b5:2b:61:77:e2:3f:86: 7c:e3:a8:03:b6:6e:2e:4b:7b:ee:60:bb:d6:d2:30: e6:ed:34:b8:31:67:9d:4c:80:54:bc:d6:ca:23:d2: 7a:82:12:0e:f2:e8:9a:a6:6d:da:82:76:af:30:62: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.88.0/22 194.176.103.0/24 IPv6: 2a01:6d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204002 Signature Algorithm: sha256WithRSAEncryption 07:f7:b4:80:c3:df:b1:bb:c5:8c:cf:55:c4:1f:a5:3f:dd:b9: 14:c8:48:a7:b4:7d:ba:70:11:d2:85:49:2c:bb:da:17:b6:64: 02:93:3c:82:a6:5f:ae:08:ed:8c:30:d8:42:b0:04:9c:ff:f5: 82:13:e2:33:91:a8:45:cd:5f:1e:3e:93:12:62:e3:75:e9:d7: b9:a4:ff:df:08:7d:9f:0d:09:b3:f5:b4:d0:82:3d:02:79:e7: 1a:e9:5c:71:a3:ff:d9:7e:11:b6:75:45:79:57:5e:46:81:70: eb:91:cc:04:e0:3a:ef:c3:3f:b3:67:10:66:0c:ba:17:64:a2: 52:a1:aa:18:90:18:93:7d:ea:68:ad:58:74:ef:54:4f:97:93: a8:82:80:de:eb:65:dd:52:ac:28:ea:92:13:54:18:20:28:01: e1:12:c0:18:c6:48:01:e2:bf:1e:18:3e:f6:11:8a:e0:6e:12: c6:7e:43:dd:85:38:a9:a1:e1:ac:8b:5c:8f:6e:20:2e:eb:14: 8c:66:6f:d1:67:15:41:29:1a:4c:26:a7:45:ae:80:4f:fb:1c: 51:e9:01:82:d2:e7:06:a6:41:db:d1:cc:ab:bc:72:b8:34:c8: df:69:4d:5c:92:e5:8f:da:1d:b3:c5:ca:30:76:34:ff:62:56: 58:6d:bb:e7 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FPC5oCet6PazIoYw1HEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDI5YjFhMDgxMzllMWRhOTY0M2RkMDQyNGY1Y2Q2NDUwN2UzNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKCxBnddGea6WYEsh60QDvA3ha3x YeW0cv3nt4l0pPUnJFkg/SeyMks8SJZA3MsiNdmrb0oQeeEE0X6vYu/ZzbB8eNff 9jLEHi6PNSq8yCyjgS3zceJYXcVH5SrjcE664AM5LTkZHhoZRDv+NROBS0A2Td9E zpH/ZPpL5kx7lfzY39k2iLiXwl2GwFXKqSt3o7PjCt0rQtwxYTIwg+Wme01fItNs 55M6qJ3jioEoVgy/UKGhu7bFrWJYBq0DmKzn99u2BpaLsAW+5rUrYXfiP4Z846gD tm4uS3vuYLvW0jDm7TS4MWedTIBUvNbKI9J6ghIO8uiapm3agnavMGJBYQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGApsaCBOeHalkPdBCT1zWRQfjdxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzNkNTZm Ni05NDEwLTQ4NDQtYTQ3Mi01NjE1NTEzZmRjZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvM2Q1NmY2 LTk0MTAtNDg0NC1hNDcyLTU2MTU1MTNmZGNmNC8xL1lDbXhvSUU1NGRxV1E5MEVK UFhOWkZCLU4zRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuStYAwQAwrBnMA0EAgACMAcDBQAqAW0gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMc4jANBgkqhkiG9w0BAQsFAAOCAQEAB/e0 gMPfsbvFjM9VxB+lP925FMhIp7R9unAR0oVJLLvaF7ZkApM8gqZfrgjtjDDYQrAE nP/1ghPiM5GoRc1fHj6TEmLjdenXuaT/3wh9nw0Js/W00II9AnnnGulccaP/2X4R tnVFeVdeRoFw65HMBOA678M/s2cQZgy6F2SiUqGqGJAYk33qaK1YdO9UT5eTqIKA 3utl3VKsKOqSE1QYICgB4RLAGMZIAeK/Hhg+9hGK4G4Sxn5D3YU4qaHhrItcj24g LusUjGZv0WcVQSkaTCanRa6AT/scUekBgtLnBqZB29HMq7xyuDTI32lNXJLlj9od s8XKMHY0/2JWWG275w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:50 2026 by rpki-client