This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer File: YDgxphvIqPTLhYhwIvtvhjlzRdw.cer (raw, json) Hash identifier: Af5ijEsasQMmTTmBySTISewGtDBwGTlxnu7/9SfFFds= Subject key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C131A267BC85950675DC769C7598607 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60173 IP: 185.34.224.0/22 IP: 2a00:dd20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1a:26:7b:c8:59:50:67:5d:c7:69:c7:59:86:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=603831a61bc8a8f4cb85887022fb6f86397345dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:c5:d6:9b:e0:87:5a:25:ac:d0:eb:ea:2e: 60:dc:62:a0:60:37:8b:ce:87:89:da:3d:fc:92:a6: d8:67:9c:88:75:09:2b:3a:3b:c6:8a:72:03:7a:05: 2f:22:a0:85:ca:d7:63:9a:c0:cc:00:8c:ae:34:76: c3:a4:1b:33:7d:bf:2a:de:1a:26:4c:a0:f8:36:df: 2d:c4:2f:3b:f9:8a:92:58:25:71:d3:4c:e6:8e:02: d4:09:80:07:27:9d:7a:62:31:e8:c9:48:86:47:09: 2f:dc:57:a1:0a:04:24:24:8b:1f:89:b8:6c:ff:55: cb:6a:b7:a4:a9:70:77:44:ad:63:3c:ef:c1:1d:0d: 56:fe:b8:d3:c2:7d:79:29:da:15:14:26:ec:e4:86: 9c:c2:59:61:26:ac:c5:ea:32:a8:42:0c:df:61:74: 2b:50:0c:43:b3:ba:68:91:a4:83:97:65:b1:e3:b7: 6a:f8:92:5b:54:e6:01:4b:b1:72:e8:70:39:65:aa: 87:92:7c:1e:55:9a:73:69:c4:92:be:da:73:c6:a9: f0:d1:af:1b:26:b4:67:12:be:98:b4:12:a2:a0:2d: 68:78:6c:d6:d0:74:0d:ca:4a:34:db:55:a4:ef:4f: 0c:a0:8c:98:f4:a3:6e:e5:45:02:6d:2e:a1:8f:8e: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.224.0/22 IPv6: 2a00:dd20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60173 Signature Algorithm: sha256WithRSAEncryption 56:d0:1e:80:0b:40:35:22:99:e2:0c:e3:d3:e1:2d:46:1e:2f: f2:e8:08:b4:39:e9:46:c2:e5:99:3f:d9:b9:6d:cd:f2:20:c9: 3f:c2:be:1b:c6:3d:8b:e1:66:50:60:ab:ab:a9:14:9a:d4:ac: fb:3b:cc:40:bf:7e:b4:eb:b2:d1:f7:c0:d3:4b:8d:5a:0c:57: 6e:8f:ef:57:83:f8:88:44:7d:a3:63:fa:0b:96:b6:86:f2:28: 0a:d1:ee:e9:91:01:bf:a2:e0:28:3d:05:b6:c1:ba:a0:b0:58: 43:33:44:cd:e0:0d:44:c8:d2:2e:23:1a:8a:2f:31:68:9c:c8: 4a:7d:09:05:bd:af:96:24:d8:1c:e5:1c:05:97:f7:b9:10:c3: b4:2d:98:0c:d1:ea:30:7d:d5:52:d6:24:c4:99:e5:3c:6f:9a: 7b:b1:ce:b4:e7:17:a8:6a:57:32:64:8e:5f:91:b8:a0:70:b1: 06:c0:77:3b:bd:0a:01:50:07:e3:03:9a:9e:f4:e6:ce:c9:dd: d5:be:69:c3:3e:bc:8a:1e:73:37:32:f0:a4:28:18:0d:82:5e: 58:e3:84:b1:92:df:1d:5e:c5:95:15:39:1e:30:95:65:81:03: c9:13:d0:45:6d:f4:d7:f9:09:9c:97:0f:c9:88:ad:8f:b7:e1: d2:2a:88:84 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Exome8hZUGddx2nHWYYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDM4MzFhNjFiYzhhOGY0Y2I4NTg4NzAyMmZiNmY4NjM5NzM0NWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwibF1pvgh1olrNDr6i5g3GKgYDeL zoeJ2j38kqbYZ5yIdQkrOjvGinIDegUvIqCFytdjmsDMAIyuNHbDpBszfb8q3hom TKD4Nt8txC87+YqSWCVx00zmjgLUCYAHJ516YjHoyUiGRwkv3FehCgQkJIsfibhs /1XLarekqXB3RK1jPO/BHQ1W/rjTwn15KdoVFCbs5IacwllhJqzF6jKoQgzfYXQr UAxDs7pokaSDl2Wx47dq+JJbVOYBS7Fy6HA5ZaqHknweVZpzacSSvtpzxqnw0a8b JrRnEr6YtBKioC1oeGzW0HQNyko021Wk708MoIyY9KNu5UUCbS6hj44NAwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGA4MaYbyKj0y4WIcCL7b4Y5c0XcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2FjMzI3 Ni01MGFkLTRlYmMtYTJhNi05ODA4NTQ1OTMzYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvYWMzMjc2 LTUwYWQtNGViYy1hMmE2LTk4MDg1NDU5MzNjOS8xL1lEZ3hwaHZJcVBUTGhZaHdJ dnR2aGpselJkdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSLgMA0EAgACMAcDBQAqAN0gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDrDTANBgkqhkiG9w0BAQsFAAOCAQEAVtAegAtANSKZ 4gzj0+EtRh4v8ugItDnpRsLlmT/ZuW3N8iDJP8K+G8Y9i+FmUGCrq6kUmtSs+zvM QL9+tOuy0ffA00uNWgxXbo/vV4P4iER9o2P6C5a2hvIoCtHu6ZEBv6LgKD0FtsG6 oLBYQzNEzeANRMjSLiMaii8xaJzISn0JBb2vliTYHOUcBZf3uRDDtC2YDNHqMH3V UtYkxJnlPG+ae7HOtOcXqGpXMmSOX5G4oHCxBsB3O70KAVAH4wOanvTmzsnd1b5p wz68ih5zNzLwpCgYDYJeWOOEsZLfHV7FlRU5HjCVZYEDyRPQRW301/kJnJcPyYit j7fh0iqIhA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:34 2026 by rpki-client