This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer File: YET26nnk4qPgKos47QzTpAWROKw.cer (raw, json) Hash identifier: sKKm27CahHt0eBzyMBH+1sGYKl6wqK+dYwd9OK5bsRw= Subject key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A358C3948C68F7C910335676EBE664 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39534 IP: 185.151.68.0/22 IP: 194.50.38.0/24 IP: 2001:67c:29c0::/47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:c3:94:8c:68:f7:c9:10:33:56:76:eb:e6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:92:2c:91:05:a6:8a:da:ce:9f:b5:35:ce: af:71:e4:07:fe:b1:81:5e:24:68:ff:6e:2d:db:4c: 7b:55:5e:a4:95:30:1f:a9:17:b9:f5:ce:f6:d5:41: 49:4f:6a:c7:66:1a:cd:7f:b1:7f:b8:6f:6a:c3:85: b8:19:01:c1:74:56:2d:4a:84:4c:5c:da:5b:27:57: 09:a9:30:6e:59:79:e7:ff:60:58:e3:6c:e8:33:41: 52:04:3d:a0:16:f0:27:44:fb:49:84:2f:de:b3:0f: ef:7e:eb:78:8f:b2:34:53:72:f2:a1:ce:50:63:4f: 0b:24:a4:c0:22:7a:2f:4a:bd:a8:39:c8:04:0b:9b: 2a:3b:ab:6c:8c:d1:c7:a8:a5:c3:8a:7a:72:00:45: 6e:17:35:b9:24:5d:56:18:d8:0d:ab:28:7a:9d:0e: 8f:14:7f:31:91:bf:c5:76:8f:2f:4b:ef:4a:66:20: 6e:ed:0c:1d:19:ce:19:4a:99:84:cb:9b:7a:ff:8c: 32:93:f3:f5:16:ae:97:14:63:82:9d:94:aa:68:06: 99:d4:ce:21:54:4f:a4:80:23:40:57:24:3b:8b:df: 5f:43:be:f0:e7:e6:26:eb:88:e8:93:dd:a9:d5:f7: 7e:42:15:4e:2a:9e:06:bc:6e:09:e6:ff:82:12:e0: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.68.0/22 194.50.38.0/24 IPv6: 2001:67c:29c0::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39534 Signature Algorithm: sha256WithRSAEncryption 59:28:be:5f:ad:43:e2:c9:f5:8c:0b:5d:17:c9:53:5a:e7:ae: 04:87:4d:8f:36:81:09:1f:11:82:c0:e8:99:b7:42:d2:a6:c2: 38:0d:e4:65:29:8a:fd:c2:1c:f0:16:c9:c5:63:94:c8:9a:a5: 2b:ed:fb:61:7f:ce:03:52:a2:18:a7:2c:d5:f2:3d:b7:a2:41: 92:43:29:90:73:06:77:24:3a:65:65:c4:73:28:b0:9f:e3:2f: 04:9f:70:b4:b2:57:15:68:f1:68:a0:8f:1d:14:96:55:36:c5: db:4d:56:c3:5b:eb:1e:c5:01:06:e5:17:b6:1c:42:85:72:79: f6:9d:3c:47:eb:1e:ea:fa:2c:b0:6b:c9:dd:d1:95:bb:0f:ff: f2:ea:3f:59:3d:d0:56:dc:a1:94:cc:2d:d0:6f:93:5b:10:b4: 67:35:ad:46:99:9e:4c:76:45:01:54:5e:15:b2:53:56:78:3a: 52:58:82:1f:e7:79:1a:f6:7f:62:db:00:06:b9:3c:19:75:3a: 27:5f:ff:69:30:f7:b9:86:59:fc:c5:92:19:f1:51:20:c1:c6: 84:9a:5c:27:41:aa:0f:cc:aa:a0:9c:ab:b5:75:74:12:6b:26: 56:fd:62:2a:76:ad:ef:88:38:c6:70:7a:2e:52:35:ec:b7:fd: fb:a6:dc:f3 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt4o1jDlIxo98kQM1Z26+ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDQ0ZjZlYTc5ZTRlMmEzZTAyYThiMzhlZDBjZDNhNDA1OTEzOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp66SLJEFporazp+1Nc6vceQH/rGB XiRo/24t20x7VV6klTAfqRe59c721UFJT2rHZhrNf7F/uG9qw4W4GQHBdFYtSoRM XNpbJ1cJqTBuWXnn/2BY42zoM0FSBD2gFvAnRPtJhC/esw/vfut4j7I0U3Lyoc5Q Y08LJKTAInovSr2oOcgEC5sqO6tsjNHHqKXDinpyAEVuFzW5JF1WGNgNqyh6nQ6P FH8xkb/Fdo8vS+9KZiBu7QwdGc4ZSpmEy5t6/4wyk/P1Fq6XFGOCnZSqaAaZ1M4h VE+kgCNAVyQ7i99fQ77w5+Ym64jok92p1fd+QhVOKp4GvG4J5v+CEuA8rwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFGBE9up55OKj4CqLOO0M06QFkTisMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzYxMWE0 MC1iNDQ0LTQ5MGMtOWRlZS0yN2Q2MDhkMjA4NzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNjExYTQw LWI0NDQtNDkwYy05ZGVlLTI3ZDYwOGQyMDg3My8xL1lFVDI2bm5rNHFQZ0tvczQ3 UXpUcEFXUk9Ldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCuZdEAwQAwjImMA8EAgACMAkDBwEgAQZ8KcAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJpuMA0GCSqGSIb3DQEBCwUAA4IBAQBZ KL5frUPiyfWMC10XyVNa564Eh02PNoEJHxGCwOiZt0LSpsI4DeRlKYr9whzwFsnF Y5TImqUr7fthf84DUqIYpyzV8j23okGSQymQcwZ3JDplZcRzKLCf4y8En3C0slcV aPFooI8dFJZVNsXbTVbDW+sexQEG5Re2HEKFcnn2nTxH6x7q+iywa8nd0ZW7D//y 6j9ZPdBW3KGUzC3Qb5NbELRnNa1GmZ5MdkUBVF4VslNWeDpSWIIf53ka9n9i2wAG uTwZdTonX/9pMPe5hln8xZIZ8VEgwcaEmlwnQaoPzKqgnKu1dXQSayZW/WIqdq3v iDjGcHouUjXst/37ptzz -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:29 2026 by rpki-client