This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer File: YG03z4fxLyqy3vMTgMOGuCbBnWU.cer (raw, json) Hash identifier: 9zNxkJdsQLGpwahZeb0TfWi1o2U4Vs2V/tVHCMy7DTs= Subject key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3621AAA9F96E29170048561425867C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199936 IP: 31.131.48.0/20 IP: 2001:678:1008::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:21:aa:a9:f9:6e:29:17:00:48:56:14:25:86:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=606d37cf87f12f2ab2def31380c386b826c19d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9c:e0:23:a8:56:02:30:76:4e:7f:6a:eb:59: 99:b9:24:98:cf:5a:85:ba:5c:2e:ed:b0:c9:73:e3: be:34:dd:19:45:9b:74:b4:af:01:13:7d:00:5a:db: f3:e0:be:98:0a:00:e7:16:cf:a4:4c:d4:cc:ca:4c: 01:8b:49:23:8f:65:4d:0d:56:42:bc:eb:61:0b:58: ff:80:0e:4b:63:b1:9a:9a:3f:94:bb:a2:5b:b0:cc: 75:8e:96:a6:63:63:92:46:31:0e:d8:be:81:21:f0: 8b:37:09:03:d6:0a:2b:a0:a5:52:45:36:ab:e6:df: 72:9a:d9:07:8e:34:af:61:62:db:ff:fb:53:ff:46: c7:b1:e3:d8:cb:8f:bb:b4:7e:09:ba:d4:25:66:5c: 61:05:6f:90:d3:01:60:ab:b8:5e:fa:fb:90:ae:8f: 0c:a3:e3:bb:06:24:6f:9f:3e:d4:11:30:aa:cc:6b: af:31:1f:94:20:d0:c4:19:c0:9d:e8:03:20:22:49: ac:67:be:4b:b5:aa:69:96:51:09:0e:e9:ee:96:2e: f3:4e:92:2c:7b:3b:31:2e:9f:16:33:99:0a:bc:db: 39:87:bd:01:20:f6:13:c9:23:49:5f:6e:12:1e:08: 5f:c0:ad:c1:67:df:8d:66:2b:1d:08:e9:ac:13:4d: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.48.0/20 IPv6: 2001:678:1008::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199936 Signature Algorithm: sha256WithRSAEncryption 0d:3f:cb:b3:83:74:88:05:c6:85:7f:4a:e8:67:e3:13:94:77: 2e:59:90:c7:ad:91:89:61:1c:7e:07:b6:7d:06:8f:7a:58:15: d4:91:1f:31:13:15:c9:22:bc:2c:5c:cc:c3:5c:9d:4f:4a:6c: 64:5f:df:43:00:d0:6b:a3:f4:7d:d8:cd:b1:b3:10:80:42:c0: bd:3a:97:4e:73:95:1e:e6:fd:fe:d9:15:95:c2:e9:f9:6b:ef: 21:a4:d0:2d:89:b8:36:45:db:d2:8c:40:eb:08:5f:72:e6:27: d8:aa:d2:0e:b8:df:1a:be:66:37:8b:0b:2d:01:af:ae:fa:ab: 74:97:01:c4:50:4b:ec:bf:67:d1:b6:e4:c9:53:d8:03:fe:a3: 73:a7:dc:13:da:b1:13:aa:9b:8e:26:30:11:09:fd:80:a7:52: 1d:f6:17:b3:f4:0c:9f:56:f2:88:bb:dc:68:53:ed:30:1f:f5: 75:88:2c:b4:2c:97:ac:07:dd:ae:04:a2:b2:f6:08:fc:5e:02: e4:69:91:26:6d:d2:10:f5:ca:df:6e:9f:c0:cc:d7:ff:27:50: 63:ab:f7:d4:2b:2b:53:f4:48:b0:c4:97:80:a9:dc:1f:7a:c5: 96:18:2a:89:4d:55:01:48:f7:09:ae:b4:a6:5f:bf:83:f7:be: ca:96:9b:c0 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7NiGqqfluKRcASFYUJYZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDZkMzdjZjg3ZjEyZjJhYjJkZWYzMTM4MGMzODZiODI2YzE5ZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JzgI6hWAjB2Tn9q61mZuSSYz1qF ulwu7bDJc+O+NN0ZRZt0tK8BE30AWtvz4L6YCgDnFs+kTNTMykwBi0kjj2VNDVZC vOthC1j/gA5LY7Gamj+Uu6JbsMx1jpamY2OSRjEO2L6BIfCLNwkD1goroKVSRTar 5t9ymtkHjjSvYWLb//tT/0bHsePYy4+7tH4JutQlZlxhBW+Q0wFgq7he+vuQro8M o+O7BiRvnz7UETCqzGuvMR+UINDEGcCd6AMgIkmsZ75LtappllEJDunuli7zTpIs ezsxLp8WM5kKvNs5h70BIPYTySNJX24SHghfwK3BZ9+NZisdCOmsE00GSQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFGBtN8+H8S8qst7zE4DDhrgmwZ1lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2EyMGQ2 YS05MWJhLTQ0MmYtODkyNy1kYzAwNDNlOWJiNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTIwZDZh LTkxYmEtNDQyZi04OTI3LWRjMDA0M2U5YmI0ZC8xL1lHMDN6NGZ4THlxeTN2TVRn TU9HdUNiQm5XVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQEH4MwMA8EAgACMAkDBwAgAQZ4EAgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAw0AMA0GCSqGSIb3DQEBCwUAA4IBAQANP8uzg3SI BcaFf0roZ+MTlHcuWZDHrZGJYRx+B7Z9Bo96WBXUkR8xExXJIrwsXMzDXJ1PSmxk X99DANBro/R92M2xsxCAQsC9OpdOc5Ue5v3+2RWVwun5a+8hpNAtibg2RdvSjEDr CF9y5ifYqtIOuN8avmY3iwstAa+u+qt0lwHEUEvsv2fRtuTJU9gD/qNzp9wT2rET qpuOJjARCf2Ap1Id9hez9AyfVvKIu9xoU+0wH/V1iCy0LJesB92uBKKy9gj8XgLk aZEmbdIQ9crfbp/AzNf/J1Bjq/fUKytT9EiwxJeAqdwfesWWGCqJTVUBSPcJrrSm X7+D977KlpvA -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:40 2026 by rpki-client