This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer (raw, json) Hash identifier: u0XB1GNLmUiZ6feBU7BY/6ngNwP4HtVf5ANWzxJMooc= Subject key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38CB3007C94AB10C09C3D6836A5735 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31294 AS: 50608 AS: 61980 IP: 83.220.160.0/22 IP: 83.220.166.0/23 IP: 2a01:b8a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cb:30:07:c9:4a:b1:0c:09:c3:d6:83:6a:57:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=607548c37abebc58b928ed285433d69e95df9c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:36:02:4f:74:7b:3a:28:e8:f6:30:5f:38:27: 24:39:65:ce:64:d4:f4:ad:6d:4e:ff:da:43:48:74: b4:5e:25:ab:a1:f3:ea:3e:a9:ee:a9:bd:f1:6b:47: 5b:de:26:b9:94:24:2b:4a:99:7b:2f:29:ea:5e:a6: 50:0e:c6:3f:51:56:ec:72:09:27:30:7f:a1:33:56: 63:ed:e8:06:f2:8e:59:0f:03:5f:89:71:8a:65:fa: da:bc:8b:98:9b:c9:20:f0:85:36:67:75:34:4c:40: dd:25:4b:bc:1a:45:00:d1:04:f4:36:38:8c:d2:c4: b8:61:6e:46:d8:18:9f:2b:70:4c:72:0f:a5:fb:c8: aa:7e:80:14:df:af:5b:8a:10:0d:47:2b:94:f9:23: c7:04:2d:72:9d:6f:fd:c4:0d:a5:7c:6c:24:57:d4: 56:22:e5:1f:c7:e7:a8:79:1c:ca:29:05:eb:9d:bb: b2:bc:d2:75:74:a0:f7:30:f7:8f:31:9d:1c:6f:09: b6:40:69:52:5c:ac:b9:4a:3a:56:0c:18:f7:38:1e: 07:86:a1:da:18:f6:cb:df:22:ba:e6:83:3b:ce:62: 22:64:cf:63:cf:68:bc:89:39:86:2b:5a:8a:03:28: f0:ed:79:b7:b4:15:7e:d0:55:54:2f:39:07:83:a7: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.160.0/22 83.220.166.0/23 IPv6: 2a01:b8a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31294 50608 61980 Signature Algorithm: sha256WithRSAEncryption 5e:44:b3:89:42:e3:36:ec:04:10:83:a5:7e:a4:0a:37:b8:2b: 94:83:49:77:f1:44:d2:a8:bd:c5:88:dd:89:60:b4:8e:ad:8c: 09:6f:b7:64:be:30:aa:b2:5c:3d:af:0a:ac:83:94:37:90:b1: 7d:e8:19:c5:01:4b:60:aa:41:29:b4:d2:86:ed:6f:c1:c8:ef: a8:89:6e:3a:4e:1d:5c:7b:93:8f:1b:79:fb:8e:20:19:ad:e2: bc:88:5e:a9:31:88:9e:5f:84:e6:15:ba:8c:77:aa:d0:4c:8b: 97:1c:6c:f8:3b:e9:a5:52:21:4a:04:68:61:fe:b3:79:32:24: cc:2b:26:50:53:56:a9:cd:a2:87:48:10:65:30:d2:25:37:a6: af:5c:ca:27:a5:ac:db:81:92:ac:36:e8:74:96:95:39:db:b3: ee:61:fc:11:8e:81:64:4d:45:2d:9a:0a:7a:d5:ea:8f:87:2b: 34:85:e2:36:2f:a2:48:08:f6:bd:22:29:26:90:6a:f2:85:c8: d1:f3:c4:97:47:2b:87:53:10:31:e0:3b:5a:f9:01:e1:c3:63: e1:37:21:b8:51:5a:ac:86:c2:f0:3f:16:da:ad:f7:94:13:1c: 42:4e:fb:bb:64:32:31:0d:15:c1:df:93:62:21:3b:b3:95:78: b9:30:98:e9 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt+OMswB8lKsQwJw9aDalc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDc1NDhjMzdhYmViYzU4YjkyOGVkMjg1NDMzZDY5ZTk1ZGY5YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DYCT3R7Oijo9jBfOCckOWXOZNT0 rW1O/9pDSHS0XiWrofPqPqnuqb3xa0db3ia5lCQrSpl7LynqXqZQDsY/UVbscgkn MH+hM1Zj7egG8o5ZDwNfiXGKZfravIuYm8kg8IU2Z3U0TEDdJUu8GkUA0QT0NjiM 0sS4YW5G2BifK3BMcg+l+8iqfoAU369bihANRyuU+SPHBC1ynW/9xA2lfGwkV9RW IuUfx+eoeRzKKQXrnbuyvNJ1dKD3MPePMZ0cbwm2QGlSXKy5SjpWDBj3OB4HhqHa GPbL3yK65oM7zmIiZM9jz2i8iTmGK1qKAyjw7Xm3tBV+0FVULzkHg6fuCwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFGB1SMN6vrxYuSjtKFQz1p6V35w7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzUyYjYz NC02MTQ4LTRlMmUtYjhmMy0wYzk4YzU3MGE2ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvNTJiNjM0 LTYxNDgtNGUyZS1iOGYzLTBjOThjNTcwYTZlMC8xL1lIVkl3M3EtdkZpNUtPMG9W RFBXbnBYZm5Ecy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCU9ygAwQBU9ymMA0EAgACMAcDBQAqAbigMCMG CCsGAQUFBwEIAQH/BBQwEqAQMA4CAno+AgMAxbACAwDyHDANBgkqhkiG9w0BAQsF AAOCAQEAXkSziULjNuwEEIOlfqQKN7grlINJd/FE0qi9xYjdiWC0jq2MCW+3ZL4w qrJcPa8KrIOUN5CxfegZxQFLYKpBKbTShu1vwcjvqIluOk4dXHuTjxt5+44gGa3i vIheqTGInl+E5hW6jHeq0EyLlxxs+DvppVIhSgRoYf6zeTIkzCsmUFNWqc2ih0gQ ZTDSJTemr1zKJ6Ws24GSrDbodJaVOduz7mH8EY6BZE1FLZoKetXqj4crNIXiNi+i SAj2vSIpJpBq8oXI0fPEl0crh1MQMeA7WvkB4cNj4TchuFFarIbC8D8W2q33lBMc Qk77u2QyMQ0Vwd+TYiE7s5V4uTCY6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:55 2026 by rpki-client