This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer File: YHZWuPfoG1FJtIYPgSex1OO0h9w.cer (raw, json) Hash identifier: LhT8UXQ8DTibyrhQxEVFLioKmV4VzjmmCIyXdEQ5Zzw= Subject key identifier: 60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C55333C6AEB89DDB2B5D9932EDA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204571 IP: 2001:67c:a1c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c5:53:33:c6:ae:b8:9d:db:2b:5d:99:32:ed:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:bb:80:5a:40:28:92:72:0c:5b:9b:a2:67: f7:d4:f2:75:25:55:4a:93:91:a6:5c:2e:9b:3c:02: a8:04:28:46:bb:d8:76:b0:6d:d1:35:0f:8e:74:60: e4:17:8d:fa:8e:a8:81:d1:1e:5c:b7:07:1c:70:e7: 87:9a:dc:bb:c4:00:73:a7:e2:a0:48:2f:bb:6c:a4: e3:3f:1e:9d:8d:d8:1e:e9:c4:5f:53:7c:f3:b8:d7: c7:c2:e3:2c:ee:bd:db:59:f2:42:14:4f:95:4e:ef: 69:53:dd:19:91:9d:07:25:bb:72:0c:b6:58:fa:07: 8a:ca:53:b0:02:fc:dc:1d:0d:a5:0f:93:95:15:7b: 7e:43:06:00:f3:4c:17:55:ba:b7:54:2f:b8:fc:a4: 86:24:82:43:3f:d3:e7:c7:8e:8d:da:0f:80:3b:06: 64:a2:3e:94:d4:ad:92:67:f9:14:e5:76:87:77:f0: 04:f2:f5:af:6a:24:60:e0:49:93:cf:8a:3d:8e:62: e6:e3:7f:bf:22:50:f2:ac:3c:5e:8f:e1:67:01:6e: 4f:f0:d1:91:50:fd:70:4a:d9:79:bc:e4:37:10:ab: 9b:9e:da:06:37:3a:84:64:16:ca:ca:84:62:ed:ff: dc:a5:8c:b3:37:10:ae:f9:b7:ee:79:ca:56:44:24: fd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a1c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204571 Signature Algorithm: sha256WithRSAEncryption 08:b7:5b:de:0e:c5:aa:25:c2:f6:9f:b7:cc:a8:d6:6d:de:0e: 1a:90:5c:05:27:5d:84:d0:c9:e9:36:a0:18:b7:a4:5d:56:12: 6f:2b:e2:88:5a:9e:14:f6:4b:22:48:e5:fa:4b:90:58:d4:c5: 8e:e0:9b:6c:72:59:5c:db:86:a7:cc:8f:44:1e:71:bd:f4:d3: 10:ba:db:e4:60:4d:72:bd:92:f4:74:51:60:ab:a0:ed:ba:6c: aa:a5:92:6e:46:08:de:94:c9:8a:92:36:a0:10:a9:6c:3d:cc: 0d:27:7b:74:9c:a5:47:42:1c:d0:8a:ce:56:51:e1:e7:40:9a: 5e:b6:a9:f8:21:7b:6f:2f:b0:46:54:fa:0c:20:6c:3b:7a:47: b0:45:f4:ad:aa:33:ad:00:96:24:f4:90:bf:04:e4:0e:41:2f: 45:ed:13:38:f2:b1:9f:1f:1a:8d:de:a8:d3:b1:62:0e:8b:50: fc:ac:d4:f0:c7:7d:77:65:22:a7:58:0e:7c:ee:75:0c:db:88: 03:10:d0:77:1c:60:2c:c4:46:16:fc:83:3f:80:59:14:f5:5d: 9f:b9:e2:c8:4f:db:cb:f7:41:c0:6b:13:c3:4e:f4:c2:0f:03: e3:4a:d1:72:f3:64:65:69:89:46:a8:4d:dd:fb:33:c7:6e:b0: 0a:7c:42:26 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5EMVTM8auuJ3bK12ZMu2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDc2NTZiOGY3ZTgxYjUxNDliNDg2MGY4MTI3YjFkNGUzYjQ4N2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhu7gFpAKJJyDFubomf31PJ1JVVK k5GmXC6bPAKoBChGu9h2sG3RNQ+OdGDkF436jqiB0R5ctwcccOeHmty7xABzp+Kg SC+7bKTjPx6djdge6cRfU3zzuNfHwuMs7r3bWfJCFE+VTu9pU90ZkZ0HJbtyDLZY +geKylOwAvzcHQ2lD5OVFXt+QwYA80wXVbq3VC+4/KSGJIJDP9Pnx46N2g+AOwZk oj6U1K2SZ/kU5XaHd/AE8vWvaiRg4EmTz4o9jmLm43+/IlDyrDxej+FnAW5P8NGR UP1wStl5vOQ3EKubntoGNzqEZBbKyoRi7f/cpYyzNxCu+bfuecpWRCT9DwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFGB2Vrj36BtRSbSGD4EnsdTjtIfcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2NlZTU1 ZC05ODVhLTRlMzYtOGUzOS04MmJjOGEzMTgwYzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvY2VlNTVk LTk4NWEtNGUzNi04ZTM5LTgyYmM4YTMxODBjNi8xL1lIWld1UGZvRzFGSnRJWVBn U2V4MU9PMGg5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAocMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMfGzANBgkqhkiG9w0BAQsFAAOCAQEACLdb3g7FqiXC9p+3zKjWbd4OGpBc BSddhNDJ6TagGLekXVYSbyviiFqeFPZLIkjl+kuQWNTFjuCbbHJZXNuGp8yPRB5x vfTTELrb5GBNcr2S9HRRYKug7bpsqqWSbkYI3pTJipI2oBCpbD3MDSd7dJylR0Ic 0IrOVlHh50CaXrap+CF7by+wRlT6DCBsO3pHsEX0raozrQCWJPSQvwTkDkEvRe0T OPKxnx8ajd6o07FiDotQ/KzU8Md9d2Uip1gOfO51DNuIAxDQdxxgLMRGFvyDP4BZ FPVdn7niyE/by/dBwGsTw070wg8D40rRcvNkZWmJRqhN3fszx26wCnxCJg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:01 2026 by rpki-client