This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer File: YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer (raw, json) Hash identifier: nIzbizAx9Ifo5HyQWcNcbSbcxa8C9C0acCLDwztmQZY= Subject key identifier: 60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3CE67C0733308B4FDA35B3222DE51 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.22.243.0/24 IP: 193.22.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ce:67:c0:73:33:08:b4:fd:a3:5b:32:22:de:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60a434fd6bff8b6fbb0d52f8da42e91f8a5a292f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:d6:fd:4f:fa:b1:44:dd:a2:12:24:57:ec: 1c:e8:fe:ab:6f:c4:04:6f:9d:ce:5f:3d:1f:28:3d: 0c:2a:fa:ba:eb:d5:0d:83:c9:88:05:23:b1:de:28: ea:d8:12:00:54:77:c6:35:95:1c:e8:6d:e4:de:9b: c5:26:0e:63:f7:f2:9e:3b:c8:b6:58:c0:9c:68:96: b5:30:d2:3e:98:f8:db:c6:2f:55:f1:8f:c9:d9:bc: 68:26:de:62:da:c4:34:14:16:67:4c:2f:a5:3a:fa: c0:c3:88:94:f0:78:bf:1a:bf:b1:94:ac:d9:a2:e1: dd:db:07:fb:68:0a:e0:0f:9e:ef:37:fd:db:c8:72: 10:b7:78:66:6b:10:68:28:aa:ff:64:76:53:bc:a8: a0:03:15:f1:cc:49:5a:cb:cc:84:37:b9:58:31:8a: 8a:05:11:b0:31:eb:b7:69:bf:f8:f8:fe:57:c7:31: cc:7e:e8:03:54:e9:b3:ea:e9:6b:a6:b3:b7:d0:94: 44:d8:d8:f8:d7:f4:46:3a:40:9a:41:e8:84:98:dd: 33:fd:33:f1:72:bd:d1:45:c7:9e:8c:5b:50:a9:8f: 77:3d:0f:06:fd:07:a2:ed:23:5f:59:10:03:14:01: e4:12:b1:11:42:d4:c7:9d:fe:71:d2:40:0f:44:d8: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.243.0/24 193.22.245.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:fd:98:30:2f:84:c0:cc:1f:ab:c8:1a:ca:41:41:df:dc:46: 61:5e:04:6c:26:d1:67:39:4b:45:55:43:60:2d:d1:2b:cd:29: b9:5a:d6:c8:a7:1e:7a:85:e1:95:3d:af:71:39:5c:c8:a7:45: f2:9c:c1:99:d9:94:2f:f9:d7:01:00:83:e1:8a:ee:fb:c5:f8: 55:97:0a:f9:2d:5c:42:01:63:c9:1a:ea:0e:ee:9f:ed:a3:86: 86:a6:02:55:48:f8:7a:ec:f8:26:69:b1:2d:0c:5f:0a:0e:2f: 37:84:d0:52:5f:91:84:9d:92:a9:9a:9e:ac:79:71:99:f3:b4: 00:26:89:7c:d7:12:dc:a8:3a:c0:f5:2c:37:f4:9c:83:9f:3f: f4:e0:ba:83:e3:45:c3:9c:12:f0:36:7c:99:8b:57:81:2e:13: d2:5e:fc:b2:93:d4:94:77:f6:5c:b4:91:5e:4d:ec:e5:2b:59: 0c:63:79:08:fb:66:77:1e:f8:74:ff:af:7a:68:74:0b:20:dd: da:be:2b:e1:d3:dd:7e:3a:a3:cc:a9:fd:7f:2c:f5:87:2c:de: d1:c9:9e:90:76:48:96:f8:31:9b:75:4c:64:21:c1:50:1f:a2: a1:d6:3a:3d:29:76:54:73:33:8c:0d:2c:6e:d5:2c:8a:8f:1c: 9c:48:b6:72 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7o85nwHMzCLT9o1syIt5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGE0MzRmZDZiZmY4YjZmYmIwZDUyZjhkYTQyZTkxZjhhNWEyOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncnW/U/6sUTdohIkV+wc6P6rb8QE b53OXz0fKD0MKvq669UNg8mIBSOx3ijq2BIAVHfGNZUc6G3k3pvFJg5j9/KeO8i2 WMCcaJa1MNI+mPjbxi9V8Y/J2bxoJt5i2sQ0FBZnTC+lOvrAw4iU8Hi/Gr+xlKzZ ouHd2wf7aArgD57vN/3byHIQt3hmaxBoKKr/ZHZTvKigAxXxzElay8yEN7lYMYqK BRGwMeu3ab/4+P5XxzHMfugDVOmz6ulrprO30JRE2Nj41/RGOkCaQeiEmN0z/TPx cr3RRceejFtQqY93PQ8G/Qei7SNfWRADFAHkErERQtTHnf5x0kAPRNg6LQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFGCkNP1r/4tvuw1S+NpC6R+KWikvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzY4MDFj OS1kZDE3LTRkY2EtODEwMC02YTNmMDFkOWNiNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNjgwMWM5 LWRkMTctNGRjYS04MTAwLTZhM2YwMWQ5Y2I1MC8xL1lLUTBfV3ZfaTItN0RWTDQy a0xwSDRwYUtTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwRbzAwQAwRb1MA0GCSqGSIb3DQEBCwUAA4IB AQCa/ZgwL4TAzB+ryBrKQUHf3EZhXgRsJtFnOUtFVUNgLdErzSm5WtbIpx56heGV Pa9xOVzIp0XynMGZ2ZQv+dcBAIPhiu77xfhVlwr5LVxCAWPJGuoO7p/to4aGpgJV SPh67PgmabEtDF8KDi83hNBSX5GEnZKpmp6seXGZ87QAJol81xLcqDrA9Sw39JyD nz/04LqD40XDnBLwNnyZi1eBLhPSXvyyk9SUd/ZctJFeTezlK1kMY3kI+2Z3Hvh0 /696aHQLIN3avivh091+OqPMqf1/LPWHLN7RyZ6QdkiW+DGbdUxkIcFQH6Kh1jo9 KXZUczOMDSxu1SyKjxycSLZy -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:06 2026 by rpki-client