This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer File: YMjVd0f3KXAO8vVhT2397I0Rny0.cer (raw, json) Hash identifier: 3QNYQsjrPWFJKlYMfzvQEeJtbWOPfgB87ia1KIJEpZE= Subject key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9921AE113EE835AD5273701058247 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57133 IP: 185.130.136.0/22 IP: 2a03:9de0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:92:1a:e1:13:ee:83:5a:d5:27:37:01:05:82:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:e9:5f:41:ba:47:ee:63:bd:35:93:6a:ea: 1a:65:8d:ff:a3:3d:7f:04:f7:16:56:df:49:08:3a: 03:76:1b:c8:09:60:65:77:3e:d3:30:c1:31:5d:54: c0:2a:27:2e:6c:de:e7:dd:a5:b9:e6:54:14:29:1d: ed:b2:fc:45:af:8c:58:37:02:6e:12:7e:40:c3:85: 80:26:b9:63:8f:87:6b:09:d9:b6:1c:38:3f:91:e2: 8c:ca:1a:9b:76:65:3d:af:a8:4e:9b:bf:b0:70:b3: 71:f6:fb:f3:21:a7:c1:b5:4f:32:3a:9a:bb:7c:dd: 84:01:21:8a:0f:eb:90:26:ef:2d:8e:2b:b9:db:ef: 34:c8:12:7d:bd:c2:ba:b0:1a:cf:83:0d:21:ce:ea: e6:b3:0f:30:61:11:85:44:6a:da:9e:57:78:b5:39: c4:e7:7b:3c:ae:24:e4:43:3c:86:88:08:44:22:f4: 50:9d:32:18:81:61:db:11:fd:2a:9b:3e:b8:55:46: 06:6c:41:cc:5e:64:bd:be:7a:bb:c3:8b:f8:f9:86: 38:c6:11:6a:31:13:4b:03:54:23:f0:4d:e1:bd:b4: b3:7f:63:43:15:23:07:fa:4d:0c:98:4f:b1:a2:0f: b3:cd:93:89:d3:e4:9c:24:42:bc:28:b7:72:27:ef: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.136.0/22 IPv6: 2a03:9de0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57133 Signature Algorithm: sha256WithRSAEncryption 94:c8:a1:06:62:7f:d8:9f:d8:0a:3c:e9:a1:50:86:c6:c6:95: 3c:aa:ed:5c:e0:4a:8a:51:79:2d:d9:a3:fb:47:b0:cb:8e:69: 23:89:f3:51:ba:c7:71:b5:52:04:41:fc:c0:9e:3c:23:91:13: fd:e8:05:f9:65:16:c8:ff:8e:d5:c6:36:ae:02:41:e0:a5:ef: 2e:3a:6b:84:0c:7a:bf:cd:f1:e8:94:ed:cb:d0:aa:85:fc:23: b9:64:27:b1:cc:12:57:78:82:85:b3:02:74:1b:f8:f0:7f:c3: b7:a6:cb:73:1c:70:ed:36:02:83:e1:84:5d:28:e5:7b:bd:62: 6a:14:cc:65:8a:f6:0e:ea:9e:42:f0:f1:49:af:56:66:eb:22: 23:ed:d2:63:96:03:6a:d0:ed:10:5e:7d:48:ef:c1:38:f2:42: ef:7e:58:da:47:06:23:20:23:da:69:d2:b3:c5:30:12:5d:e1: 5b:83:ec:71:0c:15:59:26:86:bd:56:0f:59:04:99:95:4f:4d: 1e:98:ec:56:44:70:17:f1:12:23:90:99:b3:fd:70:f8:dd:8d: c6:48:e0:42:69:42:cf:c9:16:42:c0:60:d6:7a:2e:fe:89:48: 2a:08:94:80:85:2a:5d:7a:16:6a:9a:51:ca:fc:ed:ae:18:f2: 9c:83:ed:bc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yZIa4RPug1rVJzcBBYJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGM4ZDU3NzQ3ZjcyOTcwMGVmMmY1NjE0ZjZkZmRlYzhkMTE5ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH/pX0G6R+5jvTWTauoaZY3/oz1/ BPcWVt9JCDoDdhvICWBldz7TMMExXVTAKicubN7n3aW55lQUKR3tsvxFr4xYNwJu En5Aw4WAJrljj4drCdm2HDg/keKMyhqbdmU9r6hOm7+wcLNx9vvzIafBtU8yOpq7 fN2EASGKD+uQJu8tjiu52+80yBJ9vcK6sBrPgw0hzurmsw8wYRGFRGranld4tTnE 53s8riTkQzyGiAhEIvRQnTIYgWHbEf0qmz64VUYGbEHMXmS9vnq7w4v4+YY4xhFq MRNLA1Qj8E3hvbSzf2NDFSMH+k0MmE+xog+zzZOJ0+ScJEK8KLdyJ+8wzwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzM5ZDcz NC02ZmIxLTRkYzAtYTEyOC1kNzVmNTk1ZmE3YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvMzlkNzM0 LTZmYjEtNGRjMC1hMTI4LWQ3NWY1OTVmYTdjMy8xL1lNalZkMGYzS1hBTzh2VmhU MjM5N0kwUm55MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYKIMA0EAgACMAcDBQAqA53gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDfLTANBgkqhkiG9w0BAQsFAAOCAQEAlMihBmJ/2J/Y CjzpoVCGxsaVPKrtXOBKilF5Ldmj+0ewy45pI4nzUbrHcbVSBEH8wJ48I5ET/egF +WUWyP+O1cY2rgJB4KXvLjprhAx6v83x6JTty9CqhfwjuWQnscwSV3iChbMCdBv4 8H/Dt6bLcxxw7TYCg+GEXSjle71iahTMZYr2DuqeQvDxSa9WZusiI+3SY5YDatDt EF59SO/BOPJC735Y2kcGIyAj2mnSs8UwEl3hW4PscQwVWSaGvVYPWQSZlU9NHpjs VkRwF/ESI5CZs/1w+N2NxkjgQmlCz8kWQsBg1nou/olIKgiUgIUqXXoWappRyvzt rhjynIPtvA== -----END CERTIFICATE-----Generated at Tue Jan 27 13:03:18 2026 by rpki-client