This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer File: YOiP_m8N5fLx_J0U72LyVnC9W0o.cer (raw, json) Hash identifier: qmbucaeLoCIr6FOrk6fjsoGVpMwH5EwzCmBuwYY1vHI= Subject key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3642042B565BAF0990B9A10CE0CCBB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52152 IP: 195.54.190.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:42:04:2b:56:5b:af:09:90:b9:a1:0c:e0:cc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:eb:5b:28:70:9a:85:79:6e:41:8d:58:17: f8:4a:ca:83:48:39:61:51:0d:3a:99:54:96:a6:00: 47:5e:20:ff:fc:14:a7:65:c7:41:d4:7e:a3:4f:b2: ca:83:37:83:cf:88:0e:d7:03:93:09:8f:fb:e8:c7: d9:75:d6:7c:1f:44:ea:2a:fa:86:71:d3:18:c3:47: ab:47:37:57:ce:2a:66:62:da:a9:3e:f9:6f:e4:c2: c8:f5:c4:b2:3b:e1:11:e1:4a:4e:fe:34:6b:ae:48: 1f:f8:ec:a2:2f:26:3b:40:e4:6f:50:c7:b9:f7:41: f7:0f:a2:7e:38:ad:6c:91:b8:5f:80:94:36:d1:30: 8f:0c:2d:85:07:8b:04:7c:94:91:0c:b2:dc:52:d8: 25:fc:5a:83:af:8a:d4:f0:81:34:1f:ca:c4:45:2a: 56:f8:ff:9f:c2:0f:90:42:ec:15:f6:57:56:05:57: 97:25:ba:c7:86:21:d6:7a:c2:6a:d7:b6:f5:41:17: a9:73:c2:24:3a:31:7c:f1:9a:58:48:03:14:5c:85: 83:35:c3:13:49:21:8b:99:c7:c9:51:c6:f2:37:8c: b0:5b:a6:56:4a:95:93:98:de:0b:1c:f0:3c:73:ad: 09:35:fe:d7:87:e2:34:f4:9e:bc:8b:3a:87:9a:29: 4e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.190.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52152 Signature Algorithm: sha256WithRSAEncryption 9d:9c:7d:b2:77:13:f7:97:31:7a:08:e9:f5:d0:64:60:9f:b0: d7:be:f7:17:76:b8:a4:0a:1d:3d:96:13:12:23:3a:12:3f:65: 62:14:fe:0b:01:47:bd:c4:e0:51:37:45:4c:e5:32:5f:1a:c2: 58:e0:bb:38:49:16:79:91:36:f7:c9:50:8a:a9:58:29:b5:ad: ea:02:16:4a:57:27:40:1c:f0:67:d4:10:31:57:8c:9e:17:4b: e7:31:79:18:c3:b0:5d:eb:ab:e6:e4:07:b6:5a:c8:74:95:d6: dc:33:9d:79:33:29:16:1a:8d:1f:7f:0d:5b:20:5e:7e:c9:6e: 99:0e:d1:05:59:af:ee:0e:72:71:8c:3f:49:78:61:fd:da:be: 7a:ad:46:9b:63:04:c7:62:10:7d:5d:06:fa:78:73:ac:05:b7: fe:a1:98:a9:de:8c:a4:74:53:02:65:c4:68:70:50:10:ab:13: 52:2f:2f:1e:f7:cd:d7:fe:8d:c9:09:2b:d8:7a:e7:ea:ff:3d: 4b:a1:7b:64:45:d2:a3:9d:7d:8e:ea:90:f3:06:75:0e:a7:9b: 25:5a:6b:b8:37:e0:ad:56:5c:b8:f7:7d:cb:46:d4:66:b4:c2: 0b:85:1f:dd:39:cb:ba:99:28:37:00:94:ac:3e:79:9d:9a:54: 25:97:0d:2b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NkIEK1ZbrwmQuaEM4My7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGU4OGZmZTZmMGRlNWYyZjFmYzlkMTRlZjYyZjI1NjcwYmQ1YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuPrWyhwmoV5bkGNWBf4SsqDSDlh UQ06mVSWpgBHXiD//BSnZcdB1H6jT7LKgzeDz4gO1wOTCY/76MfZddZ8H0TqKvqG cdMYw0erRzdXzipmYtqpPvlv5MLI9cSyO+ER4UpO/jRrrkgf+OyiLyY7QORvUMe5 90H3D6J+OK1skbhfgJQ20TCPDC2FB4sEfJSRDLLcUtgl/FqDr4rU8IE0H8rERSpW +P+fwg+QQuwV9ldWBVeXJbrHhiHWesJq17b1QRepc8IkOjF88ZpYSAMUXIWDNcMT SSGLmcfJUcbyN4ywW6ZWSpWTmN4LHPA8c60JNf7Xh+I09J68izqHmilOGQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGDoj/5vDeXy8fydFO9i8lZwvVtKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2Y5N2Fl ZC1mNWMyLTRmYjctYTdkMS0wNzI1ZjA2OTdiODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjk3YWVk LWY1YzItNGZiNy1hN2QxLTA3MjVmMDY5N2I4My8xL1lPaVBfbThONWZMeF9KMFU3 Mkx5Vm5DOVcwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwza+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDLuDANBgkqhkiG9w0BAQsFAAOCAQEAnZx9sncT95cxegjp9dBkYJ+w1773F3a4 pAodPZYTEiM6Ej9lYhT+CwFHvcTgUTdFTOUyXxrCWOC7OEkWeZE298lQiqlYKbWt 6gIWSlcnQBzwZ9QQMVeMnhdL5zF5GMOwXeur5uQHtlrIdJXW3DOdeTMpFhqNH38N WyBefslumQ7RBVmv7g5ycYw/SXhh/dq+eq1Gm2MEx2IQfV0G+nhzrAW3/qGYqd6M pHRTAmXEaHBQEKsTUi8vHvfN1/6NyQkr2Hrn6v89S6F7ZEXSo519juqQ8wZ1Dqeb JVpruDfgrVZcuPd9y0bUZrTCC4Uf3TnLupkoNwCUrD55nZpUJZcNKw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:25 2026 by rpki-client