This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer (raw, json) Hash identifier: +dELaa05fDfYBllB2ar5sSYcq0mU3KP7aSwWD0soReU= Subject key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3677903F9BEF3402888D997FD15E00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212304 IP: 5.183.88.0/22 IP: 62.3.35.0/24 IP: 77.247.116.0/22 IP: 113.30.192.0/21 IP: 146.255.184.0/24 IP: 176.125.236.0/22 IP: 185.5.144.0/24 IP: 185.5.147.0/24 IP: 185.128.226.0/23 IP: 185.140.173.0/24 IP: 185.217.166.0/24 IP: 185.253.1.0/24 IP: 193.111.40.0/24 IP: 194.26.202.0/24 IP: 195.64.115.0/24 IP: 195.64.119.0 -- 195.64.125.255 IP: 195.96.134.0/24 IP: 216.247.232.0/22 IP: 2a10:d500::/29 IP: 2a14:2500::/29 IP: 2a14:2700::/29 IP: 2a14:2b00::/29 IP: 2a14:2d00::/29 IP: 2a14:2f00::/29 IP: 2a14:3300::/29 IP: 2a14:3500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:77:90:3f:9b:ef:34:02:88:8d:99:7f:d1:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:a5:67:01:73:da:c8:23:8f:44:4d:1f:2b: ad:23:f7:45:f9:60:2c:d0:81:84:00:b5:57:8c:db: 18:87:5a:60:1e:c2:b1:d0:38:35:22:64:ff:20:87: 9a:63:be:e9:77:da:9b:75:9c:76:28:16:c4:24:09: 8a:39:d3:5f:ca:92:ff:e1:16:d3:98:62:86:3b:7f: f6:24:3b:62:8b:58:54:a6:dd:71:9b:30:49:86:f6: 61:74:86:f5:f5:40:cd:91:ae:ea:dd:51:ef:39:3d: f2:06:2a:ab:48:ed:aa:e4:29:d3:83:97:86:e3:ad: f5:11:9c:0f:5d:88:25:0a:a0:9e:40:7a:f3:ec:85: f5:0e:26:ac:cd:f8:92:bc:1a:9f:74:08:c4:03:51: c3:bd:38:4d:2f:01:a4:a9:44:a5:29:c0:0e:78:f7: 3c:11:9f:8d:06:63:75:57:dc:c5:06:16:cc:6a:01: f6:fa:ba:e7:4e:f7:84:24:dc:98:72:ff:e9:bf:c6: 4b:42:04:48:c2:db:fe:5b:91:24:37:10:49:a1:c6: 17:35:d1:0b:33:04:bc:49:5b:be:07:95:bc:d3:fe: f3:26:39:f9:9f:d4:6a:ca:2a:5c:18:df:05:40:c5: ce:ab:6d:00:15:e7:85:68:1a:a7:fd:c6:cb:10:c0: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.88.0/22 62.3.35.0/24 77.247.116.0/22 113.30.192.0/21 146.255.184.0/24 176.125.236.0/22 185.5.144.0/24 185.5.147.0/24 185.128.226.0/23 185.140.173.0/24 185.217.166.0/24 185.253.1.0/24 193.111.40.0/24 194.26.202.0/24 195.64.115.0/24 195.64.119.0-195.64.125.255 195.96.134.0/24 216.247.232.0/22 IPv6: 2a10:d500::/29 2a14:2500::/29 2a14:2700::/29 2a14:2b00::/29 2a14:2d00::/29 2a14:2f00::/29 2a14:3300::/29 2a14:3500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212304 Signature Algorithm: sha256WithRSAEncryption 7c:81:dc:5f:1a:27:3c:c0:67:9d:26:8e:ae:59:1c:78:38:0d: 9d:46:f6:2c:1c:de:94:61:0e:eb:f7:b5:bb:18:6e:6f:e3:1b: 6a:14:70:3b:82:07:55:50:85:dd:41:5c:4d:da:c0:6f:59:75: bc:10:22:97:fe:66:d0:0a:ee:98:7c:8f:b5:fe:49:96:db:83: 79:01:a7:f1:e3:fb:6a:5a:5d:ed:68:78:b4:31:a6:fa:43:be: 5c:31:b8:76:14:4f:65:a7:91:19:91:dc:4e:40:87:18:f5:b2: 47:cf:27:ce:c7:31:41:6e:e5:54:40:ba:d6:59:e2:2d:d4:0e: a7:d4:1f:20:02:73:97:37:14:73:0d:8f:9f:a1:fb:07:69:50: b7:fe:c8:e0:54:e6:0a:60:ea:87:83:76:67:17:3a:17:f5:77: b1:6b:b3:a6:3e:96:74:cc:44:a3:1d:97:ad:44:63:8b:99:8e: 9f:58:18:a2:da:d6:dd:24:e4:54:e6:07:31:a9:ab:e4:b1:5c: 79:93:3c:7d:fc:b2:73:a4:93:a5:02:33:ed:26:d1:b5:89:e5: 3e:d4:08:ec:d5:1d:f5:7a:13:a3:1e:a5:d0:2a:9b:9f:b1:78: 6b:47:dc:6a:d4:2a:53:9f:9a:4a:af:ac:3a:0e:ed:ce:f2:b7: ff:16:d0:29 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgISAZt7NneQP5vvNAKIjZl/0V4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGZjZDU1YjkxMzA4NThkOGVhNTgzYzA5ODdkYWQwMGY2MTRkYjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vKlZwFz2sgjj0RNHyutI/dF+WAs 0IGEALVXjNsYh1pgHsKx0Dg1ImT/IIeaY77pd9qbdZx2KBbEJAmKOdNfypL/4RbT mGKGO3/2JDtii1hUpt1xmzBJhvZhdIb19UDNka7q3VHvOT3yBiqrSO2q5CnTg5eG 4631EZwPXYglCqCeQHrz7IX1DiaszfiSvBqfdAjEA1HDvThNLwGkqUSlKcAOePc8 EZ+NBmN1V9zFBhbMagH2+rrnTveEJNyYcv/pv8ZLQgRIwtv+W5EkNxBJocYXNdEL MwS8SVu+B5W80/7zJjn5n9RqyipcGN8FQMXOq20AFeeFaBqn/cbLEMDQQQIDAQAB o4IDUTCCA00wHQYDVR0OBBYEFGD81VuRMIWNjqWDwJh9rQD2FNs5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzgyMjMz ZC1lYzA3LTQyZmItODc5OS1lZDMwYjliYjEyZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvODIyMzNk LWVjMDctNDJmYi04Nzk5LWVkMzBiOWJiMTJkNS8xL1lQelZXNUV3aFkyT3BZUEFt SDJ0QVBZVTJ6ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHPBggrBgEF BQcBBwEB/wSBvzCBvDB6BAIAATB0AwQCBbdYAwQAPgMjAwQCTfd0AwQDcR7AAwQA kv+4AwQCsH3sAwQAuQWQAwQAuQWTAwQBuYDiAwQAuYytAwQAudmmAwQAuf0BAwQA wW8oAwQAwhrKAwQAw0BzMAwDBADDQHcDBAHDQHwDBADDYIYDBALY9+gwPgQCAAIw OAMFAyoQ1QADBQMqFCUAAwUDKhQnAAMFAyoUKwADBQMqFC0AAwUDKhQvAAMFAyoU MwADBQMqFDUAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM9UDANBgkqhkiG9w0B AQsFAAOCAQEAfIHcXxonPMBnnSaOrlkceDgNnUb2LBzelGEO6/e1uxhub+MbahRw O4IHVVCF3UFcTdrAb1l1vBAil/5m0ArumHyPtf5JltuDeQGn8eP7alpd7Wh4tDGm +kO+XDG4dhRPZaeRGZHcTkCHGPWyR88nzscxQW7lVEC61lniLdQOp9QfIAJzlzcU cw2Pn6H7B2lQt/7I4FTmCmDqh4N2Zxc6F/V3sWuzpj6WdMxEox2XrURji5mOn1gY otrW3STkVOYHMamr5LFceZM8ffyyc6STpQIz7SbRtYnlPtQI7NUd9XoTox6l0Cqb n7F4a0fcatQqU5+aSq+sOg7tzvK3/xbQKQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:21 2026 by rpki-client