This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
File:                     YTChAogFFzqiJUSk67mECskbyNA.cer (raw, json)
Hash identifier:          G7ywqj6yUj1iHTeLFVsfhCvxvlBGpmAo+8tW8L4LYd4=
Subject key identifier:   61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7834E807264D5C68B7406890655647A0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213022
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:e8:07:26:4d:5c:68:b7:40:68:90:65:56:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b2:af:b0:83:4c:ce:b3:d9:f6:e8:2d:df:76:
                    00:5d:53:3c:58:2e:13:40:2b:7c:a6:7d:73:7c:93:
                    3a:2d:20:a5:e0:22:30:fe:2f:06:cd:58:ce:3b:35:
                    56:c1:b5:b6:bb:31:9c:34:27:b7:ab:92:80:93:cb:
                    00:51:e0:a6:ec:9a:a8:57:0c:cf:5a:8e:16:ba:d2:
                    6f:65:0d:83:69:9c:c2:77:42:bf:f4:49:c6:80:5c:
                    f3:b2:cb:6e:46:c8:9a:05:35:f6:ca:0c:cf:81:a3:
                    2d:50:45:5d:ec:d0:e8:f9:cf:b6:e4:7c:a7:e6:c1:
                    c0:ba:f2:19:4e:38:11:52:62:88:e3:f0:8f:2b:f3:
                    0d:3d:c6:cd:88:38:30:70:02:ea:4c:d3:76:0f:de:
                    aa:2d:13:94:ba:27:5e:96:9f:4b:78:00:9e:82:c2:
                    da:93:37:28:c8:3c:1a:4e:b5:b5:41:f3:89:64:d2:
                    13:ab:e7:da:d7:6d:f9:d2:29:f3:4e:3f:16:02:ae:
                    28:4f:9b:cf:18:9d:6b:20:9e:e8:5d:43:f0:d9:b5:
                    dd:13:fc:0c:09:42:9b:ff:4e:fb:d4:34:93:37:69:
                    4f:11:91:2f:e9:0f:8d:38:90:0d:72:98:64:10:ee:
                    ce:69:33:b8:c4:4f:19:00:19:5f:0c:55:b6:e0:cd:
                    56:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213022

    Signature Algorithm: sha256WithRSAEncryption
         86:51:49:6a:95:8c:a2:b6:fa:77:25:ec:21:76:c7:c7:24:79:
         94:e6:ab:dc:a4:c3:55:0f:bc:99:74:6c:e2:ab:8d:a7:04:e8:
         5b:99:24:25:66:c7:7c:b0:71:bb:a3:c9:1c:d5:f8:52:22:27:
         a7:68:67:45:f5:6d:4a:64:72:a7:22:61:6a:84:6b:06:8d:8b:
         f2:80:c2:64:d6:b4:5b:7a:85:b6:24:f7:6a:38:b8:b1:38:a3:
         d1:75:12:02:d1:84:e2:31:28:f2:46:61:4a:7f:21:04:7c:4c:
         44:d7:ee:98:09:3d:c2:a0:70:5d:56:db:03:f7:6e:b2:ec:8f:
         a2:5c:fa:7e:46:05:73:80:b8:d7:f4:20:c5:78:19:e3:68:e2:
         d9:7a:b3:d8:3e:a8:2b:32:7f:60:2f:46:1e:ae:60:ef:0d:16:
         1e:85:e6:ae:ea:54:e5:83:53:30:31:4b:7e:e6:13:65:8e:e7:
         56:7b:30:5d:d8:e6:b5:1f:91:ba:cf:27:ee:d6:f4:96:5c:e1:
         cf:31:83:66:c7:a9:5f:89:6d:5f:39:af:70:0d:5f:6c:fe:d9:
         32:b8:7c:e9:53:ec:60:8d:ca:96:5d:10:91:30:d5:1d:9c:4e:
         f3:71:98:0d:2a:9b:10:22:cc:92:2b:dc:e2:34:d0:cc:71:3c:
         ca:dd:84:f7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt4NOgHJk1caLdAaJBlVkegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTMwYTEwMjg4MDUxNzNhYTIyNTQ0YTRlYmI5ODQwYWM5MWJjOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbKvsINMzrPZ9ugt33YAXVM8WC4T
QCt8pn1zfJM6LSCl4CIw/i8GzVjOOzVWwbW2uzGcNCe3q5KAk8sAUeCm7JqoVwzP
Wo4WutJvZQ2DaZzCd0K/9EnGgFzzsstuRsiaBTX2ygzPgaMtUEVd7NDo+c+25Hyn
5sHAuvIZTjgRUmKI4/CPK/MNPcbNiDgwcALqTNN2D96qLROUuidelp9LeACegsLa
kzcoyDwaTrW1QfOJZNITq+fa12350inzTj8WAq4oT5vPGJ1rIJ7oXUPw2bXdE/wM
CUKb/0771DSTN2lPEZEv6Q+NOJANcphkEO7OaTO4xE8ZABlfDFW24M1WZwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGEwoQKIBRc6oiVEpOu5hArJG8jQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzNhZTg2
My02OTBlLTQ2MzEtOTEyMC1hNTNiNWU5NzkxMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvM2FlODYz
LTY5MGUtNDYzMS05MTIwLWE1M2I1ZTk3OTEzMS8xL1lUQ2hBb2dGRnpxaUpVU2s2
N21FQ3NrYnlOQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNAHjANBgkqhkiG9w0BAQsFAAOCAQEAhlFJapWMorb6
dyXsIXbHxyR5lOar3KTDVQ+8mXRs4quNpwToW5kkJWbHfLBxu6PJHNX4UiInp2hn
RfVtSmRypyJhaoRrBo2L8oDCZNa0W3qFtiT3aji4sTij0XUSAtGE4jEo8kZhSn8h
BHxMRNfumAk9wqBwXVbbA/dusuyPolz6fkYFc4C41/QgxXgZ42ji2Xqz2D6oKzJ/
YC9GHq5g7w0WHoXmrupU5YNTMDFLfuYTZY7nVnswXdjmtR+Rus8n7tb0llzhzzGD
ZsepX4ltXzmvcA1fbP7ZMrh86VPsYI3Kll0QkTDVHZxO83GYDSqbECLMkivc4jTQ
zHE8yt2E9w==
-----END CERTIFICATE-----