This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer (raw, json) Hash identifier: btuDlrIhbpiaBy3wq/OyrqhxNTQAcS2ayp1O6BQHlDQ= Subject key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC77A48287A3C29DFFFB954466B418D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39194 IP: 37.35.16.0/20 IP: 83.146.192.0/18 IP: 85.209.100.0/22 IP: 185.143.60.0/22 IP: 2a00:4540::/32 IP: 2a00:7a20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7a:48:28:7a:3c:29:df:ff:b9:54:46:6b:41:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61340818a8633908cf37ea145d66d92452fb73aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:2d:a9:c9:ae:40:b8:76:76:36:69:cb:a1: ad:4c:c4:08:3e:94:e5:6d:de:4c:03:49:bf:5d:a0: a1:68:dc:48:00:14:59:ad:31:14:3d:7a:b8:ab:cf: a3:d8:19:d6:b0:49:b3:36:bd:4a:b2:15:66:06:23: 52:c5:7e:86:bd:5b:37:c7:dd:04:88:f5:3a:dd:6b: 0d:60:f0:ef:66:ed:84:34:68:93:ab:22:76:92:cd: 7e:03:66:13:8f:2c:40:5d:61:c7:6c:78:d1:1b:63: 04:a3:76:fa:94:2e:3b:d0:e2:69:50:18:bb:ef:6b: 73:5f:54:e4:18:fd:89:6d:3e:d9:d9:ed:fa:32:58: da:47:0d:da:35:56:3f:c1:99:7b:a5:d6:d5:34:7d: 84:a7:56:73:2d:89:32:e6:0c:54:5e:08:23:08:b7: 19:9a:33:f4:62:26:ec:a7:fd:aa:48:bd:08:94:6e: f9:67:f2:ae:b5:92:9b:f8:80:93:15:55:fb:dc:81: ba:94:91:09:9c:a3:a4:00:8b:7e:15:e0:b5:38:09: b3:58:eb:2d:9e:ad:7f:52:26:df:87:cf:08:41:0f: fd:f1:37:b5:7a:97:b7:e3:cc:5c:72:cb:a2:af:0d: 38:49:a8:51:2b:d0:52:3a:3d:91:07:cb:72:34:e2: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.35.16.0/20 83.146.192.0/18 85.209.100.0/22 185.143.60.0/22 IPv6: 2a00:4540::/32 2a00:7a20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39194 Signature Algorithm: sha256WithRSAEncryption 55:62:a3:c8:09:62:4c:85:15:8c:5a:c8:09:96:ab:9e:e3:ee: d3:a0:0b:70:9d:88:8f:d0:21:31:62:2e:dc:fa:cf:4f:af:80: f8:38:31:ae:e4:c7:9d:3b:8b:f1:33:41:be:49:1a:b6:19:94: fc:88:10:45:84:ef:5d:01:2e:9d:bb:61:5b:c4:f0:3f:fb:47: 67:60:a2:00:4b:bb:37:7f:6b:0c:20:ce:f6:e2:c9:f2:c8:05: 11:a1:d2:15:72:ba:36:e4:cb:21:1d:89:fb:e1:89:73:e4:a6: ff:2f:16:d7:fc:00:bd:95:d6:d0:8e:9d:b7:8d:49:20:4b:f0: 56:0e:c4:4e:32:91:60:e4:ab:32:db:30:e1:a5:9e:b9:b6:25: 0d:86:10:bb:bf:b8:8c:65:36:3b:a9:be:e5:49:bc:b2:aa:98: 84:36:00:6d:f9:4b:24:a3:2c:92:a3:83:38:0d:4e:63:4c:1e: cc:33:7c:ed:71:92:a4:db:7f:95:ab:83:30:d6:34:12:8d:98: 1b:fd:f8:40:8f:f1:db:c2:0f:dc:cd:f2:24:ac:d1:35:ba:a1: be:f5:ee:94:19:2b:f9:96:82:6b:79:0f:d0:e8:c3:b9:dc:6e: 61:ba:0c:5e:91:fb:2b:96:81:64:d6:ce:10:9d:ec:af:69:8e: e0:8c:07:37 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt6x3pIKHo8Kd//uVRGa0GNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTM0MDgxOGE4NjMzOTA4Y2YzN2VhMTQ1ZDY2ZDkyNDUyZmI3M2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6stqcmuQLh2djZpy6GtTMQIPpTl bd5MA0m/XaChaNxIABRZrTEUPXq4q8+j2BnWsEmzNr1KshVmBiNSxX6GvVs3x90E iPU63WsNYPDvZu2ENGiTqyJ2ks1+A2YTjyxAXWHHbHjRG2MEo3b6lC470OJpUBi7 72tzX1TkGP2JbT7Z2e36MljaRw3aNVY/wZl7pdbVNH2Ep1ZzLYky5gxUXggjCLcZ mjP0Yibsp/2qSL0IlG75Z/KutZKb+ICTFVX73IG6lJEJnKOkAIt+FeC1OAmzWOst nq1/Uibfh88IQQ/98Te1epe348xccsuirw04SahRK9BSOj2RB8tyNOIpGQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFGE0CBioYzkIzzfqFF1m2SRS+3OqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzM5MWRk Ny00Yjk2LTQ2YTUtYWZiNC02YjYxNWI3ZGJmZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMzkxZGQ3 LTRiOTYtNDZhNS1hZmI0LTZiNjE1YjdkYmZlMC8xL1lUUUlHS2hqT1FqUE4tb1VY V2JaSkZMN2M2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQEJSMQAwQGU5LAAwQCVdFkAwQCuY88MBQEAgAC MA4DBQAqAEVAAwUAKgB6IDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAmRowDQYJ KoZIhvcNAQELBQADggEBAFVio8gJYkyFFYxayAmWq57j7tOgC3CdiI/QITFiLtz6 z0+vgPg4Ma7kx507i/EzQb5JGrYZlPyIEEWE710BLp27YVvE8D/7R2dgogBLuzd/ awwgzvbiyfLIBRGh0hVyujbkyyEdifvhiXPkpv8vFtf8AL2V1tCOnbeNSSBL8FYO xE4ykWDkqzLbMOGlnrm2JQ2GELu/uIxlNjupvuVJvLKqmIQ2AG35SySjLJKjgzgN TmNMHswzfO1xkqTbf5WrgzDWNBKNmBv9+ECP8dvCD9zN8iSs0TW6ob717pQZK/mW gmt5D9Dow7ncbmG6DF6R+yuWgWTWzhCd7K9pjuCMBzc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:02 2026 by rpki-client