This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer File: YVbhr9Z5oqcxH9atXfaZDlYY488.cer (raw, json) Hash identifier: 5NCHZtcIGIBecP3E1ebXCXwkamhZPGDkDEUoW20iaC4= Subject key identifier: 61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B07291391AF357138E1D9CDBCF1BE4090 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 07:28:11 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203620 IP: 185.1.37.0/24 IP: 2001:67c:2d98::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:29:13:91:af:35:71:38:e1:d9:cd:bc:f1:be:40:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 07:28:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6a:0b:bb:ea:82:ce:79:ac:43:7d:ae:2e:8e: e1:a2:e0:91:64:c0:ee:e0:17:70:14:43:c2:b6:5d: e7:3a:6b:58:f1:6b:a1:d3:ce:41:3d:98:ec:1e:fe: 2a:14:94:01:0d:b0:ac:d1:54:18:84:ca:44:1f:8d: 37:5d:d3:97:18:62:c0:68:f4:50:79:22:5c:42:f7: bc:bf:a7:57:02:da:b5:51:5e:e8:21:28:7b:eb:19: b5:0a:50:14:40:c2:3e:93:a5:0c:1d:fa:94:9a:be: 94:b3:e6:68:a7:88:c0:04:a6:98:7a:2c:4c:3e:68: bb:81:a1:08:db:4f:f8:6a:95:6e:ae:71:5f:0a:23: 48:cf:a8:24:87:fe:48:24:af:31:59:4f:55:26:d7: 58:7b:77:ac:8c:61:00:97:b0:02:cb:95:e4:dd:e2: 90:6a:55:2e:48:1d:25:4f:30:3a:7a:99:13:c6:c0: b0:69:1f:05:8a:7c:ee:5e:f7:66:98:5d:26:f2:c2: e1:c0:05:9f:bd:7b:de:dd:2e:7c:bc:ab:78:ee:33: 46:1d:2d:8b:f4:b0:1d:10:07:a7:29:36:4f:17:5a: 4b:22:b8:3f:8b:50:1b:4a:0a:7f:12:8d:c4:5a:0e: f6:d5:b1:72:76:f5:7d:ef:64:a5:5a:57:48:4a:12: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.37.0/24 IPv6: 2001:67c:2d98::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203620 Signature Algorithm: sha256WithRSAEncryption 37:4f:af:1a:ce:15:a3:72:c8:e0:74:c4:24:00:03:d3:8f:08: dd:dd:87:76:7e:27:73:bd:23:2a:1e:53:7b:bc:4a:2e:9e:56: ca:a0:06:37:d2:c5:b8:82:dc:b4:95:1f:e5:12:18:6a:01:b3: 9c:aa:b7:80:d7:6c:f3:b7:2e:56:00:c3:0d:b6:22:7e:f1:87: d6:67:66:11:07:61:a3:18:ef:4b:e2:13:7e:d6:41:5d:1d:ab: 42:00:b6:47:23:fc:f3:f0:af:8f:a2:38:70:ad:eb:9b:33:72: e4:a0:28:b4:d3:15:31:4e:9c:e1:6c:16:60:02:9a:d8:cb:96: b4:ec:ca:3a:a7:10:fe:45:a8:5c:bb:66:ed:b6:fc:ec:fb:16: 58:a3:0f:83:d6:a6:ca:38:b4:03:cb:73:b7:96:c5:e6:20:35: ee:6a:81:69:0d:3e:d8:d1:2a:65:59:e4:19:5c:b7:38:a6:26: a0:44:47:63:9c:1b:f3:c3:fe:73:b8:62:d9:f2:4c:78:e3:4c: 02:04:c8:e2:4a:8a:43:bf:94:55:f3:a2:35:c4:13:d9:59:13: 52:42:02:2f:e0:c0:4f:b9:7a:2f:c3:f5:16:c5:8c:1c:41:69: 76:66:72:18:37:51:29:a4:0c:0b:fd:ef:20:a5:ff:9b:f6:c8: c1:a9:fd:df -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZsHKRORrzVxOOHZzbzxvkCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMDcyODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTU2ZTFhZmQ2NzlhMmE3MzExZmQ2YWQ1ZGY2OTkwZTU2MThlM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WoLu+qCznmsQ32uLo7houCRZMDu 4BdwFEPCtl3nOmtY8Wuh085BPZjsHv4qFJQBDbCs0VQYhMpEH403XdOXGGLAaPRQ eSJcQve8v6dXAtq1UV7oISh76xm1ClAUQMI+k6UMHfqUmr6Us+Zop4jABKaYeixM Pmi7gaEI20/4apVurnFfCiNIz6gkh/5IJK8xWU9VJtdYe3esjGEAl7ACy5Xk3eKQ alUuSB0lTzA6epkTxsCwaR8FinzuXvdmmF0m8sLhwAWfvXve3S58vKt47jNGHS2L 9LAdEAenKTZPF1pLIrg/i1AbSgp/Eo3EWg721bFydvV972SlWldIShK/wwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFGFW4a/WeaKnMR/WrV32mQ5WGOPPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzczNWZl OS02MWQ4LTRjZDgtYjY4MS1mZGQyZGFiZGVmMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNzM1ZmU5 LTYxZDgtNGNkOC1iNjgxLWZkZDJkYWJkZWYxYy8xL1lWYmhyOVo1b3FjeEg5YXRY ZmFaRGxZWTQ4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAuQElMA8EAgACMAkDBwAgAQZ8LZgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAxtkMA0GCSqGSIb3DQEBCwUAA4IBAQA3T68azhWj csjgdMQkAAPTjwjd3Yd2fidzvSMqHlN7vEounlbKoAY30sW4gty0lR/lEhhqAbOc qreA12zzty5WAMMNtiJ+8YfWZ2YRB2GjGO9L4hN+1kFdHatCALZHI/zz8K+Pojhw reubM3LkoCi00xUxTpzhbBZgAprYy5a07Mo6pxD+Rahcu2bttvzs+xZYow+D1qbK OLQDy3O3lsXmIDXuaoFpDT7Y0SplWeQZXLc4piagREdjnBvzw/5zuGLZ8kx440wC BMjiSopDv5RV86I1xBPZWRNSQgIv4MBPuXovw/UWxYwcQWl2ZnIYN1EppAwL/e8g pf+b9sjBqf3f -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:28 2025 by rpki-client