This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer File: YYd_TODTYWF3JNSyiaiRjFxtci0.cer (raw, json) Hash identifier: kxMOMSFvcdushLLOIOonp5ktI7mJkMCALgtY9iHP9Bg= Subject key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA05226A88107E18B41E93855C1E98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212291 IP: 45.86.204.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:05:22:6a:88:10:7e:18:b4:1e:93:85:5c:1e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61877f4ce0d361617724d4b289a8918c5c6d722d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:98:0e:83:54:e1:c6:e6:55:3e:8e:ea:d7: 4e:8c:02:d4:45:08:b5:f8:7d:12:4d:95:e6:eb:c5: 45:ed:14:d1:ee:fe:d3:07:ac:ad:52:50:32:b7:15: 43:da:b0:bb:49:a1:93:cc:25:4b:b5:8d:60:0a:71: bf:b2:55:e4:e9:5a:ef:f3:7f:d1:96:11:29:97:22: 83:73:42:b2:d2:95:d5:fd:4f:10:bc:52:cf:ba:27: 85:52:b3:4a:e6:b3:fa:0f:87:b9:7b:bb:b0:bd:95: db:d6:1d:03:73:49:34:24:9f:8c:54:f4:a1:8b:1b: 1c:94:c0:ac:a7:10:fa:cd:8d:8f:5e:61:7f:e8:57: f6:ab:3d:47:2d:0f:bb:d3:85:b3:bb:7d:c2:4d:98: 3b:49:b7:cf:3c:fb:a5:1b:5e:ce:6e:57:0d:09:af: e8:b9:b0:1e:b1:16:f6:75:d3:c4:14:8d:1b:06:ea: 65:ab:1c:c9:bb:31:02:fe:b9:9e:52:98:36:92:1c: 14:3a:85:08:24:62:e6:78:f3:cd:e3:ba:e8:d4:61: 7a:d2:1e:d4:b2:42:8a:e4:a0:7e:90:94:c8:5e:ec: 73:d5:4a:9b:a0:ef:cf:38:00:99:cd:7f:0e:a7:fa: f4:0a:40:e3:97:2b:65:c0:26:fd:f9:63:e3:46:63: f4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212291 Signature Algorithm: sha256WithRSAEncryption 9a:c8:35:d9:b3:13:fc:e9:2c:db:da:5f:76:3d:bb:c4:9d:6d: 93:5e:50:7f:89:92:5c:58:a6:b9:59:8b:0a:c6:00:aa:91:b5: bd:6a:64:27:2f:c5:d7:18:16:62:a8:1d:ee:fb:d3:d3:08:16: 5b:fa:6f:ab:b1:e5:58:c7:e7:bc:0a:2d:d1:63:86:37:4b:77: 47:e1:ec:5d:c4:f1:5f:50:c5:3f:6c:45:08:b0:20:82:12:11: 55:60:ca:9a:54:81:29:d7:d2:bd:67:01:27:87:26:60:f2:f8: fa:6a:ea:5e:26:0d:5e:49:65:0a:26:2c:22:75:d1:d9:21:69: 2b:64:8c:9e:27:2d:c4:c9:53:14:89:d1:5e:31:00:d6:46:c4: a2:1d:b3:0b:f8:40:80:59:d2:97:9e:cf:d7:bb:02:b1:70:24: 6b:a1:e6:fb:af:0d:89:f0:52:25:58:40:5d:bf:cf:a9:15:40: 07:e2:28:e2:1e:00:d2:5d:c1:c0:62:d8:2b:02:03:3e:d9:24: 40:7f:93:3a:42:6a:c6:13:04:e2:09:57:e9:b3:34:9b:eb:1b: ca:ee:10:58:d8:04:65:90:e4:70:eb:9d:0e:db:27:1d:d7:ca: 39:0d:2a:b3:49:8e:03:c1:df:1f:b8:9f:27:30:ac:9a:75:2a: 2a:4b:50:91 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9ygUiaogQfhi0HpOFXB6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTg3N2Y0Y2UwZDM2MTYxNzcyNGQ0YjI4OWE4OTE4YzVjNmQ3MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd2YDoNU4cbmVT6O6tdOjALURQi1 +H0STZXm68VF7RTR7v7TB6ytUlAytxVD2rC7SaGTzCVLtY1gCnG/slXk6Vrv83/R lhEplyKDc0Ky0pXV/U8QvFLPuieFUrNK5rP6D4e5e7uwvZXb1h0Dc0k0JJ+MVPSh ixsclMCspxD6zY2PXmF/6Ff2qz1HLQ+704Wzu33CTZg7SbfPPPulG17OblcNCa/o ubAesRb2ddPEFI0bBuplqxzJuzEC/rmeUpg2khwUOoUIJGLmePPN47ro1GF60h7U skKK5KB+kJTIXuxz1UqboO/POACZzX8Op/r0CkDjlytlwCb9+WPjRmP0lwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGGHf0zg02FhdyTUsomokYxcbXItMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2M0M2Iy Zi0xMGJhLTQxNzAtYjUyMS1jNzIyMjE3ZTUzYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvYzQzYjJm LTEwYmEtNDE3MC1iNTIxLWM3MjIyMTdlNTNiNi8xL1lZZF9UT0RUWVdGM0pOU3lp YWlSakZ4dGNpMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVbMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM9QzANBgkqhkiG9w0BAQsFAAOCAQEAmsg12bMT/Oks29pfdj27xJ1tk15Qf4mS XFimuVmLCsYAqpG1vWpkJy/F1xgWYqgd7vvT0wgWW/pvq7HlWMfnvAot0WOGN0t3 R+HsXcTxX1DFP2xFCLAgghIRVWDKmlSBKdfSvWcBJ4cmYPL4+mrqXiYNXkllCiYs InXR2SFpK2SMnictxMlTFInRXjEA1kbEoh2zC/hAgFnSl57P17sCsXAka6Hm+68N ifBSJVhAXb/PqRVAB+Io4h4A0l3BwGLYKwIDPtkkQH+TOkJqxhME4glX6bM0m+sb yu4QWNgEZZDkcOudDtsnHdfKOQ0qs0mOA8HfH7ifJzCsmnUqKktQkQ== -----END CERTIFICATE-----Generated at Fri Jan 30 00:53:22 2026 by rpki-client