This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer File: YbGV0TBQ_zxGihSXeHELU1giUdk.cer (raw, json) Hash identifier: BiZ7TEwKqGz+iX52yz/DE2jBmYQnotPslEQEZE0oyks= Subject key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758CC663BA1B98F0ADB9732A5AE15F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15925 IP: 87.253.248.0/21 IP: 213.135.192.0/19 IP: 2a01:7f8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:66:3b:a1:b9:8f:0a:db:97:32:a5:ae:15:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61b195d13050ff3c468a149778710b53582251d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:7b:dc:5c:0d:41:bc:ec:3c:85:82:bb:3d: 08:8f:36:8e:78:1f:ab:e1:0c:d1:35:09:ac:d2:27: 48:4d:53:05:c7:a7:bd:52:9f:f5:32:81:58:59:c0: 6c:3a:b6:0a:91:03:03:46:9f:44:5f:c2:6b:f2:0c: fb:10:cd:e7:ae:8c:18:ff:eb:89:d6:a3:9a:38:92: 9f:c8:e2:04:91:77:ae:d6:87:9b:d7:f4:dd:4a:e6: 4f:14:42:01:e5:a3:78:ea:85:73:be:50:0d:ab:7c: f9:97:12:97:15:d3:69:fc:df:4d:31:c0:8a:ce:64: ba:97:5d:ae:9c:ab:aa:2e:c9:94:ae:7c:97:32:b2: bf:ef:8a:0e:cf:8f:5c:f0:c5:95:b2:86:00:0b:48: 6e:9e:31:b8:42:ab:36:f1:31:a9:a8:31:41:55:f4: 6d:aa:88:f8:fb:76:cb:cb:c5:9b:77:2a:2d:1b:de: 3f:59:b9:5a:00:9c:79:43:a4:fe:5d:b5:85:f5:84: 45:e2:a3:b5:0b:c5:66:d5:4b:75:a9:4a:17:af:36: 35:26:5f:57:7e:20:ed:b1:12:ec:eb:2e:8d:52:43: d0:70:eb:e8:ad:b1:39:de:e5:09:34:cb:fa:ff:08: 76:32:37:76:23:ce:b0:a1:d3:99:48:7f:3c:08:6e: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.253.248.0/21 213.135.192.0/19 IPv6: 2a01:7f8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15925 Signature Algorithm: sha256WithRSAEncryption a0:56:8a:66:a2:fe:2c:b8:1c:e0:a9:9b:f5:60:e4:e6:98:67: 55:ab:32:a2:20:9e:8b:8e:86:2f:b9:68:28:50:42:40:20:d5: 92:b7:e9:b0:48:b9:de:86:cd:61:28:55:7b:4b:29:4c:48:2a: a6:6e:ff:c0:b7:e3:27:d6:8f:d4:ff:03:61:9d:8c:d1:92:81: bb:1a:8c:52:ff:6b:71:da:d9:99:e2:6c:ee:88:c2:7d:08:58: 9c:61:ad:3b:21:77:4c:81:66:e2:40:fa:d1:32:18:fe:f8:20: 3a:03:06:fc:da:f2:29:ce:46:e0:da:2a:45:d1:85:9e:87:05: 4d:01:46:da:31:11:37:86:24:44:eb:d7:89:60:27:7d:00:32: c6:a1:e8:9f:d0:33:33:a8:6b:a8:45:42:79:1d:39:0f:3b:60: b2:a6:59:82:6e:f5:2c:c1:fb:00:c0:48:58:1b:3c:f9:ae:7e: ec:c7:c5:76:ef:f1:6d:21:c0:c6:fa:18:a6:c2:aa:35:14:27: 11:8d:bf:da:9d:d1:9b:81:c3:bf:4d:97:fa:80:2b:c2:9e:fd: 9f:b3:40:90:0a:4f:e5:94:88:5e:c4:ca:4f:09:e8:73:d2:f1: e0:40:80:4a:5d:dd:9c:80:3e:bc:1e:04:61:b1:16:3f:4c:8a: 42:7e:1a:f5 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3WMxmO6G5jwrblzKlrhXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWIxOTVkMTMwNTBmZjNjNDY4YTE0OTc3ODcxMGI1MzU4MjI1MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfZ73FwNQbzsPIWCuz0IjzaOeB+r 4QzRNQms0idITVMFx6e9Up/1MoFYWcBsOrYKkQMDRp9EX8Jr8gz7EM3nrowY/+uJ 1qOaOJKfyOIEkXeu1oeb1/TdSuZPFEIB5aN46oVzvlANq3z5lxKXFdNp/N9NMcCK zmS6l12unKuqLsmUrnyXMrK/74oOz49c8MWVsoYAC0hunjG4Qqs28TGpqDFBVfRt qoj4+3bLy8WbdyotG94/WblaAJx5Q6T+XbWF9YRF4qO1C8Vm1Ut1qUoXrzY1Jl9X fiDtsRLs6y6NUkPQcOvorbE53uUJNMv6/wh2Mjd2I86wodOZSH88CG6ZXQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFGGxldEwUP88RooUl3hxC1NYIlHZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzJmM2Mx OS01NmQ1LTQ5MjQtOGJjYi1iYWM0NzJhYjdiNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMmYzYzE5 LTU2ZDUtNDkyNC04YmNiLWJhYzQ3MmFiN2I2YS8xL1liR1YwVEJRX3p4R2loU1hl SEVMVTFnaVVkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDV/34AwQF1YfAMA0EAgACMAcDBQMqAQf4MBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj41MA0GCSqGSIb3DQEBCwUAA4IBAQCgVopm ov4suBzgqZv1YOTmmGdVqzKiIJ6LjoYvuWgoUEJAINWSt+mwSLnehs1hKFV7SylM SCqmbv/At+Mn1o/U/wNhnYzRkoG7GoxS/2tx2tmZ4mzuiMJ9CFicYa07IXdMgWbi QPrRMhj++CA6Awb82vIpzkbg2ipF0YWehwVNAUbaMRE3hiRE69eJYCd9ADLGoeif 0DMzqGuoRUJ5HTkPO2CyplmCbvUswfsAwEhYGzz5rn7sx8V27/FtIcDG+himwqo1 FCcRjb/andGbgcO/TZf6gCvCnv2fs0CQCk/llIhexMpPCehz0vHgQIBKXd2cgD68 HgRhsRY/TIpCfhr1 -----END CERTIFICATE-----Generated at Tue Feb 10 01:06:11 2026 by rpki-client