This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer File: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer (raw, json) Hash identifier: btR6HQODKL6WA55abX2YS/0E+ACRpK5b72xz7Fmjz/k= Subject key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F157A432E95867BB85AFBDD1077A81B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 159.60.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7a:43:2e:95:86:7b:b8:5a:fb:dd:10:77:a8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:a5:83:89:94:45:1c:58:a0:ac:06:1e:0e: 5c:81:03:0e:36:02:60:40:1d:be:fb:f6:9a:f1:da: 40:66:25:34:79:6d:bc:45:8b:15:19:f9:c3:fa:98: 85:96:3f:79:f8:25:5b:c7:cf:91:bd:97:49:54:0c: 7a:ec:d7:b3:a3:27:9d:08:1b:11:f6:17:c0:66:5e: eb:fa:a4:d1:f4:ff:f8:f4:4a:61:2c:27:6b:9c:b3: 3b:49:05:a6:a2:70:db:7e:c1:82:83:94:6e:f7:98: 81:3d:de:07:2e:83:5d:7c:ee:e2:a9:0c:08:77:d3: bb:a9:55:52:26:99:71:93:4d:38:3b:0e:77:2e:c5: fc:0c:dc:ec:1c:2d:60:4f:6e:bd:e1:68:22:f5:1e: 65:ab:03:57:da:b6:56:7f:83:38:fb:24:4a:f3:9e: 57:e4:90:c6:10:db:f1:61:1e:95:8b:bf:5a:9c:ff: 9b:0e:3a:52:1c:26:70:b3:c3:59:6e:ec:b8:c0:c5: 81:2f:82:3b:98:94:b0:9a:f0:55:41:e5:56:6f:7e: 47:58:c9:fa:43:ad:c4:f9:48:2a:34:25:d6:8f:39: 01:fe:ee:08:6c:8f:4b:ad:71:95:d9:f5:b1:91:bb: 46:89:2e:6c:64:4a:f4:d5:15:67:75:93:6a:01:5e: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4d:68:c0:c9:10:71:f1:5b:f9:e9:34:3b:ce:95:f3:ef:d8:ea: b2:a8:de:bb:ef:35:60:dc:04:86:57:ea:26:c2:90:90:53:f6: 22:d5:8a:c0:da:37:37:37:8e:38:72:04:b7:54:d3:56:98:82: 98:7c:d9:7c:91:af:42:4a:0f:66:32:0c:c3:54:ce:f5:f3:90: 6a:de:0a:57:e4:f0:ba:b9:4f:ee:35:6c:2c:49:f4:ee:35:e6: 9d:8c:21:b5:51:c8:59:0e:7f:89:61:f3:8c:7e:a7:81:b3:0a: 45:ff:f2:14:bb:33:e0:97:26:4e:74:7b:60:ae:9e:47:a0:4d: d1:f6:45:c1:af:5e:de:d5:dd:c3:76:f9:1d:06:a6:b4:0b:82: 44:8a:2d:ea:5b:8d:d3:fa:96:07:90:6b:b2:b4:3e:38:83:66: b7:0b:a4:10:bc:f2:d3:25:1e:02:69:a7:cf:88:6b:e9:cb:13: b1:17:86:9b:6d:5d:43:fe:ec:73:46:91:59:c7:03:10:c0:cc: 5b:03:ef:dd:8f:20:8f:9d:d2:8f:e5:2c:42:23:fb:03:00:17: 58:f0:68:2f:fe:01:fe:fc:9f:2d:71:d1:c6:f5:9e:35:b3:93: 10:4c:09:d3:70:96:07:b3:e6:a5:20:a0:6e:16:33:9f:c7:65: 9a:34:1d:4c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt/FXpDLpWGe7ha+90Qd6gbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWIzZTFjYWI4Y2JmNWIzYzZlMGZiYmUxNDkxZjQ4ZGE2MGNhZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvilg4mURRxYoKwGHg5cgQMONgJg QB2++/aa8dpAZiU0eW28RYsVGfnD+piFlj95+CVbx8+RvZdJVAx67NezoyedCBsR 9hfAZl7r+qTR9P/49EphLCdrnLM7SQWmonDbfsGCg5Ru95iBPd4HLoNdfO7iqQwI d9O7qVVSJplxk004Ow53LsX8DNzsHC1gT2694Wgi9R5lqwNX2rZWf4M4+yRK855X 5JDGENvxYR6Vi79anP+bDjpSHCZws8NZbuy4wMWBL4I7mJSwmvBVQeVWb35HWMn6 Q63E+UgqNCXWjzkB/u4IbI9LrXGV2fWxkbtGiS5sZEr01RVndZNqAV43jQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFGGz4cq4y/WzxuD7vhSR9I2mDK5sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzlkZWY4 Ni1iMWFjLTQwZTYtODNiZC05NDdjYzU0ZWJlMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvOWRlZjg2 LWIxYWMtNDBlNi04M2JkLTk0N2NjNTRlYmUwMi8xL1liUGh5cmpMOWJQRzRQdS1G SkgwamFZTXJtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAnzwwDQYJKoZIhvcNAQELBQADggEBAE1owMkQ cfFb+ek0O86V8+/Y6rKo3rvvNWDcBIZX6ibCkJBT9iLVisDaNzc3jjhyBLdU01aY gph82XyRr0JKD2YyDMNUzvXzkGreClfk8Lq5T+41bCxJ9O415p2MIbVRyFkOf4lh 84x+p4GzCkX/8hS7M+CXJk50e2CunkegTdH2RcGvXt7V3cN2+R0GprQLgkSKLepb jdP6lgeQa7K0PjiDZrcLpBC88tMlHgJpp8+Ia+nLE7EXhpttXUP+7HNGkVnHAxDA zFsD792PII+d0o/lLEIj+wMAF1jwaC/+Af78ny1x0cb1njWzkxBMCdNwlgez5qUg oG4WM5/HZZo0HUw= -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:17 2026 by rpki-client