This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer (raw, json) Hash identifier: x/dcgTbTHHzCEXSCgRCP8ZPKQhr8+VAnV3aPPLnww6E= Subject key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C0BB45257AF6A2820216D4D53C6B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51644 IP: 91.199.61.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:0b:b4:52:57:af:6a:28:20:21:6d:4d:53:c6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61b824b85aba7bc3512b1214b385de570fb294bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:cb:96:85:e6:f4:b2:45:f3:83:52:c2:82: 9c:65:cf:6e:ad:d5:a6:0b:2e:29:fe:76:39:08:bd: fb:20:8e:21:4a:cd:a1:e3:16:c8:40:b6:f0:0e:cb: 5e:f2:24:08:33:28:58:8e:c7:a8:12:bb:22:e2:1e: a6:d8:e3:0b:ac:d7:06:bf:91:4e:95:7f:14:30:6c: a7:9d:ef:30:b3:fc:f0:15:a8:a1:6f:e7:eb:19:79: 78:e6:20:e5:d0:b0:aa:98:e2:a2:a0:8a:7b:3b:ea: c5:e2:70:27:e9:3e:d8:ad:6b:f9:91:ef:5b:b6:a5: 60:6f:06:82:df:19:c1:be:0d:4c:10:83:f7:3e:e6: d5:8f:1b:d4:59:46:4e:7a:6e:59:65:ef:1d:84:ae: 23:ad:08:47:81:39:d4:90:cb:f6:4b:d1:db:96:8d: b7:75:3f:b1:52:1c:20:2e:f5:dd:72:18:29:c3:e9: c3:7b:4d:c1:49:77:10:31:48:e1:fc:5e:94:ca:5e: f0:36:f6:cd:0f:eb:21:2e:96:bd:bf:b9:94:eb:3d: a0:7e:3f:80:55:7c:54:95:a0:46:bc:c6:4e:30:c1: f4:52:3a:ee:e4:5b:67:c4:7f:5d:cf:56:c5:34:e9: ac:dc:91:dd:fc:32:42:60:1e:bd:b9:fc:2d:36:13: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.61.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51644 Signature Algorithm: sha256WithRSAEncryption 96:7b:2d:5f:05:02:08:24:71:3c:f6:eb:16:6e:45:db:77:ec: e5:d7:39:0f:98:aa:21:06:bb:8b:fd:23:ee:7b:34:6b:eb:4f: fe:fa:bf:d9:5d:53:ac:fe:dd:6d:9f:f5:1f:13:86:19:b7:ea: 9c:53:e9:e1:81:d3:58:bc:e8:5f:79:48:74:f5:9b:71:e4:31: bf:10:ad:57:fe:92:f1:db:f4:18:40:0a:bf:8d:ed:54:0a:68: fb:91:54:ed:c2:ed:e3:48:97:41:55:2c:19:54:23:7c:d1:de: a7:85:bd:a8:69:2c:40:a9:1e:d7:61:d2:dd:4c:ad:86:b6:a3: 1c:5c:9e:52:92:bb:4d:69:d6:fa:2f:27:0d:81:b1:32:e9:17: 7d:d1:8a:20:dd:07:fa:bf:b9:a1:db:a8:57:1e:ee:67:51:e5: 9b:af:6f:1f:e6:e3:a5:13:c6:7a:4e:b8:30:24:9d:d9:69:dd: ae:e6:8f:6f:8b:1e:13:da:02:96:36:0c:1c:4b:a5:87:d9:92: 4c:67:db:dd:ef:63:5a:e9:8e:27:2e:7f:60:58:56:ce:92:c1: 8c:f6:ba:c8:a5:a9:68:72:32:52:b1:ae:a0:fa:13:25:17:d1: 8d:8d:7b:bc:29:e8:87:a7:3b:3c:0b:00:d7:89:ad:9c:3a:ef: a6:44:2a:50 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XAu0UlevaiggIW1NU8azMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWI4MjRiODVhYmE3YmMzNTEyYjEyMTRiMzg1ZGU1NzBmYjI5NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCXLloXm9LJF84NSwoKcZc9urdWm Cy4p/nY5CL37II4hSs2h4xbIQLbwDste8iQIMyhYjseoErsi4h6m2OMLrNcGv5FO lX8UMGynne8ws/zwFaihb+frGXl45iDl0LCqmOKioIp7O+rF4nAn6T7YrWv5ke9b tqVgbwaC3xnBvg1MEIP3PubVjxvUWUZOem5ZZe8dhK4jrQhHgTnUkMv2S9Hblo23 dT+xUhwgLvXdchgpw+nDe03BSXcQMUjh/F6Uyl7wNvbND+shLpa9v7mU6z2gfj+A VXxUlaBGvMZOMMH0Ujru5FtnxH9dz1bFNOms3JHd/DJCYB69ufwtNhOAFQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGG4JLhaunvDUSsSFLOF3lcPspS/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2MwZTdh MS0wNmY1LTRjYTAtODIxMC1lYTZlZDI5Y2FiNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYzBlN2Ex LTA2ZjUtNGNhMC04MjEwLWVhNmVkMjljYWI1ZS8xL1liZ2t1RnE2ZThOUkt4SVVz NFhlVncteWxMOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8c9MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJvDANBgkqhkiG9w0BAQsFAAOCAQEAlnstXwUCCCRxPPbrFm5F23fs5dc5D5iq IQa7i/0j7ns0a+tP/vq/2V1TrP7dbZ/1HxOGGbfqnFPp4YHTWLzoX3lIdPWbceQx vxCtV/6S8dv0GEAKv43tVApo+5FU7cLt40iXQVUsGVQjfNHep4W9qGksQKke12HS 3UythrajHFyeUpK7TWnW+i8nDYGxMukXfdGKIN0H+r+5oduoVx7uZ1Hlm69vH+bj pRPGek64MCSd2WndruaPb4seE9oCljYMHEulh9mSTGfb3e9jWumOJy5/YFhWzpLB jPa6yKWpaHIyUrGuoPoTJRfRjY17vCnoh6c7PAsA14mtnDrvpkQqUA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:13 2026 by rpki-client