This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer (raw, json) Hash identifier: Dgu5bu3kEWwUoYKkgn6qVj8gEROZ2c6kPOp5rpDPItY= Subject key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC925F9C2A6818FA826F4FBC16F3A65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38938 IP: 91.240.164.0/24 IP: 185.41.108.0/22 IP: 193.33.58.0/23 IP: 2a04:8900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:25:f9:c2:a6:81:8f:a8:26:f4:fb:c1:6f:3a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:1b:95:15:eb:b8:93:88:1e:23:dd:09:f3: 23:41:e8:74:c3:ac:56:e5:68:ee:55:40:08:c2:d6: f1:bf:e2:af:97:c4:ee:2b:a8:e6:cb:16:5b:be:d8: d7:3d:9e:07:1f:d4:e6:bc:7e:62:02:28:a3:74:33: 1b:71:b3:4f:a5:39:7c:de:bb:0b:e2:db:f2:75:e9: f1:63:c8:03:24:8c:1f:b6:f9:16:a4:51:9f:fa:c8: 11:ef:3d:ea:12:c3:b6:6d:2d:19:f0:7d:b3:44:e4: a8:2b:e8:f1:bb:a3:41:64:c5:63:d4:1b:cc:be:5c: 76:7b:40:f7:44:e6:ce:a1:c4:cf:b8:3a:51:17:49: c9:5d:07:75:b1:4f:70:78:c7:d5:8d:fc:3e:6c:82: c2:0b:42:28:1d:f7:89:17:75:47:2f:a1:4e:8a:29: 6c:45:83:63:e5:b1:0d:2e:f7:ba:a9:4c:1d:b4:94: 87:6d:c8:db:fa:77:16:40:3e:0d:b7:d2:9b:43:be: f4:91:5e:24:e7:2c:54:3a:17:8f:28:4f:ff:c9:14: 95:00:5a:85:1e:fc:76:c4:39:a4:a2:17:52:a3:7f: b2:c6:97:3a:14:fd:50:0d:6a:b4:e9:71:eb:f8:90: 8a:ef:0d:b9:68:03:69:68:aa:04:a6:ca:6d:5c:ba: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.164.0/24 185.41.108.0/22 193.33.58.0/23 IPv6: 2a04:8900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38938 Signature Algorithm: sha256WithRSAEncryption 62:3a:a2:07:67:f1:2f:a3:4b:17:33:b4:65:a4:f5:2a:11:d6: 0c:c6:a6:ac:69:fa:df:1b:2b:34:16:31:b6:32:ac:79:9b:b8: c0:0d:34:0a:b3:44:39:d5:f5:f1:03:3a:fd:6f:b4:ff:9b:fa: b0:ca:ba:3b:87:51:7e:3b:ed:d4:b9:c4:80:6e:db:5f:ed:52: 62:6f:1d:41:05:98:54:1e:96:88:e4:00:eb:09:7d:e1:33:18: e0:be:7b:a5:b9:6a:99:36:5c:df:e5:41:99:33:54:64:ef:ec: ba:2d:d4:14:96:f4:d4:cc:5b:e2:45:1b:b8:73:f0:b4:17:ef: 77:07:15:a4:89:06:49:9a:67:68:86:f6:a6:35:df:37:b3:95: ea:98:bf:b3:39:6f:b0:7c:d4:2b:87:fe:79:de:68:96:ab:00: eb:dd:28:bb:65:79:51:c8:a9:05:d2:78:c4:1b:d0:ee:47:e1: 78:98:e1:00:18:9d:63:8e:7b:b4:1d:2d:15:41:58:3d:cf:7b: 56:19:f4:f4:26:5f:62:18:54:84:7c:cf:71:4d:2a:fb:52:50: 79:dc:86:bb:f1:ab:65:ff:e3:03:14:2e:e4:95:fb:93:82:33: ce:7f:df:08:9c:d1:9f:20:b8:ad:56:12:99:2c:c0:73:6c:1f: 84:bf:ad:0a -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6ySX5wqaBj6gm9PvBbzplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWNlMmU1N2Y2Zjg2MmNhMzA1NmU1ZmQ1YjNlNmVhYzM1NTQwNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PQblRXruJOIHiPdCfMjQeh0w6xW 5WjuVUAIwtbxv+Kvl8TuK6jmyxZbvtjXPZ4HH9TmvH5iAiijdDMbcbNPpTl83rsL 4tvydenxY8gDJIwftvkWpFGf+sgR7z3qEsO2bS0Z8H2zROSoK+jxu6NBZMVj1BvM vlx2e0D3RObOocTPuDpRF0nJXQd1sU9weMfVjfw+bILCC0IoHfeJF3VHL6FOiils RYNj5bENLve6qUwdtJSHbcjb+ncWQD4Nt9KbQ770kV4k5yxUOhePKE//yRSVAFqF Hvx2xDmkohdSo3+yxpc6FP1QDWq06XHr+JCK7w25aANpaKoEpsptXLrEYwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFGHOLlf2+GLKMFbl/Vs+bqw1VAQBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4Lzg3NjIw My1lOGZkLTQ3MmYtYWZjMi05OTAzODU1NTlkMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvODc2MjAz LWU4ZmQtNDcyZi1hZmMyLTk5MDM4NTU1OWQxYy8xL1ljNHVWX2I0WXNvd1Z1WDlX ejV1ckRWVUJBRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW/CkAwQCuSlsAwQBwSE6MA0EAgACMAcDBQMq BIkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYGjANBgkqhkiG9w0BAQsFAAOC AQEAYjqiB2fxL6NLFzO0ZaT1KhHWDMamrGn63xsrNBYxtjKseZu4wA00CrNEOdX1 8QM6/W+0/5v6sMq6O4dRfjvt1LnEgG7bX+1SYm8dQQWYVB6WiOQA6wl94TMY4L57 pblqmTZc3+VBmTNUZO/sui3UFJb01Mxb4kUbuHPwtBfvdwcVpIkGSZpnaIb2pjXf N7OV6pi/szlvsHzUK4f+ed5olqsA690ou2V5UcipBdJ4xBvQ7kfheJjhABidY457 tB0tFUFYPc97Vhn09CZfYhhUhHzPcU0q+1JQedyGu/GrZf/jAxQu5JX7k4Izzn/f CJzRnyC4rVYSmSzAc2wfhL+tCg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:11 2026 by rpki-client