This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer (raw, json) Hash identifier: xgbUySlDVIdvlfby2beVDXyd1jJhWhvR5f4h29/zqts= Subject key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5027A02E90143ACE62C69D4ED059 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203754 IP: 185.124.204.0/22 IP: 2a0a:5f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:27:a0:2e:90:14:3a:ce:62:c6:9d:4e:d0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62117a1e6f699c322b6b983494f42c2209127553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:91:9c:90:80:be:cf:e0:c8:f3:ab:6a:4d: 76:95:db:7e:79:7e:b5:9b:77:bf:8d:58:0a:64:6f: f7:6e:b3:be:d8:79:3a:54:47:b5:17:07:34:91:a7: 28:0c:03:03:ea:e0:a5:b1:4c:86:e0:c2:ad:67:24: 1d:0c:43:a3:9c:e1:90:15:2c:c4:00:3d:24:c2:a0: 33:a7:e1:9b:51:c1:0f:56:d9:ca:a5:79:b7:da:89: e3:ef:fc:95:99:91:c4:4e:8f:99:02:32:48:7d:22: e2:90:65:15:34:46:39:5e:68:13:4a:73:6b:a9:33: 28:e3:5d:05:83:f5:d7:42:0a:13:20:1e:31:90:24: db:a9:82:0b:0a:04:d4:53:15:82:ed:7d:fb:0b:0a: c4:c4:75:f5:fc:cb:cc:23:b4:39:bd:0a:9e:3f:5c: dc:c0:d9:f1:61:c8:b0:bd:75:3b:10:25:e4:54:be: e2:53:36:18:a3:b5:92:49:5f:23:95:e4:7b:e9:d0: 03:08:3a:a1:7c:96:d7:e8:d2:bc:11:be:2e:ae:01: 41:db:15:d7:23:3c:9a:6a:23:a7:57:25:d5:df:da: 1a:5a:5d:4c:55:b6:00:91:12:6e:53:53:f6:17:ae: 9c:85:ee:02:63:62:f8:95:92:91:af:9c:79:46:33: 5b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.204.0/22 IPv6: 2a0a:5f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203754 Signature Algorithm: sha256WithRSAEncryption ad:cb:55:86:5e:dc:ae:23:cc:c9:ee:56:ba:a5:b7:de:55:1e: 76:45:17:40:48:6c:b3:d9:4f:26:6d:62:8e:30:3a:8d:1a:4a: 1e:42:c0:20:4e:9f:ff:68:c2:ff:6e:d4:fd:31:77:b9:e8:a2: d3:d2:d9:ab:8c:9c:ae:30:c0:fb:e5:d4:04:be:f5:43:d7:ed: ee:0b:79:5d:87:7b:cc:53:e0:95:75:16:a1:43:53:13:06:5f: e4:0f:43:6f:8a:de:11:c9:5c:e3:00:cf:ff:df:db:39:fd:6d: a8:05:ae:73:4c:e2:37:3a:e2:3d:66:f8:14:1e:8d:cc:64:9a: 69:8b:8e:3d:b2:42:d0:4d:a8:d7:c8:d0:96:5c:d6:ee:fa:72: f2:c2:0f:83:fc:f8:db:b1:08:82:57:75:3e:df:c8:85:d4:12: 7f:ee:dd:f6:63:86:ee:30:ce:54:81:57:d8:0f:6b:f2:21:dc: 41:90:88:b6:96:25:2c:d7:43:cd:2c:f3:97:93:66:e3:56:fd: e7:42:31:ef:c9:6b:fd:8a:86:ef:9c:f1:78:80:02:76:f4:43: 81:28:79:cb:42:c2:86:5c:60:17:df:6e:d9:c5:f4:5b:a3:64: 73:1f:1c:9c:e8:0c:8a:9d:d1:b1:dd:a5:d9:42:63:1e:10:56: 97:02:e4:4a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57VAnoC6QFDrOYsadTtBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjExN2ExZTZmNjk5YzMyMmI2Yjk4MzQ5NGY0MmMyMjA5MTI3NTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFiRnJCAvs/gyPOrak12ldt+eX61 m3e/jVgKZG/3brO+2Hk6VEe1Fwc0kacoDAMD6uClsUyG4MKtZyQdDEOjnOGQFSzE AD0kwqAzp+GbUcEPVtnKpXm32onj7/yVmZHETo+ZAjJIfSLikGUVNEY5XmgTSnNr qTMo410Fg/XXQgoTIB4xkCTbqYILCgTUUxWC7X37CwrExHX1/MvMI7Q5vQqeP1zc wNnxYciwvXU7ECXkVL7iUzYYo7WSSV8jleR76dADCDqhfJbX6NK8Eb4urgFB2xXX IzyaaiOnVyXV39oaWl1MVbYAkRJuU1P2F66che4CY2L4lZKRr5x5RjNbhwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGIReh5vaZwyK2uYNJT0LCIJEnVTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzcwZWUy MS1kOTNmLTRhNzEtODQ3NC01YmNjODQ1OGFhMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNzBlZTIx LWQ5M2YtNGE3MS04NDc0LTViY2M4NDU4YWEyYy8xL1loRjZIbTlwbkRJcmE1ZzBs UFFzSWdrU2RWTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXzMMA0EAgACMAcDBQMqCl8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMb6jANBgkqhkiG9w0BAQsFAAOCAQEArctVhl7criPM ye5WuqW33lUedkUXQEhss9lPJm1ijjA6jRpKHkLAIE6f/2jC/27U/TF3ueii09LZ q4ycrjDA++XUBL71Q9ft7gt5XYd7zFPglXUWoUNTEwZf5A9Db4reEclc4wDP/9/b Of1tqAWuc0ziNzriPWb4FB6NzGSaaYuOPbJC0E2o18jQllzW7vpy8sIPg/z427EI gld1Pt/IhdQSf+7d9mOG7jDOVIFX2A9r8iHcQZCItpYlLNdDzSzzl5Nm41b950Ix 78lr/YqG75zxeIACdvRDgSh5y0LChlxgF99u2cX0W6Nkcx8cnOgMip3Rsd2l2UJj HhBWlwLkSg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:47 2026 by rpki-client