This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer File: YhGQEidXeAf0toyLjyX76pxyB2I.cer (raw, json) Hash identifier: tFPl0P0TPHnmolizamsPyWoNQXh7M85dwC54ZrSEvj0= Subject key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C130786BCB3243FC09E4857FACE5C75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204835 IP: 91.231.174.0/24 IP: 195.138.204.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:07:86:bc:b3:24:3f:c0:9e:48:57:fa:ce:5c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6211901227577807f4b68c8b8f25fbea9c720762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:80:90:b1:db:46:ea:0b:3b:e3:71:59:9e: 22:70:b2:f2:9f:7d:3a:28:60:98:48:ec:df:9c:55: 7c:8e:cc:e9:47:1b:72:0d:3a:bd:f4:61:b3:ad:b2: 0e:78:57:76:1f:a4:4f:e8:5c:61:c5:90:0b:1e:07: ad:68:56:5b:83:2a:71:da:ba:89:22:d6:eb:ad:74: 11:fa:9d:e2:04:0e:c4:cc:63:7c:d9:a5:fd:a5:88: 46:fc:4b:fe:6a:43:75:b0:97:fb:20:e8:18:d6:a9: f1:55:1f:78:d8:93:c5:25:0b:2b:3f:e7:2b:55:1e: f1:e7:af:d2:74:e7:0e:2f:61:6a:68:44:99:2b:67: 00:e9:35:e7:4f:56:28:c4:65:d4:67:c0:e3:81:42: 2e:cd:ea:cc:a2:71:f0:01:77:c2:a8:3b:a1:5e:99: cb:00:31:88:01:25:d5:e8:18:98:9d:6e:44:66:90: b8:46:54:12:e7:d2:57:e9:80:49:a1:d8:44:7e:b0: ca:7e:2c:fd:0f:90:62:fa:89:6e:e9:29:94:43:b1: bf:6a:d1:2b:18:3c:39:ec:1b:7b:b0:d0:a9:54:3f: a9:04:3f:d9:3f:86:10:74:4f:69:f1:b7:eb:9b:ad: dd:8f:9d:28:a4:5d:07:a2:4b:38:ce:2c:31:46:79: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.174.0/24 195.138.204.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204835 Signature Algorithm: sha256WithRSAEncryption b0:7d:46:26:8e:ba:7c:5a:4c:77:be:06:af:50:c5:cd:64:0e: 27:df:5f:3f:ba:7a:ff:27:b6:71:ef:65:ce:57:93:7c:3f:df: 39:00:ba:eb:81:ce:63:2f:d9:f6:92:47:2f:2d:26:12:5e:7d: ca:a9:af:a3:59:a1:b0:bf:d2:09:fe:58:60:fe:ec:27:18:64: 33:d8:fd:2a:c4:32:03:32:54:ab:3c:0f:c1:de:c9:0a:00:22: f3:a8:47:24:e2:fc:0d:0c:32:59:73:aa:2e:38:a2:2e:b6:b6: 4b:1a:3b:84:ef:04:71:cb:7d:4d:41:7c:1d:bb:d0:51:f5:e4: f8:7f:58:ce:ed:d0:9c:83:5c:bf:7e:02:3a:c4:6d:2a:13:63: 99:97:58:81:1c:9f:f9:f3:3d:ec:76:e3:70:3f:2f:a1:b4:b4: 40:da:fe:39:3c:9d:2d:fe:1f:4a:8c:50:e4:37:c9:5e:4d:59: b1:ec:00:fb:ee:aa:06:33:87:a3:5e:b7:0f:14:cb:1d:3d:f1: d1:99:f2:1a:6e:58:23:d0:d1:fe:4b:81:75:ee:31:03:66:5d: a3:24:49:bd:0e:80:1b:37:67:d1:6e:e2:65:63:56:95:28:4d: 13:f9:47:c9:71:ae:29:40:3a:28:e7:a1:e8:3c:58:4f:54:96: 03:62:b9:6d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8EweGvLMkP8CeSFf6zlx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjExOTAxMjI3NTc3ODA3ZjRiNjhjOGI4ZjI1ZmJlYTljNzIwNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomOAkLHbRuoLO+NxWZ4icLLyn306 KGCYSOzfnFV8jszpRxtyDTq99GGzrbIOeFd2H6RP6FxhxZALHgetaFZbgypx2rqJ ItbrrXQR+p3iBA7EzGN82aX9pYhG/Ev+akN1sJf7IOgY1qnxVR942JPFJQsrP+cr VR7x56/SdOcOL2FqaESZK2cA6TXnT1YoxGXUZ8DjgUIuzerMonHwAXfCqDuhXpnL ADGIASXV6BiYnW5EZpC4RlQS59JX6YBJodhEfrDKfiz9D5Bi+olu6SmUQ7G/atEr GDw57Bt7sNCpVD+pBD/ZP4YQdE9p8bfrm63dj50opF0Hoks4ziwxRnkHxwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGIRkBInV3gH9LaMi48l++qccgdiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2IyMTBm Ni03Y2ExLTQ3YjEtOWE1Zi03Y2ZkZDg0ZjczNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvYjIxMGY2 LTdjYTEtNDdiMS05YTVmLTdjZmRkODRmNzM0ZC8xL1loR1FFaWRYZUFmMHRveUxq eVg3NnB4eUIySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+euAwQAw4rMMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMgIzANBgkqhkiG9w0BAQsFAAOCAQEAsH1GJo66fFpMd74Gr1DFzWQO J99fP7p6/ye2ce9lzleTfD/fOQC664HOYy/Z9pJHLy0mEl59yqmvo1mhsL/SCf5Y YP7sJxhkM9j9KsQyAzJUqzwPwd7JCgAi86hHJOL8DQwyWXOqLjiiLra2Sxo7hO8E cct9TUF8HbvQUfXk+H9Yzu3QnINcv34COsRtKhNjmZdYgRyf+fM97HbjcD8vobS0 QNr+OTydLf4fSoxQ5DfJXk1ZsewA++6qBjOHo163DxTLHT3x0ZnyGm5YI9DR/kuB de4xA2ZdoyRJvQ6AGzdn0W7iZWNWlShNE/lHyXGuKUA6KOeh6DxYT1SWA2K5bQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:43 2026 by rpki-client