This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer (raw, json) Hash identifier: +zuG7y7huy5Q7oJcIDDjrzSZ5Fh9CqDd8HKzzRZHqAc= Subject key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12738380A950C138BFBB5E6C9D1FDD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48419 IP: 91.209.150.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:73:83:80:a9:50:c1:38:bf:bb:5e:6c:9d:1f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6238410338e21e8eab94119d80e41a3958491de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:43:33:f6:1a:3b:74:21:cc:b9:5d:61:13:3b: 77:0a:6f:e3:73:c8:c1:0b:a5:e5:79:09:f8:ba:43: d8:61:4e:15:bf:d7:ff:78:c1:5a:77:f7:9f:c6:d1: 6c:ba:c8:99:11:ee:26:c2:5b:28:92:0a:dc:72:c7: 94:dd:81:19:41:6a:5f:93:0a:fd:53:13:80:fc:4f: 2c:3b:66:4f:2d:b8:f0:d0:da:f8:38:26:b1:d2:4a: 04:6c:d8:95:f2:a0:f1:8e:0a:bb:d0:e4:41:0d:f1: 0c:e1:8f:07:6a:5e:bc:55:12:20:4d:32:f4:d3:80: a1:6e:1b:06:a9:9a:37:7f:1d:b5:de:5f:88:3b:47: 0f:10:ac:73:b3:35:ac:98:b5:4c:c3:3d:7e:47:1d: 88:68:a9:b2:7a:fc:b3:1f:85:95:7d:39:1c:2a:ed: 22:4c:5a:b7:c2:7e:7f:f2:cf:40:5c:c8:6d:1f:32: a7:b6:1a:a6:09:58:5f:1b:c6:2a:96:52:d0:11:3f: 02:bc:f0:14:5c:0f:8e:23:97:6e:4c:c3:cb:77:29: cd:42:74:3c:0e:7b:fb:0e:9e:7d:1d:b5:59:17:a9: 1b:ec:e2:94:2f:5c:ff:bc:e4:a1:96:45:39:a8:d0: 10:53:00:5b:1c:ad:61:58:6f:91:bd:44:0d:6e:c6: a5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.150.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48419 Signature Algorithm: sha256WithRSAEncryption 7a:04:48:21:78:c9:43:40:87:a3:d6:dc:b9:cd:9e:47:b8:8b: b5:0d:ca:f8:8d:5e:f9:e7:32:f7:cc:eb:e5:70:2e:ae:a7:4b: 80:2c:56:48:4e:32:54:25:29:d6:31:ff:d0:4f:e0:24:b5:47: 98:10:be:6d:2b:77:4f:65:f8:93:23:9b:b7:5d:cf:a4:2a:6d: 59:6e:dc:d3:22:19:0b:ce:a3:29:1b:b2:85:16:fe:07:79:30: c8:0a:56:47:e4:3f:c5:48:ca:03:34:fc:e8:16:0d:fc:14:c6: 34:1a:0b:13:aa:4d:8f:ae:8c:1b:96:db:04:7a:e3:1b:f5:16: 6f:64:7e:74:8f:82:f2:bb:bc:25:8a:85:68:74:ce:18:3c:aa: 9a:b1:ae:63:83:ff:bd:56:ad:a5:b7:ca:2a:86:62:af:6e:76: c4:18:b6:18:ba:6d:61:fb:80:c3:be:d1:06:77:02:10:95:ec: dd:c5:73:3b:8f:06:a0:5b:8e:2b:0d:7e:9b:54:a0:15:5b:f6: 6b:df:84:4e:b9:9d:bb:0c:f0:d4:9e:87:3e:80:07:e5:77:39: e3:d5:d9:df:fd:09:7b:ad:7a:d5:f7:0c:79:5d:d3:2f:c3:77: 77:f1:f7:b2:49:96:7c:fa:8f:96:e0:eb:31:03:f1:cd:54:47: c9:99:66:a6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EnODgKlQwTi/u15snR/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjM4NDEwMzM4ZTIxZThlYWI5NDExOWQ4MGU0MWEzOTU4NDkxZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUMz9ho7dCHMuV1hEzt3Cm/jc8jB C6XleQn4ukPYYU4Vv9f/eMFad/efxtFsusiZEe4mwlsokgrccseU3YEZQWpfkwr9 UxOA/E8sO2ZPLbjw0Nr4OCax0koEbNiV8qDxjgq70ORBDfEM4Y8Hal68VRIgTTL0 04ChbhsGqZo3fx213l+IO0cPEKxzszWsmLVMwz1+Rx2IaKmyevyzH4WVfTkcKu0i TFq3wn5/8s9AXMhtHzKnthqmCVhfG8YqllLQET8CvPAUXA+OI5duTMPLdynNQnQ8 Dnv7Dp59HbVZF6kb7OKUL1z/vOShlkU5qNAQUwBbHK1hWG+RvUQNbsalNwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGI4QQM44h6Oq5QRnYDkGjlYSR3mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzVhNDUy Ni04OWZjLTQ2NDAtOTAxZC0xM2E1OGViOWQ4ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvNWE0NTI2 LTg5ZmMtNDY0MC05MDFkLTEzYTU4ZWI5ZDhmNS8xL1lqaEJBemppSG82cmxCR2Rn T1FhT1ZoSkhlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9GWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC9IzANBgkqhkiG9w0BAQsFAAOCAQEAegRIIXjJQ0CHo9bcuc2eR7iLtQ3K+I1e +ecy98zr5XAurqdLgCxWSE4yVCUp1jH/0E/gJLVHmBC+bSt3T2X4kyObt13PpCpt WW7c0yIZC86jKRuyhRb+B3kwyApWR+Q/xUjKAzT86BYN/BTGNBoLE6pNj66MG5bb BHrjG/UWb2R+dI+C8ru8JYqFaHTOGDyqmrGuY4P/vVatpbfKKoZir252xBi2GLpt YfuAw77RBncCEJXs3cVzO48GoFuOKw1+m1SgFVv2a9+ETrmduwzw1J6HPoAH5Xc5 49XZ3/0Je6161fcMeV3TL8N3d/H3skmWfPqPluDrMQPxzVRHyZlmpg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:26 2026 by rpki-client