This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer File: YlDmLARIEp9jWJGKccM0TiWoLZs.cer (raw, json) Hash identifier: Y/bCrX8Uaz4yVVi7tX40TqMAS5OL6Qdk1gJgZlVNlj8= Subject key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA322E9701D79B203F13EDE3C95E53F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215180 IP: 185.49.172.0/24 IP: 2a14:1e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:22:e9:70:1d:79:b2:03:f1:3e:de:3c:95:e5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6250e62c0448129f6358918a71c3344e25a82d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:33:2d:02:c8:d2:da:84:9b:bf:52:92:b7: 14:97:6b:eb:88:b3:f7:5e:32:99:cb:4d:5a:3b:eb: 46:d4:33:31:02:82:d8:52:4e:fd:a2:c2:5d:4a:25: 62:ea:02:1c:24:31:b7:4d:a4:c0:ed:4e:b0:b2:79: 6c:b7:ee:2c:21:fb:65:4c:3d:d5:2e:51:34:b4:c7: 3b:a1:ca:2e:36:4c:62:00:bb:85:4e:97:21:de:15: 9e:cb:6c:5e:db:98:93:a8:f6:ec:b2:af:a8:c4:78: f2:30:b0:a6:0c:19:63:50:32:58:83:98:2b:1a:d3: 0c:34:09:e8:19:7e:9c:61:2a:af:56:1a:ac:4c:f6: 1f:1a:0d:fd:7f:2b:b6:d4:72:56:e1:7c:d7:37:1e: 7c:16:6c:60:22:b8:62:83:5a:00:46:5d:ef:49:78: 85:f2:25:6d:8d:f6:65:d8:32:3d:b6:20:ec:4e:a1: 97:8c:c5:db:5e:b7:bb:c5:73:e2:1f:ef:57:31:c1: af:fa:ac:6e:47:c9:9f:f6:f0:00:ee:ef:8d:a9:93: 74:aa:93:85:c0:ca:65:16:33:32:dc:e6:1c:5e:9a: 55:fc:1e:73:9d:69:12:1c:3e:70:08:80:c7:69:ca: 9f:b4:43:72:fe:bc:fe:ae:f6:68:ff:4b:f6:12:f5: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.172.0/24 IPv6: 2a14:1e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215180 Signature Algorithm: sha256WithRSAEncryption 15:f9:cf:63:ce:d5:04:b4:9d:01:67:3e:4a:68:35:f3:dd:2f: 22:35:21:64:c7:7e:df:59:a4:18:f1:4b:3a:18:f2:04:2b:6d: ba:ef:2c:fb:1b:58:74:4b:9a:b2:07:26:08:3e:74:1b:2f:0e: 3a:09:2e:ea:2c:60:3b:83:d7:ed:d7:19:79:a2:52:8f:8e:4f: e3:f1:33:eb:f7:f1:d9:f0:88:bb:49:a1:67:04:65:12:5f:0a: 0f:e6:08:f1:be:b6:00:1a:9f:6c:2f:1a:aa:33:94:98:49:aa: a2:3b:cf:4d:3c:af:bc:fd:41:af:2b:38:f1:b3:ba:22:b5:ee: 30:01:9b:da:c0:37:47:0f:c0:f0:54:c6:60:f1:e1:37:e4:fd: 46:b9:54:64:f6:94:c1:f9:0e:7c:4b:29:2c:62:07:0e:60:11: 5e:40:93:53:f9:8a:23:e9:8d:83:14:73:cc:3d:0d:9a:23:ff: 44:6f:a7:b8:81:34:98:64:b6:8f:f9:5d:55:b0:c3:94:1d:99: d8:4e:ed:86:f8:fd:18:2c:ba:40:d8:7f:f9:ce:8b:e0:47:b0: 68:c7:aa:4a:de:4c:4f:42:07:cd:00:25:2d:44:2f:71:bf:52: 38:68:25:56:e3:d2:dc:39:9c:12:0c:ad:13:97:c8:3f:a0:4d: 4b:99:79:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7oyLpcB15sgPxPt48leU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjUwZTYyYzA0NDgxMjlmNjM1ODkxOGE3MWMzMzQ0ZTI1YTgyZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWUzLQLI0tqEm79SkrcUl2vriLP3 XjKZy01aO+tG1DMxAoLYUk79osJdSiVi6gIcJDG3TaTA7U6wsnlst+4sIftlTD3V LlE0tMc7ocouNkxiALuFTpch3hWey2xe25iTqPbssq+oxHjyMLCmDBljUDJYg5gr GtMMNAnoGX6cYSqvVhqsTPYfGg39fyu21HJW4XzXNx58FmxgIrhig1oARl3vSXiF 8iVtjfZl2DI9tiDsTqGXjMXbXre7xXPiH+9XMcGv+qxuR8mf9vAA7u+NqZN0qpOF wMplFjMy3OYcXppV/B5znWkSHD5wCIDHacqftENy/rz+rvZo/0v2EvWXJwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGJQ5iwESBKfY1iRinHDNE4lqC2bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzAxODZh Mi1mOGFhLTQxZDgtOWE0ZS04NzI2ZGQ4OGY1MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMDE4NmEy LWY4YWEtNDFkOC05YTRlLTg3MjZkZDg4ZjUyOS8xL1lsRG1MQVJJRXA5aldKR0tj Y00wVGlXb0xacy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuTGsMA0EAgACMAcDBQMqFB5AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNIjDANBgkqhkiG9w0BAQsFAAOCAQEAFfnPY87VBLSd AWc+Smg1890vIjUhZMd+31mkGPFLOhjyBCttuu8s+xtYdEuasgcmCD50Gy8OOgku 6ixgO4PX7dcZeaJSj45P4/Ez6/fx2fCIu0mhZwRlEl8KD+YI8b62ABqfbC8aqjOU mEmqojvPTTyvvP1Brys48bO6IrXuMAGb2sA3Rw/A8FTGYPHhN+T9RrlUZPaUwfkO fEspLGIHDmARXkCTU/mKI+mNgxRzzD0NmiP/RG+nuIE0mGS2j/ldVbDDlB2Z2E7t hvj9GCy6QNh/+c6L4EewaMeqSt5MT0IHzQAlLUQvcb9SOGglVuPS3DmcEgytE5fI P6BNS5l5yw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:32 2026 by rpki-client