This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer File: YmC2AROb4BNWnr-OG-taaUuch-w.cer (raw, json) Hash identifier: AkQpYacl6Xs6xoALublW4kqzI6waipNElVIlBxejFGg= Subject key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED16CAD4AD9CC4D8E6CCC42B56A60B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.203.116.0/22 IP: 195.5.174.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:16:ca:d4:ad:9c:c4:d8:e6:cc:c4:2b:56:a6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6260b601139be013569ebf8e1beb5a694b9c87ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1d:26:6c:83:9d:45:51:1b:48:35:cb:66:62: a1:1a:ce:da:32:20:28:08:9a:48:77:0f:1e:28:13: 3e:82:bc:7f:57:75:1b:38:d2:50:78:01:05:94:ec: e3:0a:72:35:77:d1:4d:9d:34:7a:72:ac:8a:f7:ae: 57:f7:ff:62:c4:96:8a:bd:64:94:11:27:59:8c:ab: 9b:f2:f9:ca:7f:f4:dd:4e:41:e9:42:d3:b1:af:1d: 63:40:ec:2b:05:52:d6:1b:47:d3:23:a0:5f:0d:5e: cb:3c:8f:c8:5d:58:b1:de:5d:fa:c1:5e:cb:75:4e: 6a:d5:c9:24:1d:00:7b:49:ae:a4:7e:ce:d1:01:aa: fe:35:36:9d:97:c5:32:4f:1b:09:93:ae:67:fe:39: 77:46:2b:78:80:3d:05:bb:29:3d:97:d5:99:af:15: dd:f8:5d:5e:2b:13:7c:95:0d:bd:1f:1c:eb:02:09: 35:d1:00:49:a8:7a:57:3f:3c:04:a2:93:d5:c1:c7: cd:a6:9f:23:73:94:58:46:dd:8e:ea:a3:bc:f7:75: e2:c1:d0:5d:00:a9:91:9f:1e:33:95:5d:5c:26:77: ce:fe:f1:42:bd:94:fe:45:64:f2:9c:a2:ac:8e:24: 84:3f:67:7d:27:1e:4e:6e:53:a5:bb:be:52:26:21: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.116.0/22 195.5.174.0/24 Signature Algorithm: sha256WithRSAEncryption 63:17:c8:b5:0e:34:f3:f4:33:01:22:76:6b:c0:76:07:90:82: 0f:79:69:75:98:e5:b8:4d:6c:b8:a7:f3:d3:e5:33:4e:10:98: dc:67:16:9d:48:ad:fe:db:43:05:a2:19:32:02:10:d9:65:2e: c9:35:5a:65:66:58:b6:78:e0:60:a2:8b:bb:2b:d8:a0:4a:24: dc:cd:37:55:48:03:1c:73:d7:1d:69:2c:03:0a:e0:0c:ff:3f: 7c:c3:c2:f8:13:f5:ba:f8:d9:f4:da:b8:4b:d4:60:1c:7d:99: 7a:11:82:a7:de:62:35:4e:ea:7e:c1:95:ab:1d:e7:48:5d:39: 7f:bb:e1:41:d1:ae:42:9a:43:10:8b:de:52:de:23:1a:be:1a: 23:f8:f3:cf:41:8c:dd:d2:38:46:64:2f:91:3f:4e:19:f0:1b: df:14:12:be:54:38:43:56:0e:05:08:3a:5f:d2:da:0e:56:fb: 89:8d:f7:d5:8c:b5:b6:7f:f1:17:7b:21:ba:61:39:0d:55:a8: ed:2e:e6:14:ef:43:1c:0b:b4:d8:e0:19:0b:0b:7f:b0:ef:6c: f0:14:a0:78:13:a0:2b:03:f9:a4:2f:8d:ae:d5:62:2f:e2:b2: 18:65:00:2b:e2:4d:1c:c1:6a:64:2c:c1:98:7a:c8:c5:e3:41: f6:8f:3e:3d -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt57RbK1K2cxNjmzMQrVqYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjYwYjYwMTEzOWJlMDEzNTY5ZWJmOGUxYmViNWE2OTRiOWM4N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx0mbIOdRVEbSDXLZmKhGs7aMiAo CJpIdw8eKBM+grx/V3UbONJQeAEFlOzjCnI1d9FNnTR6cqyK965X9/9ixJaKvWSU ESdZjKub8vnKf/TdTkHpQtOxrx1jQOwrBVLWG0fTI6BfDV7LPI/IXVix3l36wV7L dU5q1ckkHQB7Sa6kfs7RAar+NTadl8UyTxsJk65n/jl3Rit4gD0Fuyk9l9WZrxXd +F1eKxN8lQ29HxzrAgk10QBJqHpXPzwEopPVwcfNpp8jc5RYRt2O6qO893XiwdBd AKmRnx4zlV1cJnfO/vFCvZT+RWTynKKsjiSEP2d9Jx5OblOlu75SJiFelQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFGJgtgETm+ATVp6/jhvrWmlLnIfsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzk5MWQz Yy1lMzM4LTQ4NjEtOGFiMS0yOWJiNmFiMmNmNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvOTkxZDNj LWUzMzgtNDg2MS04YWIxLTI5YmI2YWIyY2Y1Yy8xL1ltQzJBUk9iNEJOV25yLU9H LXRhYVV1Y2gtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8t0AwQAwwWuMA0GCSqGSIb3DQEBCwUAA4IB AQBjF8i1DjTz9DMBInZrwHYHkIIPeWl1mOW4TWy4p/PT5TNOEJjcZxadSK3+20MF ohkyAhDZZS7JNVplZli2eOBgoou7K9igSiTczTdVSAMcc9cdaSwDCuAM/z98w8L4 E/W6+Nn02rhL1GAcfZl6EYKn3mI1Tup+wZWrHedIXTl/u+FB0a5CmkMQi95S3iMa vhoj+PPPQYzd0jhGZC+RP04Z8BvfFBK+VDhDVg4FCDpf0toOVvuJjffVjLW2f/EX eyG6YTkNVajtLuYU70McC7TY4BkLC3+w72zwFKB4E6ArA/mkL42u1WIv4rIYZQAr 4k0cwWpkLMGYesjF40H2jz49 -----END CERTIFICATE-----Generated at Mon Jan 26 18:45:11 2026 by rpki-client