This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer File: Yonrndlo7aSnlWTC4GpoOEIpegQ.cer (raw, json) Hash identifier: +BYZV2cDAQKj32jRs8aXMP8ckjyI5eD7hQmLYAwN9W8= Subject key identifier: 62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75B73603C5E78123379A1AC9B9C85 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 4455 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5b:73:60:3c:5e:78:12:33:79:a1:ac:9b:9c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6289eb9dd968eda4a79564c2e06a683842297a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:7e:78:aa:ee:a1:12:25:51:25:20:05:a5: 31:e4:3e:25:f0:24:c4:93:f9:ab:ef:02:d7:be:db: e9:f1:2f:04:6c:f3:17:88:d1:3c:2e:86:29:30:ae: 95:cd:96:dd:ee:71:a8:43:42:10:de:30:33:e7:f5: 80:e1:1e:21:9a:9e:8e:a1:a9:9e:bd:3c:02:17:64: ae:3f:0c:d9:fb:8d:0d:93:ae:20:6a:ef:63:9c:41: 10:88:cf:99:46:a9:e2:f7:ee:07:4c:b9:43:3a:a7: 5c:72:ff:f6:72:0b:d3:a0:6d:1d:70:7e:3b:8d:4e: a0:46:39:49:a5:78:c8:28:f3:66:c7:70:cb:23:4b: aa:25:87:81:e3:52:de:68:93:97:dc:7e:3f:2d:0d: 52:8f:9c:e7:f4:1a:eb:a4:5e:31:69:c3:56:d2:0d: bb:18:3c:c6:3c:a1:b5:80:a5:5f:1c:78:4c:63:21: b2:1c:f5:f9:40:f9:40:80:17:8d:0b:4b:57:2b:21: 6e:44:24:d3:7e:71:05:a2:01:d2:eb:41:07:c9:79: e2:b2:a1:23:83:ea:84:e9:1c:34:b9:38:fa:71:46: 2c:85:d1:d7:42:bb:af:d3:77:32:d9:72:d0:ae:30: 93:47:f7:c2:91:0e:fc:5f:b8:47:f4:f9:db:18:b4: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 4455 Signature Algorithm: sha256WithRSAEncryption 05:5b:c0:9d:2e:1a:e1:df:9e:44:8f:43:eb:5f:28:a3:8f:0e: 22:0b:f6:4d:be:99:35:ca:d6:6c:08:53:7d:51:5b:1a:0c:51: 05:ed:fa:d9:dd:41:6f:80:0a:f1:2c:78:22:8e:9b:81:bf:09: f0:d7:87:bb:bf:23:5c:88:7b:94:c1:2d:de:a4:6d:09:8f:46: f9:8d:96:9a:d9:8f:58:9c:f6:92:c6:d8:5f:8e:c4:54:1e:01: 54:8c:b2:fa:81:84:7b:aa:e0:31:c2:5c:43:28:5c:46:1b:e5: 50:e8:c9:ed:f6:fd:ed:b9:af:97:55:b4:da:4a:91:57:63:fe: f8:21:7e:f6:3f:69:8d:a7:c2:76:ef:10:90:e0:48:a2:16:96: c7:6b:cb:b4:0d:e4:a2:9f:39:e2:9f:19:05:ae:3f:a4:75:97: 00:e2:de:35:82:61:a2:62:3e:21:c4:70:81:61:3b:26:a5:0f: ea:26:b0:64:77:90:26:4a:1a:e1:40:ba:9c:09:03:4d:2d:76: 45:f8:2e:96:16:a2:1f:d5:93:16:de:44:2f:f0:29:72:54:59: 7f:7a:18:7a:d2:68:94:ee:98:51:60:13:3e:f1:68:d0:52:ab: 84:24:b5:f1:7a:d3:f2:13:70:a5:01:3b:58:cc:ba:cf:02:a8: 8f:9a:72:1d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt3x1tzYDxeeBIzeaGsm5yFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjg5ZWI5ZGQ5NjhlZGE0YTc5NTY0YzJlMDZhNjgzODQyMjk3YTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/x+eKruoRIlUSUgBaUx5D4l8CTE k/mr7wLXvtvp8S8EbPMXiNE8LoYpMK6VzZbd7nGoQ0IQ3jAz5/WA4R4hmp6Ooame vTwCF2SuPwzZ+40Nk64gau9jnEEQiM+ZRqni9+4HTLlDOqdccv/2cgvToG0dcH47 jU6gRjlJpXjIKPNmx3DLI0uqJYeB41LeaJOX3H4/LQ1Sj5zn9BrrpF4xacNW0g27 GDzGPKG1gKVfHHhMYyGyHPX5QPlAgBeNC0tXKyFuRCTTfnEFogHS60EHyXnisqEj g+qE6Rw0uTj6cUYshdHXQruv03cy2XLQrjCTR/fCkQ78X7hH9PnbGLTIEQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFGKJ653ZaO2kp5VkwuBqaDhCKXoEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzVlN2Rj OC03YmY1LTQwMzMtOTA5Mi1mYzdlYjk5MWRiNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNWU3ZGM4 LTdiZjUtNDAzMy05MDkyLWZjN2ViOTkxZGI0MC8xL1lvbnJuZGxvN2FTbmxXVEM0 R3BvT0VJcGVnUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhFnMA0GCSqGSIb3DQEBCwUAA4IBAQAFW8CdLhrh355E j0PrXyijjw4iC/ZNvpk1ytZsCFN9UVsaDFEF7frZ3UFvgArxLHgijpuBvwnw14e7 vyNciHuUwS3epG0Jj0b5jZaa2Y9YnPaSxthfjsRUHgFUjLL6gYR7quAxwlxDKFxG G+VQ6Mnt9v3tua+XVbTaSpFXY/74IX72P2mNp8J27xCQ4EiiFpbHa8u0DeSinzni nxkFrj+kdZcA4t41gmGiYj4hxHCBYTsmpQ/qJrBkd5AmShrhQLqcCQNNLXZF+C6W FqIf1ZMW3kQv8ClyVFl/ehh60miU7phRYBM+8WjQUquEJLXxetPyE3ClATtYzLrP AqiPmnId -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:25 2026 by rpki-client