This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer (raw, json) Hash identifier: kKlUbmE6tLufjWRVi2R89kyEJj0W7Eq0LNfIzfHeIwg= Subject key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1283C9A2759FF211373A9789276CBA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.220.173.0/24 IP: 2a06:22c0::/29 IP: 2a09:6940::/29 IP: 2a09:c840::/29 IP: 2a09:d480::/29 IP: 2a0c:36c0::/29 IP: 2a0d:cfc0::/29 IP: 2a0e:4c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:83:c9:a2:75:9f:f2:11:37:3a:97:89:27:6c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:a8:5d:e8:d7:eb:28:d3:50:03:02:40:66: 90:bb:50:fe:af:b1:38:2d:b3:2a:5c:4c:d6:06:db: 11:20:fc:67:ed:54:c9:68:87:8b:5c:9d:68:37:f2: 81:02:14:be:ac:ce:51:d2:d7:33:35:db:75:6b:f1: bf:9e:1e:ce:13:28:0a:0d:5b:8e:41:b6:0f:ed:8d: ef:4a:ac:c8:cc:4b:a9:32:f7:22:f9:df:cc:48:59: 0e:64:23:24:bb:b3:b9:f4:b8:d1:8c:ba:58:4d:3d: 58:d5:96:45:14:1d:29:8a:e6:3b:a2:32:44:29:fc: d1:d2:0c:ed:30:25:62:a3:f6:7b:6e:fb:13:51:1e: 89:1f:43:c0:63:82:41:6e:14:d9:21:95:a8:34:f4: 23:c6:98:37:d5:16:59:10:cb:5b:6f:90:32:6c:2e: 90:cd:14:c3:3f:08:d3:d3:f8:17:b7:89:5b:45:90: 1e:fc:9c:9c:49:fc:bb:da:af:d8:0a:bf:3c:b7:02: c3:67:bc:3a:38:fa:aa:db:5f:52:38:2e:12:33:f3: 24:3e:e4:7f:bc:31:b4:b0:53:04:99:a7:80:cd:c3: 09:5c:37:53:77:3a:1d:c1:1f:73:3b:f6:87:d5:4d: cf:e1:25:2c:5e:28:5e:04:47:db:74:17:1d:06:0a: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.173.0/24 IPv6: 2a06:22c0::/29 2a09:6940::/29 2a09:c840::/29 2a09:d480::/29 2a0c:36c0::/29 2a0d:cfc0::/29 2a0e:4c00::/29 Signature Algorithm: sha256WithRSAEncryption ac:88:28:a4:cc:c6:5a:64:de:1f:3d:aa:41:bc:cf:88:69:c3: 30:dd:dc:45:c5:14:b5:2e:a7:d8:0b:bb:c9:30:d7:d8:21:ae: 24:e4:58:1d:33:4f:91:88:76:6e:f6:4f:fd:18:15:bc:72:17: 49:47:3a:3a:26:b4:dd:c2:21:41:ba:a1:03:6d:6b:02:ef:93: 3f:95:16:79:c9:04:42:31:67:a9:38:ad:a8:d7:74:4b:04:06: fa:7f:77:ca:05:33:0c:23:2f:78:ee:b0:ae:54:c6:ba:91:a6: 35:67:e0:38:6f:87:78:f8:ff:5c:3a:2e:6b:2f:fb:c9:f5:a6: 2c:8f:d3:13:70:b0:02:7c:d0:63:bd:2b:d3:51:20:1e:c6:2b: 21:52:5c:f9:35:16:3b:22:5f:64:ff:1c:7b:7b:68:9b:e9:c3: 55:70:0a:7c:ec:e8:23:ff:5b:c9:6e:b3:5f:e8:19:37:ee:0e: 66:37:71:62:eb:e8:dc:8c:52:b8:4c:57:fa:aa:5d:3d:c3:c1: 84:61:f4:92:4c:93:6c:0c:c9:3b:68:2d:8d:30:60:74:d7:7c: 42:fe:74:cd:42:6e:33:e4:29:62:1d:8d:13:3c:62:bc:b8:c5: 45:a6:71:5e:6c:82:d2:05:45:12:6a:f2:e1:77:df:14:55:0b: 40:98:35:ef -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt8EoPJonWf8hE3OpeJJ2y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk0ZGIwYjg3ZjZhZWVjY2U3ZmIyMmZiMWIxNDIxZDkwNmE2MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZuoXejX6yjTUAMCQGaQu1D+r7E4 LbMqXEzWBtsRIPxn7VTJaIeLXJ1oN/KBAhS+rM5R0tczNdt1a/G/nh7OEygKDVuO QbYP7Y3vSqzIzEupMvci+d/MSFkOZCMku7O59LjRjLpYTT1Y1ZZFFB0piuY7ojJE KfzR0gztMCVio/Z7bvsTUR6JH0PAY4JBbhTZIZWoNPQjxpg31RZZEMtbb5AybC6Q zRTDPwjT0/gXt4lbRZAe/JycSfy72q/YCr88twLDZ7w6OPqq219SOC4SM/MkPuR/ vDG0sFMEmaeAzcMJXDdTdzodwR9zO/aH1U3P4SUsXiheBEfbdBcdBgpSuQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFGKU2wuH9q7szn+yL7GxQh2QamNQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzUzZDFh NS05YzYxLTRmZjItYjIxYi03MGM5NTIwOWZlODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNTNkMWE1 LTljNjEtNGZmMi1iMjFiLTcwYzk1MjA5ZmU4OS8xL1lwVGJDNGYycnV6T2Y3SXZz YkZDSFpCcVkxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzAMBAIAATAGAwQAW9ytMDcEAgACMDEDBQMqBiLAAwUDKglpQAMF AyoJyEADBQMqCdSAAwUDKgw2wAMFAyoNz8ADBQMqDkwAMA0GCSqGSIb3DQEBCwUA A4IBAQCsiCikzMZaZN4fPapBvM+IacMw3dxFxRS1LqfYC7vJMNfYIa4k5FgdM0+R iHZu9k/9GBW8chdJRzo6JrTdwiFBuqEDbWsC75M/lRZ5yQRCMWepOK2o13RLBAb6 f3fKBTMMIy947rCuVMa6kaY1Z+A4b4d4+P9cOi5rL/vJ9aYsj9MTcLACfNBjvSvT USAexishUlz5NRY7Il9k/xx7e2ib6cNVcAp87Ogj/1vJbrNf6Bk37g5mN3Fi6+jc jFK4TFf6ql09w8GEYfSSTJNsDMk7aC2NMGB013xC/nTNQm4z5CliHY0TPGK8uMVF pnFebILSBUUSavLhd98UVQtAmDXv -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:53 2026 by rpki-client