This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer File: YsuMEjOwFrHwSBCJc9asPnYvY-0.cer (raw, json) Hash identifier: v/J178RtxBzbtDrlIvHFl/tmpXb9ukn+cgFwQr2kzsk= Subject key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82F693F209CF3338F26838A1490ADD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44498 AS: 49906 IP: 2a02:2960::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f6:93:f2:09:cf:33:38:f2:68:38:a1:49:0a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:80:c4:83:2d:6c:e8:e0:ce:d9:e0:0d:8b: 50:cd:0d:2f:68:d2:3c:a1:42:26:ab:e4:9d:08:0e: ef:96:32:a4:99:17:73:3a:66:90:2e:ba:df:db:10: d5:56:84:ff:1a:32:54:ec:16:de:cf:b3:a3:51:0c: 7a:04:4e:12:3b:ca:fa:e8:b6:ea:33:22:6b:26:6b: fb:ed:ab:7e:43:96:ed:ff:fb:ff:4f:00:f0:d3:70: b8:b0:ce:c0:cb:02:0e:8e:a5:1d:e3:3a:98:81:e7: d9:c7:7d:44:03:31:8f:e6:54:d0:ea:49:f0:5b:24: a8:8b:38:2b:3a:0b:79:82:ff:c2:27:f6:ce:42:19: 7a:42:58:07:6e:4c:7b:ca:67:5a:09:31:74:68:b1: 17:d5:d7:06:a4:1c:d6:b6:3c:bc:17:08:ab:dd:58: 14:5e:8c:06:85:de:d0:f7:2e:c5:a9:ff:69:1f:c0: 54:70:5c:cb:0f:c1:7b:22:80:f5:37:82:c6:ec:d1: 03:58:ab:04:4a:e8:f4:ca:b7:ba:f4:b8:91:f8:2c: 87:5d:08:63:f1:d1:6e:e3:c9:aa:d6:67:20:c1:a7: f2:1c:5f:f0:7b:bb:9f:8b:dc:f3:af:a5:af:33:18: 8d:ac:82:78:0a:f4:b2:d0:0b:57:1f:d7:54:59:2b: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44498 49906 Signature Algorithm: sha256WithRSAEncryption b1:ec:7f:0a:8c:93:98:9d:df:42:1a:6f:6f:1a:3a:f0:1b:15: 53:a0:38:de:75:bc:eb:63:0d:c0:7a:20:75:03:73:e7:cd:31: 14:72:c7:1a:37:99:83:59:27:f9:c5:dc:a2:6b:19:e4:27:9a: 4d:45:cc:47:3a:9a:20:6d:bd:a6:88:84:17:d7:95:64:fa:2b: 8e:fb:47:09:a6:a0:67:80:3c:df:0d:0e:2c:28:2a:b3:1e:6c: ff:b8:fc:b1:07:95:36:57:18:bc:78:33:af:bb:2e:aa:fd:92: 9f:4b:60:be:dc:38:d1:65:99:8b:e6:c8:6d:7c:e1:78:ca:c5: 70:d4:be:1b:b5:22:df:1e:9e:f2:bc:d1:99:02:9c:8c:f3:51: 51:c1:bf:a2:03:19:3c:3c:20:ff:61:11:78:b7:2d:2b:fc:e4: 63:49:8d:d7:d1:ad:d6:ce:e7:4f:d6:54:30:b7:5f:ed:0e:3e: 51:91:5f:5b:ae:a9:ef:ad:f1:60:3f:e9:bd:e9:1f:8d:07:e4: b1:a0:5d:5e:f2:b1:5a:82:8b:49:b4:b2:f2:45:e6:25:f2:31: c7:9a:24:4a:7b:77:76:27:c2:54:45:2c:ce:1e:65:25:ac:36: c0:3b:37:98:24:a2:5d:9e:41:ea:93:25:3a:d6:7e:8a:a1:95: 51:23:59:74 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/gvaT8gnPMzjyaDihSQrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmNiOGMxMjMzYjAxNmIxZjA0ODEwODk3M2Q2YWMzZTc2MmY2M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNyAxIMtbOjgztngDYtQzQ0vaNI8 oUImq+SdCA7vljKkmRdzOmaQLrrf2xDVVoT/GjJU7Bbez7OjUQx6BE4SO8r66Lbq MyJrJmv77at+Q5bt//v/TwDw03C4sM7AywIOjqUd4zqYgefZx31EAzGP5lTQ6knw WySoizgrOgt5gv/CJ/bOQhl6QlgHbkx7ymdaCTF0aLEX1dcGpBzWtjy8Fwir3VgU XowGhd7Q9y7Fqf9pH8BUcFzLD8F7IoD1N4LG7NEDWKsESuj0yre69LiR+CyHXQhj 8dFu48mq1mcgwafyHF/we7ufi9zzr6WvMxiNrIJ4CvSy0AtXH9dUWSt9xwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGLLjBIzsBax8EgQiXPWrD52L2PtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzQwMmVl YS00ODE0LTQ4NzctOGQ3YS0zY2EyZjc5NmI1OTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNDAyZWVh LTQ4MTQtNDg3Ny04ZDdhLTNjYTJmNzk2YjU5Ni8xL1lzdU1Fak93RnJId1NCQ0pj OWFzUG5ZdlktMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgIpYDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMArdICAwDC8jANBgkqhkiG9w0BAQsFAAOCAQEAsex/CoyTmJ3fQhpvbxo68BsV U6A43nW862MNwHogdQNz580xFHLHGjeZg1kn+cXcomsZ5CeaTUXMRzqaIG29poiE F9eVZPorjvtHCaagZ4A83w0OLCgqsx5s/7j8sQeVNlcYvHgzr7suqv2Sn0tgvtw4 0WWZi+bIbXzheMrFcNS+G7Ui3x6e8rzRmQKcjPNRUcG/ogMZPDwg/2EReLctK/zk Y0mN19Gt1s7nT9ZUMLdf7Q4+UZFfW66p763xYD/pvekfjQfksaBdXvKxWoKLSbSy 8kXmJfIxx5okSnt3difCVEUszh5lJaw2wDs3mCSiXZ5B6pMlOtZ+iqGVUSNZdA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:47 2026 by rpki-client