This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer File: YtA4iKQF5huH0XBvkzs2aob7QpU.cer (raw, json) Hash identifier: Ckj12j7iheDUJ9iVtxkhHPpqyuffVL8jJq7xcWhrQz4= Subject key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39009D2452E5FFE86CB154484D7191 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207138 IP: 185.164.216.0/22 IP: 2a13:d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:00:9d:24:52:e5:ff:e8:6c:b1:54:48:4d:71:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62d03888a405e61b87d1706f933b366a86fb4295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:2b:e6:23:f1:43:a1:0a:cb:94:39:99:75: 06:94:a0:0c:d6:6d:8c:31:d2:9e:f8:41:54:f8:17: 47:8e:8b:94:4f:bd:e7:45:35:51:e7:b7:30:38:d0: c8:c3:eb:eb:a5:fa:d5:fd:7f:3e:7c:74:72:da:13: 6c:7b:cc:55:00:a9:fd:3d:be:df:fa:7b:17:05:4b: cf:a7:af:d8:97:b0:4e:31:04:58:e0:a9:01:9c:24: 91:e6:43:9a:6c:9e:73:1c:82:7a:6c:da:9c:e7:06: aa:c3:01:03:6f:24:83:43:4b:ba:49:ad:e0:81:26: 4e:63:64:28:c5:49:39:65:ae:f9:b7:a4:42:33:d7: 58:aa:67:83:62:6b:70:6f:02:66:47:1c:4e:29:52: 30:80:89:ff:70:73:93:d8:78:5e:48:32:e2:ea:ad: 14:9a:fd:83:13:40:00:25:f6:93:44:ef:b3:58:a7: 42:ad:c6:ea:58:ed:1d:6f:3b:46:78:1a:50:c5:85: 16:ed:52:53:cc:fc:eb:71:c8:e2:52:b8:95:85:de: 5c:10:38:50:d4:23:04:02:12:d2:a5:71:1e:9f:fe: 81:84:46:86:30:13:e7:09:56:fc:9c:cf:bc:4a:6a: dd:43:46:67:83:60:87:04:da:1f:ab:93:30:31:cc: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.216.0/22 IPv6: 2a13:d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207138 Signature Algorithm: sha256WithRSAEncryption a7:14:f7:7d:19:cb:6c:70:d1:5c:6b:2e:b6:20:02:d0:dd:de: 4b:4d:53:39:49:e0:d7:02:e5:95:4c:90:99:61:a8:0f:26:4d: 4c:c0:19:ab:c0:0a:c5:a4:72:96:b8:d2:2f:04:d1:09:43:9a: 49:47:88:07:b3:59:e9:99:bf:f9:2c:25:b6:77:fc:a7:72:56: 27:7a:98:ca:45:78:87:48:50:15:33:55:b0:26:a7:ac:7e:c1: 3c:e0:76:b9:b2:91:27:32:b2:01:15:e6:e3:54:66:16:e3:90: 52:1a:2c:03:19:bd:3a:7f:f5:02:3c:f4:42:4b:c7:b7:93:05: b9:fc:d2:79:f5:8a:9b:5b:81:b2:1d:4b:65:ef:e8:f8:ed:a8: 21:62:b7:44:06:04:ca:db:74:78:12:c7:81:8e:7f:9e:fb:a2: 5d:35:8b:70:70:28:c1:c2:99:57:f3:ea:17:50:90:96:e8:d8: f3:4f:93:d4:61:de:d9:54:52:a6:28:3a:a9:fa:fc:c4:fe:aa: 9c:0f:74:bc:d2:ce:c9:eb:fa:ca:e0:ed:c1:c8:d0:e3:02:dd: b9:58:c9:89:0c:d6:07:af:c0:42:e9:db:dd:0d:83:ef:a4:64: cb:58:c9:69:00:4b:ae:2c:7b:50:e1:f2:b0:7a:dd:42:ce:f4: ca:ac:98:bc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OQCdJFLl/+hssVRITXGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmQwMzg4OGE0MDVlNjFiODdkMTcwNmY5MzNiMzY2YTg2ZmI0Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzQr5iPxQ6EKy5Q5mXUGlKAM1m2M MdKe+EFU+BdHjouUT73nRTVR57cwONDIw+vrpfrV/X8+fHRy2hNse8xVAKn9Pb7f +nsXBUvPp6/Yl7BOMQRY4KkBnCSR5kOabJ5zHIJ6bNqc5waqwwEDbySDQ0u6Sa3g gSZOY2QoxUk5Za75t6RCM9dYqmeDYmtwbwJmRxxOKVIwgIn/cHOT2HheSDLi6q0U mv2DE0AAJfaTRO+zWKdCrcbqWO0dbztGeBpQxYUW7VJTzPzrccjiUriVhd5cEDhQ 1CMEAhLSpXEen/6BhEaGMBPnCVb8nM+8SmrdQ0Zng2CHBNofq5MwMcxCLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGLQOIikBeYbh9Fwb5M7NmqG+0KVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2JmNTFm Zi01YzM2LTQ1YjItOTFjNS00ZDY4NWFjYTgyNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYmY1MWZm LTVjMzYtNDViMi05MWM1LTRkNjg1YWNhODI3OS8xL1l0QTRpS1FGNWh1SDBYQnZr enMyYW9iN1FwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaTYMA0EAgACMAcDBQMqEw2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpIjANBgkqhkiG9w0BAQsFAAOCAQEApxT3fRnLbHDR XGsutiAC0N3eS01TOUng1wLllUyQmWGoDyZNTMAZq8AKxaRylrjSLwTRCUOaSUeI B7NZ6Zm/+Swltnf8p3JWJ3qYykV4h0hQFTNVsCanrH7BPOB2ubKRJzKyARXm41Rm FuOQUhosAxm9On/1Ajz0QkvHt5MFufzSefWKm1uBsh1LZe/o+O2oIWK3RAYEytt0 eBLHgY5/nvuiXTWLcHAowcKZV/PqF1CQlujY80+T1GHe2VRSpig6qfr8xP6qnA90 vNLOyev6yuDtwcjQ4wLduVjJiQzWB6/AQunb3Q2D76Rky1jJaQBLrix7UOHysHrd Qs70yqyYvA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:20 2026 by rpki-client