This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer File: YvvSzAAS-y-G20C1ib0axOlzJm0.cer (raw, json) Hash identifier: XxMv7yTt3Ucp0IMPvbxueDNq7Owg8xZA5CbNISuY+bI= Subject key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EACA5B668A2DBA1B76C064BE147217 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.24.253.0/24 IP: 45.65.116.0/22 IP: 45.88.8.0/22 IP: 45.95.64.0/22 IP: 45.148.140.0/22 IP: 45.155.156.0/22 IP: 77.83.104.0/22 IP: 194.50.223.0 -- 194.50.224.255 IP: 194.50.233.0/24 IP: 194.50.243.0/24 IP: 194.150.204.0/23 IP: 194.150.210.0/23 IP: 2a0f:c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ca:5b:66:8a:2d:ba:1b:76:c0:64:be:14:72:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:b4:2c:76:7a:b0:f1:82:87:c7:fb:d3:41: ed:69:ea:ff:48:46:74:87:ae:49:81:8e:48:f5:6d: 63:cc:1f:dc:36:16:fb:6f:b7:3a:59:8d:3b:0d:6c: 91:3c:cd:3c:7a:75:a7:4a:63:6c:33:99:29:e8:ac: 1d:fe:32:a9:14:d1:7b:34:cb:a5:fd:ea:5f:2a:84: a7:b4:01:9d:c8:7f:3e:7a:d3:a3:47:d8:24:cd:56: 1e:a3:41:cf:04:fa:f9:32:20:e7:a5:a7:3b:ba:bf: 18:b8:42:6e:1f:d1:15:26:7c:3a:e0:4a:64:3b:88: fe:01:88:b1:72:60:ad:05:23:2e:6e:3c:b4:4c:2a: d8:7c:95:f1:76:87:cb:88:e1:f9:a8:13:c6:6f:49: 0f:de:e1:43:34:4d:e2:b3:2d:1f:d2:9c:4d:5e:28: 83:18:1b:76:38:f8:b6:27:28:31:5d:b3:bc:8b:b9: 65:90:07:2c:0b:d3:74:1d:79:92:ae:cf:33:5d:f6: f3:f9:11:d5:dd:64:e3:5b:1e:55:95:7e:56:f9:e0: e4:01:dd:c7:73:ca:18:e1:1c:5e:37:31:5a:f0:b4: cd:5c:f1:a9:76:5d:17:d3:5a:88:bb:16:66:1b:81: a4:12:47:7f:c8:63:de:4a:35:d1:30:97:44:59:7c: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.253.0/24 45.65.116.0/22 45.88.8.0/22 45.95.64.0/22 45.148.140.0/22 45.155.156.0/22 77.83.104.0/22 194.50.223.0-194.50.224.255 194.50.233.0/24 194.50.243.0/24 194.150.204.0/23 194.150.210.0/23 IPv6: 2a0f:c80::/29 Signature Algorithm: sha256WithRSAEncryption 6a:ab:ba:e4:3f:41:cb:25:5d:cf:8d:32:a4:a1:d6:d2:db:5b: d0:b3:fa:10:a0:30:ec:ad:ae:b5:e9:8c:1a:c4:2b:89:96:78: 57:51:dc:97:1a:c5:d4:68:19:9a:6c:61:ab:ad:94:e8:a7:d8: dd:00:60:c6:3c:fc:35:28:01:06:6b:d2:fb:2b:41:e1:a6:1c: 24:68:c4:8c:c3:d4:00:6a:f5:ad:d4:3b:ec:e1:a3:25:0f:f8: c4:67:c9:89:fa:47:90:c6:a0:35:ac:2e:f2:56:b2:87:7a:ce: 35:a0:c9:50:05:3d:0d:29:13:c8:7b:1a:d1:52:1b:a6:10:2c: 34:3f:c4:98:b9:19:ab:e1:41:d9:6f:45:d7:0c:d1:bc:4d:2a: e8:6b:ff:f3:19:15:4d:26:44:46:80:93:7f:bc:ef:e6:64:cf: 8d:bd:2a:06:72:64:d1:94:3f:b8:ca:49:fe:84:22:c3:24:d9: 5e:e2:ec:10:41:a7:6f:0b:9e:ce:e0:fa:d2:ca:e1:48:86:1b: 3d:31:4e:81:1c:71:7c:e1:08:50:f0:95:71:04:52:eb:9b:aa: e9:23:d1:99:8e:93:41:bd:05:1b:0e:bc:3d:6e:59:94:02:d0: d1:51:13:37:bf:ea:83:31:7c:33:0c:58:7f:ed:92:df:37:e3: 7a:ba:3f:ce -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt26spbZootuht2wGS+FHIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmZiZDJjYzAwMTJmYjJmODZkYjQwYjU4OWJkMWFjNGU5NzMyNjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43C0LHZ6sPGCh8f700Htaer/SEZ0 h65JgY5I9W1jzB/cNhb7b7c6WY07DWyRPM08enWnSmNsM5kp6Kwd/jKpFNF7NMul /epfKoSntAGdyH8+etOjR9gkzVYeo0HPBPr5MiDnpac7ur8YuEJuH9EVJnw64Epk O4j+AYixcmCtBSMubjy0TCrYfJXxdofLiOH5qBPGb0kP3uFDNE3isy0f0pxNXiiD GBt2OPi2JygxXbO8i7llkAcsC9N0HXmSrs8zXfbz+RHV3WTjWx5VlX5W+eDkAd3H c8oY4RxeNzFa8LTNXPGpdl0X01qIuxZmG4GkEkd/yGPeSjXRMJdEWXzRSwIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFGL70swAEvsvhttAtYm9GsTpcyZtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ2Yjkz ZGYwLWFjOGQtNGRhOC1hZmI4LWRjYjdmMjg4ODM2Mi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZi OTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvNjJGQkQyQ0MwMDEy RkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjB4BggrBgEFBQcBBwEB/wRpMGcwVgQCAAEwUAME AB8Y/QMEAi1BdAMEAi1YCAMEAi1fQAMEAi2UjAMEAi2bnAMEAk1TaDAMAwQAwjLf AwQAwjLgAwQAwjLpAwQAwjLzAwQBwpbMAwQBwpbSMA0EAgACMAcDBQMqDwyAMA0G CSqGSIb3DQEBCwUAA4IBAQBqq7rkP0HLJV3PjTKkodbS21vQs/oQoDDsra616Ywa xCuJlnhXUdyXGsXUaBmabGGrrZTop9jdAGDGPPw1KAEGa9L7K0HhphwkaMSMw9QA avWt1Dvs4aMlD/jEZ8mJ+keQxqA1rC7yVrKHes41oMlQBT0NKRPIexrRUhumECw0 P8SYuRmr4UHZb0XXDNG8TSroa//zGRVNJkRGgJN/vO/mZM+NvSoGcmTRlD+4ykn+ hCLDJNle4uwQQadvC57O4PrSyuFIhhs9MU6BHHF84QhQ8JVxBFLrm6rpI9GZjpNB vQUbDrw9blmUAtDRURM3v+qDMXwzDFh/7ZLfN+N6uj/O -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:19 2026 by rpki-client