This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer File: YxGmnIFyBEhUkx8QClm9CJy4iBo.cer (raw, json) Hash identifier: OspEO3htiSZFr55p0phJ2qgkH41Zzh9TvvwChkS/afU= Subject key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3743BA4D6D4D798B902DFD0964669C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2038 -- 2040 IP: 131.154.0.0/16 IP: 141.108.0.0/16 IP: 192.84.127.0 -- 192.84.156.255 IP: 192.135.8.0 -- 192.135.37.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:43:ba:4d:6d:4d:79:8b:90:2d:fd:09:64:66:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6311a69c8172044854931f100a59bd089cb8881a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6a:68:24:ca:86:e9:fb:01:ad:ee:a7:cd:c1: 59:44:bb:4f:50:d7:ca:de:eb:4d:8a:c6:c1:60:d2: c1:9c:18:57:57:30:f8:49:e3:66:be:a4:8c:9b:0e: c4:46:ab:3f:f5:1f:77:25:db:3d:63:ee:b5:49:04: 27:3c:9b:89:d5:1a:ef:65:93:b3:1b:01:a9:78:b8: 2a:19:5e:62:c9:89:83:17:bd:dc:cd:a3:0d:fc:04: 7a:dd:d1:1b:31:9a:60:c9:97:44:80:09:16:21:23: eb:5d:94:d6:56:1f:b8:48:a3:d8:10:72:39:0e:6f: c0:d0:51:58:6e:03:85:51:e1:f4:f1:8e:e0:1a:f3: c6:be:cc:fa:40:08:c8:1e:1e:a8:1d:46:5b:50:e5: 30:64:00:a5:74:37:63:05:f8:2e:1f:31:4b:28:41: d3:8e:b4:7d:d9:9e:f7:db:d2:f0:47:bb:0c:be:41: ff:36:43:53:2e:a8:0b:18:72:25:57:8a:c3:1f:4c: 9d:a0:bb:ca:2b:89:91:26:8b:7e:6e:ac:ed:7b:82: 2d:73:ef:ee:f2:ec:2d:32:b6:91:51:34:73:2d:56: 07:60:4a:ac:ab:7c:1f:62:96:4c:aa:d7:59:76:10: 94:d8:e8:aa:40:01:ef:59:2d:ae:72:11:d3:ad:ea: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.154.0.0/16 141.108.0.0/16 192.84.127.0-192.84.156.255 192.135.8.0-192.135.37.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2038-2040 Signature Algorithm: sha256WithRSAEncryption 07:85:e7:71:9f:38:c9:12:44:47:43:8c:d6:d5:18:ec:2f:92: c2:9a:51:e9:bf:72:c1:94:bf:b3:ad:5f:8e:ac:b1:84:8c:94: eb:2a:f5:75:35:65:3b:dd:9b:24:d6:5c:b0:85:32:74:55:38: 8d:a1:79:62:71:ea:48:5c:7c:77:e1:b9:83:e8:77:83:c5:fb: 0e:3a:92:e9:bc:3a:cf:8a:48:7b:16:e5:69:1b:cd:44:18:76: 66:aa:75:bd:a4:73:dd:81:1c:c1:b8:a1:74:88:d8:c5:4b:0b: 9f:cf:f2:2b:78:60:79:e0:0a:88:97:d0:34:40:b8:bc:05:8f: e7:30:4f:06:50:6d:0c:75:e6:75:22:85:b1:91:59:1b:00:15: 5e:c0:29:52:5c:80:8a:50:0f:16:c2:ec:81:00:b7:e1:ca:a0: e7:3e:a4:86:1e:ac:ad:d1:9a:d2:dc:42:e3:a4:6e:4e:fa:10: 6c:65:f3:4a:cc:19:d0:e9:88:95:7a:c5:a2:c1:6d:db:25:a9: d8:f0:8c:cc:32:d9:06:9d:da:44:b0:11:83:de:22:7b:36:26: f8:c0:04:33:c0:d2:8a:4b:17:7a:b0:5b:1a:0a:d2:39:07:89: 7b:c7:68:4b:7e:fa:ae:85:be:44:b8:df:ed:93:33:bc:18:83: 69:30:e0:8d -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt+N0O6TW1NeYuQLf0JZGacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzExYTY5YzgxNzIwNDQ4NTQ5MzFmMTAwYTU5YmQwODljYjg4ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62poJMqG6fsBre6nzcFZRLtPUNfK 3utNisbBYNLBnBhXVzD4SeNmvqSMmw7ERqs/9R93Jds9Y+61SQQnPJuJ1RrvZZOz GwGpeLgqGV5iyYmDF73czaMN/AR63dEbMZpgyZdEgAkWISPrXZTWVh+4SKPYEHI5 Dm/A0FFYbgOFUeH08Y7gGvPGvsz6QAjIHh6oHUZbUOUwZACldDdjBfguHzFLKEHT jrR92Z7329LwR7sMvkH/NkNTLqgLGHIlV4rDH0ydoLvKK4mRJot+bqzte4Itc+/u 8uwtMraRUTRzLVYHYEqsq3wfYpZMqtdZdhCU2OiqQAHvWS2uchHTreqDjQIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFGMRppyBcgRIVJMfEApZvQicuIgaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2M0YWJm ZS1hOGU2LTRhMTQtOGI1Yy1kMGUwZjIxMzkzNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYzRhYmZl LWE4ZTYtNGExNC04YjVjLWQwZTBmMjEzOTM2Yy8xL1l4R21uSUZ5QkVoVWt4OFFD bG05Q0p5NGlCby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF BwEHAQH/BDAwLjAsBAIAATAmAwMAg5oDAwCNbDAMAwQAwFR/AwQAwFScMAwDBAPA hwgDBAHAhyQwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCjAIAgIH9gICB/gwDQYJKoZI hvcNAQELBQADggEBAAeF53GfOMkSREdDjNbVGOwvksKaUem/csGUv7OtX46ssYSM lOsq9XU1ZTvdmyTWXLCFMnRVOI2heWJx6khcfHfhuYPod4PF+w46kum8Os+KSHsW 5WkbzUQYdmaqdb2kc92BHMG4oXSI2MVLC5/P8it4YHngCoiX0DRAuLwFj+cwTwZQ bQx15nUihbGRWRsAFV7AKVJcgIpQDxbC7IEAt+HKoOc+pIYerK3RmtLcQuOkbk76 EGxl80rMGdDpiJV6xaLBbdslqdjwjMwy2Qad2kSwEYPeIns2JvjABDPA0opLF3qw WxoK0jkHiXvHaEt++q6FvkS43+2TM7wYg2kw4I0= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:57 2026 by rpki-client