This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer File: YxrKX5odz6GXBNHwN38bn-kUXgg.cer (raw, json) Hash identifier: rPX3l5SFjmqvJ3YLQRLLp8PsUjM1wsCUpIMP4hW/yZw= Subject key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CD24E4D3C24EA97EF56EB1076B6BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209162 IP: 178.239.24.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d2:4e:4d:3c:24:ea:97:ef:56:eb:10:76:b6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:99:21:36:8a:36:b6:e8:91:11:62:81:f1: bc:5e:bb:dd:e9:1a:a4:d6:ed:9c:29:4f:34:22:c0: df:53:af:f9:00:5d:d8:65:86:71:6b:6b:88:f7:24: 3f:dc:17:bc:95:c3:ce:22:7f:c2:6e:e2:17:bc:37: 19:df:b0:c1:17:d1:96:e5:39:b9:00:7d:91:d6:20: 42:bf:7d:7a:7d:24:d2:a9:47:10:54:d6:52:b0:c5: 3f:6d:b3:bf:6c:17:dc:a7:fd:65:f2:e5:d5:39:76: fb:31:94:36:f5:5e:58:36:29:42:1a:41:ea:05:88: fb:39:e1:61:58:57:36:a0:55:a5:e8:27:1e:76:f8: 6b:e5:61:ff:df:6a:07:1a:e4:fa:30:d2:85:f8:f9: 09:af:7b:2c:db:37:9b:3a:bd:b7:75:83:4f:39:2d: af:2d:03:80:05:f2:5e:5d:ac:11:33:94:ae:70:14: 52:c5:7d:1d:9c:50:4b:ef:c1:24:e7:74:58:d5:48: 34:9b:c2:d9:4d:9e:1e:8f:80:85:89:ef:b8:ee:44: 81:74:9c:68:40:3e:70:a1:da:05:c5:08:77:00:bd: 62:62:47:4c:79:8a:86:e8:1f:ca:09:ad:6b:53:c9: ef:ca:bf:93:b5:09:55:9d:0a:75:18:72:65:60:6a: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.24.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209162 Signature Algorithm: sha256WithRSAEncryption 78:80:1b:41:3b:a1:51:54:7f:44:a2:b0:e1:97:48:bf:3e:04: 67:8c:a0:2c:b5:9a:77:ab:25:11:47:39:94:42:35:a7:84:09: e2:88:66:da:a5:0d:1b:5c:c0:f7:c5:bb:92:80:be:8d:09:ad: cb:ce:83:27:a3:0b:fe:21:ab:c6:51:f7:5d:6e:84:7b:e7:f2: 61:07:8a:33:72:bc:01:2f:8d:55:87:a6:27:e5:30:8f:c0:a0: 85:fd:7d:d9:1a:8e:ba:c2:e8:83:77:0d:5b:f8:c2:c6:49:9b: 64:b7:3f:08:87:66:8d:95:34:d3:07:e0:ad:30:69:57:27:fb: cf:e8:8b:87:15:86:55:e3:58:7d:af:e5:b5:2e:72:a6:e6:ce: 03:d3:03:7b:de:f5:3e:5b:a4:a0:0a:4f:b5:19:24:f3:a0:b8: 3a:88:f8:c0:1c:6a:fd:54:31:31:c2:2d:e9:c8:df:6e:c3:f5: a9:6d:ba:84:c5:f2:a5:b2:8c:a0:0a:ea:d4:2d:6a:97:9a:d1: ce:ca:4d:25:34:01:3f:f0:8d:1f:83:26:fb:5b:e2:15:9d:f3: 76:4d:32:31:7d:fd:68:67:22:f0:12:b1:16:82:f8:b8:4a:27: 04:e7:08:29:43:9b:3f:67:a4:7a:04:08:74:08:ab:f3:47:4d: 5b:2a:6a:72 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XNJOTTwk6pfvVusQdra6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzFhY2E1ZjlhMWRjZmExOTcwNGQxZjAzNzdmMWI5ZmU5MTQ1ZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltOZITaKNrbokRFigfG8Xrvd6Rqk 1u2cKU80IsDfU6/5AF3YZYZxa2uI9yQ/3Be8lcPOIn/CbuIXvDcZ37DBF9GW5Tm5 AH2R1iBCv316fSTSqUcQVNZSsMU/bbO/bBfcp/1l8uXVOXb7MZQ29V5YNilCGkHq BYj7OeFhWFc2oFWl6Ccedvhr5WH/32oHGuT6MNKF+PkJr3ss2zebOr23dYNPOS2v LQOABfJeXawRM5SucBRSxX0dnFBL78Ek53RY1Ug0m8LZTZ4ej4CFie+47kSBdJxo QD5wodoFxQh3AL1iYkdMeYqG6B/KCa1rU8nvyr+TtQlVnQp1GHJlYGq/VwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGMayl+aHc+hlwTR8Dd/G5/pFF4IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2YwNzc1 Yy1kYTJlLTRkN2QtODAxOS1kMmIwMmE0MDNjN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvZjA3NzVj LWRhMmUtNGQ3ZC04MDE5LWQyYjAyYTQwM2M3Yi8xL1l4cktYNW9kejZHWEJOSHdO Mzhibi1rVVhnZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCsu8YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMxCjANBgkqhkiG9w0BAQsFAAOCAQEAeIAbQTuhUVR/RKKw4ZdIvz4EZ4ygLLWa d6slEUc5lEI1p4QJ4ohm2qUNG1zA98W7koC+jQmty86DJ6ML/iGrxlH3XW6Ee+fy YQeKM3K8AS+NVYemJ+Uwj8Cghf192RqOusLog3cNW/jCxkmbZLc/CIdmjZU00wfg rTBpVyf7z+iLhxWGVeNYfa/ltS5ypubOA9MDe971PlukoApPtRkk86C4Ooj4wBxq /VQxMcIt6cjfbsP1qW26hMXypbKMoArq1C1ql5rRzspNJTQBP/CNH4Mm+1viFZ3z dk0yMX39aGci8BKxFoL4uEonBOcIKUObP2ekegQIdAir80dNWypqcg== -----END CERTIFICATE-----Generated at Tue Jan 27 03:26:46 2026 by rpki-client