This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer File: YzkukpMXrmveCKWjuYorcB3biTo.cer (raw, json) Hash identifier: IA1wmuVTtDx3rF2tFugZ7zxZyBP/X+yv1yYLE1eJ8Ms= Subject key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B4695AB80DC1E82A512D3290C5021 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49671 AS: 60445 IP: 185.217.5.0/24 IP: 193.56.180.0/24 IP: 194.117.52.128/26 IP: 2001:7f8:164::/48 IP: 2a12:f8c0::/29 IP: 2a13:fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:46:95:ab:80:dc:1e:82:a5:12:d3:29:0c:50:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:9c:b9:f0:21:86:1a:1c:b3:67:fe:fd:aa: c4:63:24:35:96:6f:47:3d:e7:d8:42:16:4b:47:82: 65:f9:29:c0:b8:9f:af:54:c1:40:1f:4d:b5:64:81: 55:bf:06:93:94:c9:dc:f3:1c:f0:99:dc:ed:a0:e9: 01:4e:12:ef:d8:28:57:9a:63:b0:cc:2b:a2:2d:cd: 67:65:c3:9c:7b:c6:78:71:c5:22:53:60:5c:39:90: f7:40:65:ea:c1:d2:57:69:74:8a:59:6f:88:22:3f: 26:5a:70:95:32:72:13:00:8e:22:3a:4f:26:ca:69: 03:50:7d:0c:3c:61:6a:ec:0e:95:9d:12:08:51:9d: c5:e5:55:67:0c:af:07:e5:84:3f:c4:70:e2:17:5d: bd:d0:10:dd:a9:7d:a1:ad:6f:4b:7c:71:53:d6:d2: 80:be:7f:f6:c9:ee:52:68:3e:0e:13:2f:4b:5a:88: cc:ae:93:81:fa:3e:77:f5:7c:ea:b7:60:cb:c3:91: 23:c5:06:31:d5:c3:60:0d:74:31:aa:7d:54:fe:e3: 28:71:f6:d7:11:83:0b:a7:46:8f:f5:78:82:ec:2e: 88:a5:d0:85:a3:96:e2:26:f3:a0:62:9e:58:29:27: 55:60:58:d4:90:70:e2:07:85:ce:34:a5:c8:80:40: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.5.0/24 193.56.180.0/24 194.117.52.128/26 IPv6: 2001:7f8:164::/48 2a12:f8c0::/29 2a13:fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49671 60445 Signature Algorithm: sha256WithRSAEncryption 5a:23:75:50:78:4d:a0:44:d1:9d:e4:79:60:e1:91:5f:04:dd: 64:60:67:b9:dd:f5:d6:ad:46:00:24:23:4a:40:ab:d4:51:e5: ee:12:7b:96:6a:8a:00:09:04:d4:f2:63:a0:11:7d:98:53:42: f0:58:ee:50:7d:9f:ce:3d:8f:a8:7c:9a:be:37:94:9b:36:aa: c8:57:af:2e:a7:c5:60:47:c5:6c:55:e9:9c:76:5b:83:5b:67: 20:46:9c:9c:4a:7d:06:dc:fa:31:c5:e6:9a:b0:57:0c:c2:49: 20:1d:05:2c:38:56:05:48:73:bd:87:c7:96:f2:c7:83:0a:42: 26:21:53:c8:ec:a0:13:40:43:19:21:2c:d8:44:6d:c0:87:11: 03:fd:9f:73:03:a5:47:76:63:8e:ac:c6:09:5a:6d:db:5e:1d: 77:0f:8d:4c:c3:24:65:d6:e5:af:d2:de:b8:ee:4e:1d:06:38: 53:cd:98:cb:d0:1d:00:0b:b0:1c:5c:be:e1:aa:5e:c9:31:2c: 2d:65:6c:70:d9:96:59:93:d5:bd:59:76:f5:2b:00:bf:6c:ed: 66:86:f8:c5:f1:dc:d3:73:84:ec:3c:b4:87:9b:6b:f6:a0:4d: fc:b0:72:48:55:b6:a2:9a:69:25:a3:bd:e9:53:bf:cc:57:ef: 7d:2e:02:2b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt6W0aVq4DcHoKlEtMpDFAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzM5MmU5MjkzMTdhZTZiZGUwOGE1YTNiOThhMmI3MDFkZGI4OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqmcufAhhhocs2f+/arEYyQ1lm9H PefYQhZLR4Jl+SnAuJ+vVMFAH021ZIFVvwaTlMnc8xzwmdztoOkBThLv2ChXmmOw zCuiLc1nZcOce8Z4ccUiU2BcOZD3QGXqwdJXaXSKWW+IIj8mWnCVMnITAI4iOk8m ymkDUH0MPGFq7A6VnRIIUZ3F5VVnDK8H5YQ/xHDiF1290BDdqX2hrW9LfHFT1tKA vn/2ye5SaD4OEy9LWojMrpOB+j539Xzqt2DLw5EjxQYx1cNgDXQxqn1U/uMocfbX EYMLp0aP9XiC7C6IpdCFo5biJvOgYp5YKSdVYFjUkHDiB4XONKXIgED1cwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFGM5LpKTF65r3gilo7mKK3Ad24k6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2ZlNzAy ZS1jMjZiLTQ0MjktOTljMS04NzI1MGY1YTA3Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvZmU3MDJl LWMyNmItNDQyOS05OWMxLTg3MjUwZjVhMDdjYy8xL1l6a3VrcE1Ycm12ZUNLV2p1 WW9yY0IzYmlUby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF BwEHAQH/BDwwOjAZBAIAATATAwQAudkFAwQAwTi0AwUGwnU0gDAdBAIAAjAXAwcA IAEH+AFkAwUDKhL4wAMFAyoTD8AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMIH AgMA7B0wDQYJKoZIhvcNAQELBQADggEBAFojdVB4TaBE0Z3keWDhkV8E3WRgZ7nd 9datRgAkI0pAq9RR5e4Se5ZqigAJBNTyY6ARfZhTQvBY7lB9n849j6h8mr43lJs2 qshXry6nxWBHxWxV6Zx2W4NbZyBGnJxKfQbc+jHF5pqwVwzCSSAdBSw4VgVIc72H x5byx4MKQiYhU8jsoBNAQxkhLNhEbcCHEQP9n3MDpUd2Y46sxglabdteHXcPjUzD JGXW5a/S3rjuTh0GOFPNmMvQHQALsBxcvuGqXskxLC1lbHDZllmT1b1ZdvUrAL9s 7WaG+MXx3NNzhOw8tIeba/agTfywckhVtqKaaSWjvelTv8xX730uAis= -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:30 2026 by rpki-client