This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer (raw, json) Hash identifier: TXcqDYLYYtkoBlbWuDGNZD2h1F3f16f4WhYz5UPMNlY= Subject key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB48CEC00AB45D0456C9EF4591ACDE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.189.4.0/22 IP: 2a0b:d780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:48:ce:c0:0a:b4:5d:04:56:c9:ef:45:91:ac:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:27:6e:11:43:cc:58:4b:de:6c:f9:75:32: a0:f6:bf:34:84:77:a1:13:70:4f:fc:4d:f3:af:00: 72:dc:32:d3:72:17:fb:f5:32:69:c7:f5:6a:cd:dd: f3:8f:68:ec:9e:9c:70:04:00:a6:d3:ea:bf:6c:8f: 94:89:c1:c8:82:89:29:8e:ae:d0:5c:38:eb:a0:48: aa:e7:19:a5:f4:cd:b0:59:97:28:f4:05:eb:4b:6f: f4:56:70:eb:53:a2:60:44:6b:0e:15:2d:b3:10:86: 3e:e0:74:a5:58:b8:52:48:13:05:eb:00:79:aa:6e: 27:65:d6:d5:41:82:92:cf:f3:98:c0:6f:44:26:17: 5d:4f:e7:81:8b:a8:89:02:ef:7b:b7:00:e8:6b:58: 74:77:11:f1:a1:6d:3a:aa:24:0b:82:32:d9:97:10: 3f:44:42:29:b2:fe:65:35:9f:44:2f:17:10:c0:9e: 77:ab:6a:d0:d5:ef:d6:b1:dd:01:81:b7:63:17:ec: 9a:34:19:33:17:7e:e6:73:e2:66:6c:29:6d:67:89: 33:1f:1b:f4:41:4e:30:77:a2:a9:c5:23:59:81:35: 3a:77:c5:01:13:80:af:35:3b:2e:dc:43:5b:d6:bd: b6:54:2b:2a:6b:47:52:cf:91:a7:3e:b4:7b:3d:1b: c1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.4.0/22 IPv6: 2a0b:d780::/29 Signature Algorithm: sha256WithRSAEncryption 2b:96:ea:33:16:80:9a:88:d0:09:f8:08:9b:8c:84:15:b3:3a: 46:67:08:f0:a9:e4:da:ec:e3:45:6b:f6:33:90:5f:f6:bf:4b: 1e:07:47:64:18:eb:85:cf:5a:e1:bb:b6:65:d3:e9:58:13:c9: a4:c6:db:4c:92:57:26:22:95:c4:88:b1:63:26:22:a9:0f:c7: bb:3c:bd:bf:3e:ae:3a:9f:a3:29:8d:bb:ed:bd:16:6b:eb:a4: 3d:fb:3d:b0:06:30:13:6d:55:20:57:6c:1a:05:10:75:fc:e9: e1:0f:32:66:9d:05:f0:28:f2:29:e7:17:ab:4f:ca:5e:69:44: 98:4d:f3:14:ea:d5:40:38:4f:f9:9e:d4:a1:b6:c2:83:65:bf: 82:ff:96:ff:16:9c:f1:a9:38:12:33:5d:5f:35:ae:5e:31:64: 3a:56:36:36:7e:81:f9:45:75:82:57:9f:c6:ef:f1:8a:bc:50: 3f:b3:4d:bd:db:ad:3f:33:08:02:72:81:11:18:ac:c7:b1:77: fe:d9:fa:5a:a2:a0:c2:c3:47:f8:a4:44:c4:a9:46:6a:a0:ef: 3e:43:69:b1:00:80:75:9b:4e:27:b1:cf:02:56:d6:96:b2:8e: 1e:8c:72:c8:c1:35:01:45:1b:14:ad:4d:c8:a4:98:08:82:55: 63:68:0a:d1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9y0jOwAq0XQRWye9FkazeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGY5YmFhYjFhMTNkZjMwZWZmMGZjZDc4MGM0YmJjNTRiYzNlNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qsnbhFDzFhL3mz5dTKg9r80hHeh E3BP/E3zrwBy3DLTchf79TJpx/Vqzd3zj2jsnpxwBACm0+q/bI+UicHIgokpjq7Q XDjroEiq5xml9M2wWZco9AXrS2/0VnDrU6JgRGsOFS2zEIY+4HSlWLhSSBMF6wB5 qm4nZdbVQYKSz/OYwG9EJhddT+eBi6iJAu97twDoa1h0dxHxoW06qiQLgjLZlxA/ REIpsv5lNZ9ELxcQwJ53q2rQ1e/Wsd0BgbdjF+yaNBkzF37mc+JmbCltZ4kzHxv0 QU4wd6KpxSNZgTU6d8UBE4CvNTsu3ENb1r22VCsqa0dSz5GnPrR7PRvBhQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMj5uqsaE98w7/D814DEu8VLw+bVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzNlNjc2 Mi0wOTg5LTQ4ZWYtYThkMi1kYjQ4NGNjZTcyOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvM2U2NzYy LTA5ODktNDhlZi1hOGQyLWRiNDg0Y2NlNzI5My8xL3lQbTZxeG9UM3pEdjhQelhn TVM3eFV2RDV0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCub0EMA0EAgACMAcDBQMqC9eAMA0GCSqGSIb3 DQEBCwUAA4IBAQArluozFoCaiNAJ+AibjIQVszpGZwjwqeTa7ONFa/YzkF/2v0se B0dkGOuFz1rhu7Zl0+lYE8mkxttMklcmIpXEiLFjJiKpD8e7PL2/Pq46n6Mpjbvt vRZr66Q9+z2wBjATbVUgV2waBRB1/OnhDzJmnQXwKPIp5xerT8peaUSYTfMU6tVA OE/5ntShtsKDZb+C/5b/FpzxqTgSM11fNa5eMWQ6VjY2foH5RXWCV5/G7/GKvFA/ s029260/MwgCcoERGKzHsXf+2fpaoqDCw0f4pETEqUZqoO8+Q2mxAIB1m04nsc8C VtaWso4ejHLIwTUBRRsUrU3IpJgIglVjaArR -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:03 2026 by rpki-client