This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer File: yYfQn9P8K3BMZhELsCUu4Maxuko.cer (raw, json) Hash identifier: 0YhK50G/7uOYTxMNLgjERY/01KfNuPgsIIQzzx3igEY= Subject key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ADFEBD02BC8F0E4AC88A6BB1E6A3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34915 IP: 194.5.208.0/22 IP: 2a0c:ca80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:df:eb:d0:2b:c8:f0:e4:ac:88:a6:bb:1e:6a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:38:7a:09:1e:d2:b0:e7:10:dc:8d:d9:c5: c0:ba:10:36:d4:00:89:e5:08:05:26:f8:a8:25:d0: 7a:16:55:17:ff:90:09:be:2e:b2:2a:1f:a4:bd:46: 75:4d:30:d7:aa:e9:b4:08:dd:00:60:0e:a6:2e:5e: 70:62:b9:80:57:5b:04:4a:d6:ef:07:3c:99:5a:e4: 93:3a:92:f5:8d:74:ea:16:d3:18:25:a0:45:3c:0f: 89:67:1e:84:89:f3:81:1b:76:53:1a:2b:0d:19:4a: 00:70:f0:f3:8b:b0:d2:1a:c2:8c:fd:17:4b:35:32: 90:bc:d2:03:0e:76:d3:fa:ed:67:7a:60:90:08:47: e1:9f:7b:15:42:62:4b:7b:c3:a2:aa:a8:d1:37:80: d8:ba:54:95:c7:d7:6f:ee:77:e8:9a:34:02:3a:9d: fa:e4:7b:84:ba:7d:4d:8d:10:f1:9b:df:30:8d:a3: 5e:d6:ee:2b:4e:f8:37:69:37:c0:a0:63:42:58:fd: 6c:49:d7:d7:ff:98:24:30:03:b9:9c:d4:8e:4e:d7: 90:a2:8e:96:31:ca:20:a7:42:c6:ff:dc:4d:9a:fd: 94:90:c9:cc:66:47:2b:fe:7f:6f:28:44:8b:10:a8: 57:83:93:60:91:55:e7:78:7d:93:33:13:31:a3:69: 6a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.208.0/22 IPv6: 2a0c:ca80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34915 Signature Algorithm: sha256WithRSAEncryption 09:cc:50:47:48:c6:cf:d0:97:64:af:1f:d4:1f:41:e3:8a:7e: c7:24:6b:92:1a:d3:9f:4e:43:53:84:37:22:31:89:f4:a7:f8: 03:30:fb:6d:67:d9:cb:4e:5c:10:ca:54:04:d8:e8:22:9d:ce: aa:a8:d6:73:3a:96:48:34:11:ce:60:b8:7f:ad:8b:45:53:cb: 41:89:2a:0b:55:a5:4a:c6:ab:cf:d1:2a:d5:2c:fa:af:5b:5c: fd:90:be:95:5b:95:46:cc:b9:91:16:f5:3c:40:a4:bf:b4:ab: 05:41:5f:3a:78:bb:a5:7c:91:cf:65:b9:a6:90:c6:e8:44:ad: c6:11:2d:fe:a9:ba:84:34:93:ad:21:08:9a:d3:29:6a:b8:72: ef:a0:ca:4e:dd:19:0f:12:16:07:7d:51:63:c4:43:7c:1b:f0: 7f:0d:f5:40:08:61:9b:88:bd:6b:99:41:d0:62:34:63:ca:7e: 3b:0e:c9:de:14:75:d5:c0:6f:06:a8:ab:5e:b5:73:5c:32:87: 42:cd:ae:5c:a1:bb:5e:91:0a:df:8c:6d:76:23:92:42:68:88: c6:44:94:39:e2:1e:a0:bd:dc:32:32:72:5b:c1:3c:0b:18:29: 5b:04:03:67:a1:0b:d8:7e:2c:1b:94:1c:57:24:27:b0:64:b5: f4:4d:49:e5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6Wt/r0CvI8OSsiKa7Hmo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg3ZDA5ZmQzZmMyYjcwNGM2NjExMGJiMDI1MmVlMGM2YjFiYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraQ4egke0rDnENyN2cXAuhA21ACJ 5QgFJvioJdB6FlUX/5AJvi6yKh+kvUZ1TTDXqum0CN0AYA6mLl5wYrmAV1sEStbv BzyZWuSTOpL1jXTqFtMYJaBFPA+JZx6EifOBG3ZTGisNGUoAcPDzi7DSGsKM/RdL NTKQvNIDDnbT+u1nemCQCEfhn3sVQmJLe8OiqqjRN4DYulSVx9dv7nfomjQCOp36 5HuEun1NjRDxm98wjaNe1u4rTvg3aTfAoGNCWP1sSdfX/5gkMAO5nNSOTteQoo6W Mcogp0LG/9xNmv2UkMnMZkcr/n9vKESLEKhXg5NgkVXneH2TMxMxo2lqkwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMmH0J/T/CtwTGYRC7AlLuDGsbpKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzNlNGY2 Yi0yMjM1LTQzMmUtYTY5YS0wN2RhYzdiOTJkNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvM2U0ZjZi LTIyMzUtNDMyZS1hNjlhLTA3ZGFjN2I5MmQ0NC8xL3lZZlFuOVA4SzNCTVpoRUxz Q1V1NE1heHVrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwgXQMA0EAgACMAcDBQMqDMqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCIYzANBgkqhkiG9w0BAQsFAAOCAQEACcxQR0jGz9CX ZK8f1B9B44p+xyRrkhrTn05DU4Q3IjGJ9Kf4AzD7bWfZy05cEMpUBNjoIp3OqqjW czqWSDQRzmC4f62LRVPLQYkqC1WlSsarz9Eq1Sz6r1tc/ZC+lVuVRsy5kRb1PECk v7SrBUFfOni7pXyRz2W5ppDG6EStxhEt/qm6hDSTrSEImtMparhy76DKTt0ZDxIW B31RY8RDfBvwfw31QAhhm4i9a5lB0GI0Y8p+Ow7J3hR11cBvBqirXrVzXDKHQs2u XKG7XpEK34xtdiOSQmiIxkSUOeIeoL3cMjJyW8E8CxgpWwQDZ6EL2H4sG5QcVyQn sGS19E1J5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:00 2026 by rpki-client