This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer File: ybHXw7TuhyMzamWFOapzRvI9Z3I.cer (raw, json) Hash identifier: ICAyIqaEdjPDsbASoPwpzd5bZAzZPllc5EvbZqcKvds= Subject key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC843CF023BB3BD47C25E75795F011A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43528 IP: 193.201.192.0/22 IP: 2a0c:a5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:43:cf:02:3b:b3:bd:47:c2:5e:75:79:5f:01:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:b2:74:c8:c4:66:e1:42:d4:95:48:ff:9a: c6:06:8f:86:c7:19:be:10:45:8b:5b:0f:2c:33:4f: 9a:c3:8d:6d:04:a9:b1:04:4a:e4:84:a4:0d:34:5f: b9:72:40:19:fc:08:06:67:6b:f3:4a:ca:c4:5f:c9: 0b:91:b0:3d:54:25:ee:c2:e2:27:d8:2d:d9:7a:b9: ea:6a:a0:64:1c:f5:5d:f2:72:5e:7d:0e:2f:62:df: 64:9e:15:20:91:94:23:ba:22:a5:d0:c2:dd:36:9f: da:7a:aa:76:44:53:0a:82:c7:d2:a6:46:58:aa:07: 12:db:01:5e:7b:25:b5:21:cd:20:89:9d:64:c3:0e: ca:e5:6a:a3:1a:d4:f6:4f:fc:c9:60:31:cf:b6:3a: 0c:40:af:56:38:19:df:ea:9d:34:07:47:85:92:fc: 35:af:cd:97:2e:7a:f3:bb:44:33:6d:f6:85:14:1e: 49:27:98:5f:bb:b9:ee:3b:91:ac:36:08:95:ef:4f: 10:f6:f7:53:b3:e7:a0:36:9f:ff:4d:ff:01:a5:52: 30:b1:a6:cf:14:58:d3:54:69:80:cc:0e:30:4b:59: e6:66:79:0d:78:49:a2:01:fb:79:0c:dc:a5:47:37: c8:85:87:bb:67:41:5f:df:bc:c5:9a:8b:62:69:24: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.192.0/22 IPv6: 2a0c:a5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43528 Signature Algorithm: sha256WithRSAEncryption 43:b8:5c:c2:f7:c9:aa:4d:19:de:03:02:06:0b:cf:34:db:19: 42:31:a3:14:9f:11:76:09:2c:ec:9b:92:aa:50:a4:f2:e2:48: a8:a3:8d:57:9c:e0:93:d4:34:19:02:5b:69:ce:26:46:8e:e3: 4c:df:91:55:74:28:26:87:55:cb:5c:7d:4a:6e:61:ae:04:f9: d7:5f:0c:29:d3:b4:66:50:96:82:0a:a6:e3:2c:50:3b:b8:2d: b9:b0:4c:33:7c:b7:40:fe:ee:27:d1:84:d2:f4:d9:d6:5f:40: f1:80:7e:59:56:55:30:4e:dd:c9:72:b9:d2:d4:d3:1a:53:f7: 3f:e0:77:f8:de:41:88:40:98:ce:e8:1d:f6:74:b9:d7:65:fd: 19:ee:e6:1c:eb:84:41:52:e5:92:79:c5:24:67:54:9f:d1:81: e9:b4:a9:20:1a:e1:f6:a4:ea:77:fa:c6:70:f5:e0:48:7d:98: 33:11:49:dc:83:80:36:e5:80:2e:f3:23:4a:04:13:50:69:74: f2:83:6b:f7:40:1e:e1:01:9b:07:a7:42:8e:76:1e:5a:6d:6b: 21:9d:8a:5e:69:26:86:7c:f3:39:d8:b7:fb:a5:c2:16:bd:6a: 0f:b2:f6:8f:f5:b5:29:9b:c8:b4:b1:db:a7:d2:5c:ed:65:b5: 88:bc:7d:6a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yEPPAjuzvUfCXnV5XwEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWIxZDdjM2I0ZWU4NzIzMzM2YTY1ODUzOWFhNzM0NmYyM2Q2NzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfmydMjEZuFC1JVI/5rGBo+Gxxm+ EEWLWw8sM0+aw41tBKmxBErkhKQNNF+5ckAZ/AgGZ2vzSsrEX8kLkbA9VCXuwuIn 2C3ZernqaqBkHPVd8nJefQ4vYt9knhUgkZQjuiKl0MLdNp/aeqp2RFMKgsfSpkZY qgcS2wFeeyW1Ic0giZ1kww7K5WqjGtT2T/zJYDHPtjoMQK9WOBnf6p00B0eFkvw1 r82XLnrzu0QzbfaFFB5JJ5hfu7nuO5GsNgiV708Q9vdTs+egNp//Tf8BpVIwsabP FFjTVGmAzA4wS1nmZnkNeEmiAft5DNylRzfIhYe7Z0Ff37zFmotiaSR5dwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMmx18O07ocjM2plhTmqc0byPWdyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2UwOTRi ZC0wOTFjLTQzM2ItYmY1OC0xNjRjYzZhNGVkMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvZTA5NGJk LTA5MWMtNDMzYi1iZjU4LTE2NGNjNmE0ZWQxZS8xL3liSFh3N1R1aHlNemFtV0ZP YXB6UnZJOVozSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwcnAMA0EAgACMAcDBQMqDKXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCqCDANBgkqhkiG9w0BAQsFAAOCAQEAQ7hcwvfJqk0Z 3gMCBgvPNNsZQjGjFJ8Rdgks7JuSqlCk8uJIqKONV5zgk9Q0GQJbac4mRo7jTN+R VXQoJodVy1x9Sm5hrgT5118MKdO0ZlCWggqm4yxQO7gtubBMM3y3QP7uJ9GE0vTZ 1l9A8YB+WVZVME7dyXK50tTTGlP3P+B3+N5BiECYzugd9nS512X9Ge7mHOuEQVLl knnFJGdUn9GB6bSpIBrh9qTqd/rGcPXgSH2YMxFJ3IOANuWALvMjSgQTUGl08oNr 90Ae4QGbB6dCjnYeWm1rIZ2KXmkmhnzzOdi3+6XCFr1qD7L2j/W1KZvItLHbp9Jc 7WW1iLx9ag== -----END CERTIFICATE-----Generated at Thu Jan 29 14:41:03 2026 by rpki-client