This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer (raw, json) Hash identifier: crYlaMuRLFASaypQHO9eDy9pZ3FUcHfx6vEjAVHyatU= Subject key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E6A4DB005926EB4DD85F0AA8C10C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29283 IP: 80.74.16.0/21 IP: 85.184.64.0/19 IP: 89.33.144.0/21 IP: 94.199.120.0/21 IP: 149.232.176.0/21 IP: 185.6.60.0/22 IP: 213.174.96.0/19 IP: 2a02:6c40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e6:a4:db:00:59:26:eb:4d:d8:5f:0a:a8:c1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:69:03:21:7c:87:d3:3c:f1:31:4c:67:6c: 17:dc:de:d3:2f:16:d3:74:4a:c3:a6:28:a7:35:5a: 87:07:5e:bf:c1:b4:76:bd:2b:32:77:35:ec:84:1a: 8d:bd:2b:fd:d8:bb:94:db:e2:91:66:77:77:3e:0a: e0:e5:b1:ef:0a:84:93:43:bd:5f:b7:b4:83:29:7e: eb:01:20:f8:56:12:03:12:00:b9:2f:b1:e7:50:b8: 2a:51:1a:19:ad:dd:fe:a0:9e:cc:be:eb:eb:0a:34: 76:90:6f:7c:e3:2d:e3:9c:c7:61:ac:a7:cd:90:68: 4b:d4:2f:62:5d:7a:90:bc:87:98:aa:75:23:4c:ee: c0:ec:2e:ed:7b:61:68:7b:5f:27:35:22:37:b2:c3: 06:93:64:87:19:da:a2:2f:9a:e3:7e:5b:dc:a3:ab: 38:7f:fd:68:a6:da:97:aa:b6:d0:b4:2a:1c:6a:25: 46:5b:89:ae:32:56:1e:22:8b:4f:f9:61:d3:7c:fb: 83:d0:51:61:ad:b2:47:c8:ec:dc:3c:f2:2a:20:9c: 38:5a:75:12:5a:fa:34:91:4a:df:ec:ea:7b:d3:7e: 04:70:14:59:a4:84:2a:e0:92:ea:08:db:4c:84:86: d1:31:58:d2:fd:d6:af:b2:e3:83:40:f6:1c:f8:ba: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.74.16.0/21 85.184.64.0/19 89.33.144.0/21 94.199.120.0/21 149.232.176.0/21 185.6.60.0/22 213.174.96.0/19 IPv6: 2a02:6c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29283 Signature Algorithm: sha256WithRSAEncryption 3f:4d:96:73:24:d4:1b:6b:42:55:85:d5:08:87:9e:b4:bb:dd: d5:ca:b6:57:3c:16:8f:aa:5c:3f:27:d4:bf:8a:77:be:fa:40: 64:5f:49:82:49:ad:88:74:a9:2f:3f:48:2d:17:9c:3b:48:7d: 21:46:42:88:61:93:e0:79:71:7d:83:4c:1a:8b:31:7d:31:a4: 01:b0:34:76:f5:6a:fa:fc:31:bc:a9:ed:ac:3f:e1:be:51:95: 43:56:91:b7:10:bb:45:71:fa:56:5e:c3:66:3d:57:04:bf:44: eb:b6:90:dc:f9:d9:81:fa:a1:8e:2a:c5:04:e4:d7:67:fb:cc: 5d:d0:a6:ef:e3:2f:92:15:3f:a0:db:dd:80:74:6d:22:75:28: ca:2c:6c:4d:bf:46:2f:7a:2f:3c:3e:4a:c5:fc:96:51:55:c4: b6:d2:1b:36:5e:14:f0:9a:d4:74:13:90:7c:c0:8e:22:89:2d: 2d:92:53:55:e7:52:92:84:fa:ee:b4:94:a3:9f:50:34:18:56: be:4c:dc:66:04:a7:dc:3f:44:af:0e:d0:04:7f:74:b6:a4:69: 6a:23:7e:60:86:67:85:3d:0b:f7:7f:82:3a:2e:ee:f5:8a:4f: 5b:85:16:29:a2:8e:b2:aa:46:d2:48:bb:17:1f:92:0b:74:ce: 1f:ac:bd:c1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt4NOak2wBZJutN2F8KqMEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWVkNjRjOTNkZGZkZjJmNDliN2VhMWMyM2VhYWQwODcwMjQ5YTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2RpAyF8h9M88TFMZ2wX3N7TLxbT dErDpiinNVqHB16/wbR2vSsydzXshBqNvSv92LuU2+KRZnd3Pgrg5bHvCoSTQ71f t7SDKX7rASD4VhIDEgC5L7HnULgqURoZrd3+oJ7MvuvrCjR2kG984y3jnMdhrKfN kGhL1C9iXXqQvIeYqnUjTO7A7C7te2Foe18nNSI3ssMGk2SHGdqiL5rjflvco6s4 f/1optqXqrbQtCocaiVGW4muMlYeIotP+WHTfPuD0FFhrbJHyOzcPPIqIJw4WnUS Wvo0kUrf7Op7034EcBRZpIQq4JLqCNtMhIbRMVjS/davsuODQPYc+LqN0wIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFMntZMk9398vSbfqHCPqrQhwJJozMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzJhMmFi Mi0zMDk4LTRhMGYtODA5Yy0zNWVkNWI1M2RhMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvMmEyYWIy LTMwOTgtNGEwZi04MDljLTM1ZWQ1YjUzZGEwNS8xL3llMWt5VDNmM3k5SnQtb2NJ LXF0Q0hBa21qTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDUEoQAwQFVbhAAwQDWSGQAwQDXsd4AwQDleiw AwQCuQY8AwQF1a5gMA0EAgACMAcDBQAqAmxAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAnJjMA0GCSqGSIb3DQEBCwUAA4IBAQA/TZZzJNQba0JVhdUIh560u93VyrZX PBaPqlw/J9S/ine++kBkX0mCSa2IdKkvP0gtF5w7SH0hRkKIYZPgeXF9g0waizF9 MaQBsDR29Wr6/DG8qe2sP+G+UZVDVpG3ELtFcfpWXsNmPVcEv0TrtpDc+dmB+qGO KsUE5Ndn+8xd0Kbv4y+SFT+g292AdG0idSjKLGxNv0Yvei88PkrF/JZRVcS20hs2 XhTwmtR0E5B8wI4iiS0tklNV51KShPrutJSjn1A0GFa+TNxmBKfcP0SvDtAEf3S2 pGlqI35ghmeFPQv3f4I6Lu71ik9bhRYpoo6yqkbSSLsXH5ILdM4frL3B -----END CERTIFICATE-----Generated at Wed Jan 7 06:37:48 2026 by rpki-client