This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygHfSTk2pi4uyamAWo-ja4M1vVA.cer File: ygHfSTk2pi4uyamAWo-ja4M1vVA.cer (raw, json) Hash identifier: CpIN54SC3cmQDfLyi5ZZ4e6ek5jeh19AYNUi4piE4Gc= Subject key identifier: CA:01:DF:49:39:36:A6:2E:2E:C9:A9:80:5A:8F:A3:6B:83:35:BD:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDA7564CD86E37EEB4A1C13BEDA4A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56407 IP: 188.190.128.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a7:56:4c:d8:6e:37:ee:b4:a1:c1:3b:ed:a4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca01df493936a62e2ec9a9805a8fa36b8335bd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:4f:51:2f:35:35:26:16:70:99:88:05:a9: 9a:6a:2a:47:13:e0:ce:6a:d9:64:22:1b:d3:ab:0f: c8:ad:51:01:39:56:62:85:5d:8a:3d:8e:39:15:4f: 26:67:86:d0:e8:1f:fa:fc:f4:dd:12:11:c1:42:29: ef:47:b2:3e:b5:22:4a:ad:76:88:6f:84:a4:85:62: e4:4b:46:6f:a2:44:13:fc:6a:09:21:8a:7c:d5:45: 0d:dc:69:a6:b1:ba:7f:b9:f0:19:88:9d:42:a0:a4: 6a:35:25:da:fc:bd:9c:14:42:2e:a8:92:25:44:6c: ab:31:3b:d1:08:e8:62:4a:58:cd:7b:00:f9:51:2a: e5:d7:08:39:64:d7:d7:3a:88:54:8c:a1:8c:d4:ce: f1:7f:41:22:6d:43:6d:6c:59:b8:08:16:c4:2c:0c: 73:4a:ec:f2:5e:5a:b0:9a:b4:68:13:7b:4f:8a:4d: 9c:9d:f6:5c:e0:5c:d5:62:6f:72:fc:15:62:fe:d1: 6a:dc:0f:f6:bd:b4:98:52:4a:2a:8b:04:63:c7:92: f9:3c:de:65:ed:76:54:63:0e:a7:6a:df:4f:71:5e: 62:6f:c3:96:c0:43:46:c8:c3:8b:e9:8c:98:12:63: 55:5f:5c:86:d8:27:51:65:1b:8c:4f:8e:45:5d:51: 99:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:01:DF:49:39:36:A6:2E:2E:C9:A9:80:5A:8F:A3:6B:83:35:BD:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.190.128.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56407 Signature Algorithm: sha256WithRSAEncryption 2a:af:d2:67:bb:ce:2f:70:9b:74:5a:68:12:ad:c6:f3:0f:91: ac:12:cb:96:1e:ca:f0:49:42:8c:d5:b8:41:2c:5f:ee:8c:be: b1:d8:36:ea:f0:d1:36:02:4b:9f:4b:09:62:f0:54:44:84:7b: 6b:09:bd:a9:39:5a:54:b3:cf:6e:35:9a:35:9b:2f:16:02:15: eb:45:e0:48:d3:ca:67:43:58:36:b0:33:e6:26:da:0c:c4:19: 5e:02:dd:a0:3a:f8:2c:9f:cd:1a:76:f1:0f:72:9a:4e:f1:27: 46:ac:29:31:0f:50:a7:b6:07:b1:81:99:be:c6:bd:4e:84:14: 36:5d:e2:30:8a:4c:bf:4d:60:0a:e9:c0:be:c9:3b:3b:e3:0e: 87:b5:6d:bf:79:3d:8b:80:ad:d6:c4:ea:db:73:cc:87:96:c3: 28:7c:3d:3c:60:13:c5:fd:9f:e3:c5:76:7e:85:c3:57:d3:f2: 1c:cc:40:69:06:a6:de:e6:ce:a8:67:9e:cc:1c:7c:c6:d4:78: c4:f9:66:d9:77:55:f7:9e:07:ce:35:e6:7b:f3:10:2c:52:af: ec:fa:18:26:41:44:68:b8:23:2d:91:0f:ff:9f:85:83:45:27: cc:63:96:e1:a2:b2:22:2e:a2:9f:2a:df:e7:ce:4a:ea:a9:c3: 34:bc:86:e9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87adWTNhuN+60ocE77aSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTAxZGY0OTM5MzZhNjJlMmVjOWE5ODA1YThmYTM2YjgzMzViZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAxPUS81NSYWcJmIBamaaipHE+DO atlkIhvTqw/IrVEBOVZihV2KPY45FU8mZ4bQ6B/6/PTdEhHBQinvR7I+tSJKrXaI b4SkhWLkS0ZvokQT/GoJIYp81UUN3Gmmsbp/ufAZiJ1CoKRqNSXa/L2cFEIuqJIl RGyrMTvRCOhiSljNewD5USrl1wg5ZNfXOohUjKGM1M7xf0EibUNtbFm4CBbELAxz SuzyXlqwmrRoE3tPik2cnfZc4FzVYm9y/BVi/tFq3A/2vbSYUkoqiwRjx5L5PN5l 7XZUYw6nat9PcV5ib8OWwENGyMOL6YyYEmNVX1yG2CdRZRuMT45FXVGZ+wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMoB30k5NqYuLsmpgFqPo2uDNb1QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzY0OWU4 MS1jY2EyLTQwNGMtOThhNS05NjI3NThhM2Q1ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNjQ5ZTgx LWNjYTItNDA0Yy05OGE1LTk2Mjc1OGEzZDVlYS8xL3lnSGZTVGsycGk0dXlhbUFX by1qYTRNMXZWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFvL6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDcVzANBgkqhkiG9w0BAQsFAAOCAQEAKq/SZ7vOL3CbdFpoEq3G8w+RrBLLlh7K 8ElCjNW4QSxf7oy+sdg26vDRNgJLn0sJYvBURIR7awm9qTlaVLPPbjWaNZsvFgIV 60XgSNPKZ0NYNrAz5ibaDMQZXgLdoDr4LJ/NGnbxD3KaTvEnRqwpMQ9Qp7YHsYGZ vsa9ToQUNl3iMIpMv01gCunAvsk7O+MOh7Vtv3k9i4Ct1sTq23PMh5bDKHw9PGAT xf2f48V2foXDV9PyHMxAaQam3ubOqGeezBx8xtR4xPlm2XdV954HzjXme/MQLFKv 7PoYJkFEaLgjLZEP/5+Fg0UnzGOW4aKyIi6inyrf585K6qnDNLyG6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:01 2026 by rpki-client