This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer (raw, json) Hash identifier: 38eTdT/9QjK07pHI4x7Mp6cQd7Zv5gi22TcF7FRXNbA= Subject key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113924DDA16BEE1A9DE41C252F8BF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41835 IP: 91.210.244.0/22 IP: 193.203.206.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:39:24:dd:a1:6b:ee:1a:9d:e4:1c:25:2f:8b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:91:86:9b:96:2d:ca:3c:00:03:93:7f:7e: f3:7b:85:93:e1:e6:67:06:d9:f2:d2:67:f7:94:02: 23:3c:d7:fc:9e:04:6c:53:8b:6d:89:3c:44:0b:1a: 0f:a5:ac:c2:29:25:a9:55:2e:6e:05:a2:6d:a2:cc: b5:4b:39:15:9d:47:92:f6:3c:07:94:73:5e:28:56: c1:03:95:40:9c:57:29:69:47:d0:24:3e:60:e0:ee: 8a:7f:42:ff:a5:22:a1:82:c2:e4:e7:09:5a:02:ca: b4:7c:db:9f:19:8f:59:62:da:8f:0a:a3:41:23:c4: e3:9d:ad:74:b0:ff:87:9c:e7:39:ce:80:4f:e7:95: bf:4f:9e:19:f5:f8:7f:58:7f:e5:a5:75:44:b6:93: b4:e4:0d:1a:f4:f6:7c:be:73:95:04:92:63:2f:4f: 74:b5:43:45:da:eb:0e:39:3f:fa:5a:96:75:df:a6: 6e:af:75:3f:51:b9:56:71:54:54:1f:f1:bf:75:63: d8:58:84:8c:53:79:0a:34:ee:61:d2:f7:fa:09:12: d7:38:fd:18:4d:98:23:38:a2:6e:02:d5:be:e7:02: 02:c4:cb:8a:60:8a:44:0a:21:7e:fd:a9:7f:6d:e5: f0:44:4d:bc:3b:b0:53:c1:50:0d:21:3e:71:e2:2f: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.244.0/22 193.203.206.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41835 Signature Algorithm: sha256WithRSAEncryption 8d:a7:94:96:03:80:4c:19:7b:7f:2f:53:00:8e:81:74:6d:5c: c2:c6:99:04:44:f3:32:85:1f:5e:22:71:c2:f2:60:30:68:0c: 7f:52:84:8b:62:9a:6e:53:6b:e3:25:22:ac:9e:5e:10:91:d1: 6b:20:0e:32:6f:4d:5a:f9:30:37:b5:35:57:76:40:3c:aa:38: 08:33:53:83:e1:75:76:e7:ae:b8:f4:ac:b6:61:e2:2b:8f:84: c6:a5:a7:d6:ea:08:40:b7:8e:10:eb:f1:2a:46:ec:04:96:8d: ea:3c:a0:04:8f:47:c6:a8:ce:0b:d2:ad:cc:de:a5:19:8f:46: ab:0a:97:87:00:a7:94:fd:5e:6d:20:90:6f:ef:c7:19:3a:a4: f8:f6:88:8a:19:79:c7:fb:e8:62:26:b1:fc:58:6d:c5:d0:98: 35:ae:2f:ca:80:ab:9b:86:d2:62:99:29:eb:4e:a2:c2:1b:55: 7b:89:9b:04:d6:e7:1c:16:2e:00:d5:da:e2:f9:dd:9f:ee:29: 3c:e7:1e:2b:9e:ff:94:c4:34:d5:0d:a5:2d:41:41:83:ca:3d: a3:6c:49:81:0a:e5:84:46:b2:86:b0:9b:cb:5b:7a:02:f0:1f: 3a:52:6b:35:ec:35:1d:03:b0:e1:63:8e:59:c3:8e:21:a9:ce: 11:c3:f6:2f -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5ETkk3aFr7hqd5BwlL4vzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTAzMjY4YmI2NjZiMWJkNDIzMDc5ZTVkZjJiZDVhNTRlMWU5ODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9qRhpuWLco8AAOTf37ze4WT4eZn Btny0mf3lAIjPNf8ngRsU4ttiTxECxoPpazCKSWpVS5uBaJtosy1SzkVnUeS9jwH lHNeKFbBA5VAnFcpaUfQJD5g4O6Kf0L/pSKhgsLk5wlaAsq0fNufGY9ZYtqPCqNB I8Tjna10sP+HnOc5zoBP55W/T54Z9fh/WH/lpXVEtpO05A0a9PZ8vnOVBJJjL090 tUNF2usOOT/6WpZ136Zur3U/UblWcVRUH/G/dWPYWISMU3kKNO5h0vf6CRLXOP0Y TZgjOKJuAtW+5wICxMuKYIpECiF+/al/beXwRE28O7BTwVANIT5x4i+WbwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFMoDJou2ZrG9QjB55d8r1aVOHphhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2IzOWE1 OS1iNDI0LTQxM2ItYTY5My0zOWQ0YjNmNTcxMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvYjM5YTU5 LWI0MjQtNDEzYi1hNjkzLTM5ZDRiM2Y1NzEwZi8xL3lnTW1pN1ptc2IxQ01Ibmwz eXZWcFU0ZW1HRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW9L0AwQBwcvOMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCjazANBgkqhkiG9w0BAQsFAAOCAQEAjaeUlgOATBl7fy9TAI6BdG1c wsaZBETzMoUfXiJxwvJgMGgMf1KEi2KablNr4yUirJ5eEJHRayAOMm9NWvkwN7U1 V3ZAPKo4CDNTg+F1dueuuPSstmHiK4+ExqWn1uoIQLeOEOvxKkbsBJaN6jygBI9H xqjOC9KtzN6lGY9GqwqXhwCnlP1ebSCQb+/HGTqk+PaIihl5x/voYiax/FhtxdCY Na4vyoCrm4bSYpkp606iwhtVe4mbBNbnHBYuANXa4vndn+4pPOceK57/lMQ01Q2l LUFBg8o9o2xJgQrlhEayhrCby1t6AvAfOlJrNew1HQOw4WOOWcOOIanOEcP2Lw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:34:59 2026 by rpki-client