This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer File: yh79jmMWnY_b-YtxOfzd7a8BbLI.cer (raw, json) Hash identifier: yNOj751zaS7Db+qtX09MA2WBLucm90SZinHkakjtAh4= Subject key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAFC9BA1946E0DF609F968EED7F366 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29003 IP: 81.90.48.0/20 IP: 185.95.220.0/22 IP: 2a02:8f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:fc:9b:a1:94:6e:0d:f6:09:f9:68:ee:d7:f3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:b6:24:c0:38:6b:56:01:e4:35:9a:3b:cf: a3:28:01:b4:b5:59:98:81:de:e8:fc:4e:55:40:c2: 82:7c:10:e4:f7:68:06:4e:60:21:70:91:05:8e:01: 35:cd:eb:21:3e:0b:87:aa:49:93:33:e2:50:44:82: 05:94:a2:f4:8b:14:e7:18:41:71:aa:1c:fe:bb:49: ac:c6:c3:4a:0d:1b:9d:88:74:2c:6d:ae:a1:1d:86: 21:a5:ab:fc:58:39:2b:ea:b9:67:ea:6b:87:7a:12: 89:22:7a:6b:3c:b3:d1:a1:88:c9:77:f1:89:c8:32: 65:49:da:d4:23:8e:c0:68:14:50:4d:e4:68:2b:84: 2b:46:29:9a:81:9d:67:4f:6d:7c:c4:90:c1:77:45: 34:ad:f5:34:17:63:20:73:a3:41:6d:e5:24:a9:7f: 59:98:31:23:ca:f7:94:a7:fc:48:fd:db:9a:86:d6: e4:56:87:8d:08:a6:eb:0a:de:a0:c9:1a:f9:22:24: df:ab:f4:c7:f1:96:69:9f:63:4c:1b:d7:90:64:54: b3:fe:7f:1e:a0:d8:5d:26:88:b5:61:7f:fc:40:3b: e4:2c:dd:60:9f:4f:2f:91:e1:db:5d:f6:c0:70:d9: af:96:7d:df:3e:8d:ed:bf:31:8d:21:87:3e:c7:4c: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.48.0/20 185.95.220.0/22 IPv6: 2a02:8f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29003 Signature Algorithm: sha256WithRSAEncryption 0c:c2:5d:b1:af:8d:d4:c2:a9:b4:05:c2:4c:2b:6d:2f:f8:2a: 44:45:60:f5:69:7d:61:5c:68:88:a2:e1:e6:28:da:15:d4:bd: 63:ac:9c:e9:05:76:09:48:eb:e6:20:13:41:08:74:59:97:5f: e1:c7:83:5d:cb:4d:95:2e:9a:16:7e:28:a5:d2:90:6a:fd:70: e2:e4:e4:b1:d2:19:63:89:4f:05:15:17:0c:e4:b7:ca:52:cc: e0:24:50:76:23:93:4b:7e:95:fe:9c:74:96:8a:fc:61:5f:23: 4b:67:6f:5b:f9:7f:2a:a8:3b:f1:d6:f7:ca:12:77:7b:a4:3d: 9d:c9:8a:2d:8c:40:e0:45:09:ab:37:33:b5:2b:ec:5b:56:64: 1f:29:68:38:a0:a6:9d:fc:75:25:d5:fd:a0:15:0f:e2:88:28: 49:1a:a3:e8:5b:0c:f1:7b:d2:00:17:f1:c4:43:a9:4c:a7:b4: 7a:ce:85:2f:19:d1:4d:dd:92:d5:51:0d:b2:58:00:33:b5:35: e1:30:85:d1:82:82:b3:03:79:b0:47:5d:ff:64:5c:cb:52:92: c8:91:4a:bf:0a:db:7f:7e:b5:07:15:3a:08:c4:b9:68:ab:a6: e5:72:93:bb:8f:e2:6d:39:c8:82:b6:a0:56:0b:e5:5a:1d:f3: 8f:06:2e:67 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9yvyboZRuDfYJ+Wju1/NmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFlZmQ4ZTYzMTY5ZDhmZGJmOThiNzEzOWZjZGRlZGFmMDE2Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuG2JMA4a1YB5DWaO8+jKAG0tVmY gd7o/E5VQMKCfBDk92gGTmAhcJEFjgE1zeshPguHqkmTM+JQRIIFlKL0ixTnGEFx qhz+u0msxsNKDRudiHQsba6hHYYhpav8WDkr6rln6muHehKJInprPLPRoYjJd/GJ yDJlSdrUI47AaBRQTeRoK4QrRimagZ1nT218xJDBd0U0rfU0F2Mgc6NBbeUkqX9Z mDEjyveUp/xI/duahtbkVoeNCKbrCt6gyRr5IiTfq/TH8ZZpn2NMG9eQZFSz/n8e oNhdJoi1YX/8QDvkLN1gn08vkeHbXfbAcNmvln3fPo3tvzGNIYc+x0z2BQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFMoe/Y5jFp2P2/mLcTn83e2vAWyyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkL2Q5NjFm ZS1kOGFhLTQ4ZTUtOTZmZC1mMDdmMDZjYmVhMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvZDk2MWZl LWQ4YWEtNDhlNS05NmZkLWYwN2YwNmNiZWEyZC8xL3loNzlqbU1XbllfYi1ZdHhP ZnpkN2E4QmJMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUVowAwQCuV/cMA0EAgACMAcDBQAqAgjwMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnFLMA0GCSqGSIb3DQEBCwUAA4IBAQAMwl2x r43Uwqm0BcJMK20v+CpERWD1aX1hXGiIouHmKNoV1L1jrJzpBXYJSOvmIBNBCHRZ l1/hx4Ndy02VLpoWfiil0pBq/XDi5OSx0hljiU8FFRcM5LfKUszgJFB2I5NLfpX+ nHSWivxhXyNLZ29b+X8qqDvx1vfKEnd7pD2dyYotjEDgRQmrNzO1K+xbVmQfKWg4 oKad/HUl1f2gFQ/iiChJGqPoWwzxe9IAF/HEQ6lMp7R6zoUvGdFN3ZLVUQ2yWAAz tTXhMIXRgoKzA3mwR13/ZFzLUpLIkUq/Ctt/frUHFToIxLloq6blcpO7j+JtOciC tqBWC+VaHfOPBi5n -----END CERTIFICATE-----Generated at Tue Jan 27 11:34:20 2026 by rpki-client