This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer File: yikNsvcpBfDbYmsAW6zwiHjRe6w.cer (raw, json) Hash identifier: TjwCj8+w6kNr7B7wsOlYDAkW2EFrebGvLdHmWzm+sdU= Subject key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834B5BA93DF4AE42A21E93168BC76DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.37.101.0/24 IP: 89.47.58.0/23 IP: 185.131.52.0/22 IP: 188.208.140.0/22 IP: 188.241.60.0/22 IP: 188.241.187.0/24 IP: 2a07:ba00::/29 IP: 2a0b:200::/29 IP: 2a0b:7f40::/29 IP: 2a0c:2b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b5:ba:93:df:4a:e4:2a:21:e9:31:68:bc:76:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca290db2f72905f0db626b005bacf08878d17bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:9b:dc:03:7f:d2:fb:fa:e9:93:2d:12:38: e9:86:ff:96:ab:98:8a:42:1d:5e:3e:01:1d:f0:42: 46:87:6e:de:1d:3d:d4:3f:bd:8c:b6:77:df:53:ea: 9f:63:d7:8c:4f:f8:a1:ea:e4:c9:47:83:7f:e0:4e: c1:c7:92:5f:4f:b2:61:f0:3d:e2:4b:bf:2d:56:bc: be:e4:77:c3:2b:c3:ec:0a:de:f7:95:a7:a7:45:03: bc:2b:f6:4a:38:42:02:99:14:a1:85:66:31:56:66: 50:e6:c7:3e:c9:40:3a:30:8d:ca:b8:a9:6b:ed:44: e9:8f:b4:85:12:64:af:c5:20:af:dd:73:f9:fc:ea: 18:55:e4:20:2d:07:b1:08:05:bb:df:49:39:0c:f8: ef:f8:c6:0c:53:64:b2:af:5b:c3:2b:b9:11:ab:95: dd:86:90:f8:be:bb:e7:41:d9:99:8d:48:a9:47:ef: fd:f0:a7:90:df:43:ff:07:da:30:06:06:1a:c2:56: 41:3c:28:d0:50:68:de:8d:91:ac:1c:7d:34:08:fc: 3e:df:1a:36:f6:d7:72:1b:58:31:c3:5c:7d:50:23: 61:75:fe:ce:98:21:d5:6b:a3:34:34:91:6a:6d:13: 97:da:3f:83:78:f0:34:d8:7b:b0:79:56:b4:84:57: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.101.0/24 89.47.58.0/23 185.131.52.0/22 188.208.140.0/22 188.241.60.0/22 188.241.187.0/24 IPv6: 2a07:ba00::/29 2a0b:200::/29 2a0b:7f40::/29 2a0c:2b00::/29 Signature Algorithm: sha256WithRSAEncryption 28:51:bf:a9:51:43:67:3a:5f:83:01:d3:bb:7c:77:11:5f:bb: ff:fb:db:99:11:7a:04:dd:b8:05:2a:2a:b4:02:a4:9d:a1:21: c8:32:b8:d5:ca:d8:5e:89:6a:e9:a0:a9:18:be:c3:fc:89:28: 19:c4:eb:ca:4b:0c:5b:b9:68:4f:7d:55:1b:74:e6:81:be:0b: 3c:61:d5:8b:a9:a2:da:31:7c:ab:c1:ae:c7:a2:47:52:01:e0: 84:67:d2:95:2e:bb:59:5c:cd:c8:cd:9a:de:f6:10:d6:e5:ba: 5c:fe:87:69:9c:c5:3f:4b:f5:a3:1d:30:32:7c:c3:3b:41:05: f4:83:c8:c4:79:de:e5:3f:b0:f4:6f:47:3a:b9:d3:97:6e:aa: 9a:d0:fd:ce:5c:be:ac:de:7b:80:51:98:b7:57:90:e9:1f:fb: 3d:28:5f:23:6f:42:c1:ea:ff:ad:d6:16:81:ef:0e:76:52:90: ea:d3:49:bf:c2:9a:32:31:4c:05:7c:04:e3:8c:a7:28:fa:66: 03:b1:18:c7:80:5f:98:1f:41:50:63:e4:34:7d:42:d3:2c:70: 3e:49:bf:11:f3:fb:36:21:cc:6e:ad:de:95:cf:d2:ee:70:80: db:2c:d4:31:35:0f:12:bb:0d:07:48:62:46:55:91:46:12:23: 78:af:0a:90 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt4NLW6k99K5Coh6TFovHbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTI5MGRiMmY3MjkwNWYwZGI2MjZiMDA1YmFjZjA4ODc4ZDE3YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwSb3AN/0vv66ZMtEjjphv+Wq5iK Qh1ePgEd8EJGh27eHT3UP72MtnffU+qfY9eMT/ih6uTJR4N/4E7Bx5JfT7Jh8D3i S78tVry+5HfDK8PsCt73laenRQO8K/ZKOEICmRShhWYxVmZQ5sc+yUA6MI3KuKlr 7UTpj7SFEmSvxSCv3XP5/OoYVeQgLQexCAW730k5DPjv+MYMU2Syr1vDK7kRq5Xd hpD4vrvnQdmZjUipR+/98KeQ30P/B9owBgYawlZBPCjQUGjejZGsHH00CPw+3xo2 9tdyG1gxw1x9UCNhdf7OmCHVa6M0NJFqbROX2j+DePA02HuweVa0hFdGaQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFMopDbL3KQXw22JrAFus8Ih40XusMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzIxNjk3 My01MTZmLTQ1MDEtOTE2NC03ZjQzNWJmNTUwMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMjE2OTcz LTUxNmYtNDUwMS05MTY0LTdmNDM1YmY1NTAxYy8xL3lpa05zdmNwQmZEYlltc0FX Nnp3aUhqUmU2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDAqBAIAATAkAwQAWSVlAwQBWS86AwQCuYM0AwQCvNCMAwQCvPE8 AwQAvPG7MCIEAgACMBwDBQMqB7oAAwUDKgsCAAMFAyoLf0ADBQMqDCsAMA0GCSqG SIb3DQEBCwUAA4IBAQAoUb+pUUNnOl+DAdO7fHcRX7v/+9uZEXoE3bgFKiq0AqSd oSHIMrjVytheiWrpoKkYvsP8iSgZxOvKSwxbuWhPfVUbdOaBvgs8YdWLqaLaMXyr wa7HokdSAeCEZ9KVLrtZXM3IzZre9hDW5bpc/odpnMU/S/WjHTAyfMM7QQX0g8jE ed7lP7D0b0c6udOXbqqa0P3OXL6s3nuAUZi3V5DpH/s9KF8jb0LB6v+t1haB7w52 UpDq00m/wpoyMUwFfATjjKco+mYDsRjHgF+YH0FQY+Q0fULTLHA+Sb8R8/s2Icxu rd6Vz9LucIDbLNQxNQ8Suw0HSGJGVZFGEiN4rwqQ -----END CERTIFICATE-----Generated at Tue Feb 3 08:12:39 2026 by rpki-client