This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer (raw, json) Hash identifier: 7YtQdhXeCeCyjFcyDHXUXpypXdM6TqZVE9hd3U5gh5k= Subject key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B762D4C89B96ADBD597258AB08CEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9092 IP: 185.112.132.0/22 IP: 213.156.224.0/19 IP: 2a00:db0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:2d:4c:89:b9:6a:db:d5:97:25:8a:b0:8c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:1f:ad:ba:2f:21:c9:62:be:9e:40:99:fc: 91:8d:93:df:b3:81:27:48:81:ef:09:46:24:0e:1b: 2c:50:40:d7:f5:88:43:f9:91:f5:85:5b:7e:58:88: 45:c2:35:0b:ac:25:a1:c1:57:12:50:2c:5d:62:47: e0:c6:16:07:48:89:09:22:25:10:24:06:26:af:fe: a6:6f:ce:0c:3a:b7:fc:36:19:29:39:01:cb:41:74: f2:3d:44:82:1d:66:c3:ee:ef:4c:37:45:93:7c:ab: 5e:45:b3:d3:3d:f8:2a:1b:dd:05:84:38:46:2d:05: 9d:40:32:7e:0d:12:35:98:8d:73:cf:9e:22:88:39: aa:ac:5f:46:ba:13:d9:dd:48:75:f3:95:60:54:7f: 9d:b5:bd:e5:9a:bb:c3:14:24:df:4f:de:5d:05:22: 3c:e9:84:4f:a7:e0:08:97:8f:f2:ab:00:52:2e:7e: 27:93:bb:d2:48:c2:59:6e:80:73:18:9f:ca:f3:d1: ae:48:88:06:89:61:38:b6:e5:25:64:58:0f:8f:ee: e9:0b:11:63:1f:1a:2f:56:c7:a1:6c:ad:3f:77:30: 2e:18:30:30:42:16:5a:19:d3:12:6b:d8:a9:d0:ce: 92:50:37:c6:8e:3e:16:f5:8b:21:1c:c9:95:25:24: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.132.0/22 213.156.224.0/19 IPv6: 2a00:db0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9092 Signature Algorithm: sha256WithRSAEncryption 1b:62:a9:c2:2b:fe:c8:c9:0a:b9:64:95:e1:eb:9c:2d:d8:a5: 82:5e:4f:4c:ba:e5:32:c2:cd:e8:d2:ad:d9:71:0d:26:ef:6c: d7:2a:ef:24:1b:22:3c:7f:21:47:0b:3f:8d:76:96:55:99:fb: c8:32:c3:a1:87:1c:c5:c5:40:10:12:0a:3d:68:04:e0:28:d9: 9d:d3:f6:4e:8f:d2:90:b0:82:c3:de:c7:6e:bc:ae:c9:d5:35: b7:78:2f:7a:e3:5e:af:dd:83:ff:96:7a:bf:39:8b:19:43:58: e1:18:57:cb:55:bb:d7:89:4a:bc:c7:51:62:a3:a3:d9:a6:9c: b1:a9:88:50:52:0c:af:a3:43:8d:3d:d9:83:aa:d4:c4:b1:aa: 41:93:41:06:c9:92:26:87:89:d7:c8:bd:75:45:1e:02:87:5a: 26:cd:a0:a1:55:5b:9f:3a:11:b3:da:19:aa:2f:c8:89:54:73: 93:be:d2:dc:5e:31:7a:00:bc:51:db:bf:3f:4d:ff:54:fd:a1: fb:86:cd:3f:3a:66:14:f6:2d:96:3f:63:a3:c3:ae:8d:65:f6: 42:79:9a:c6:a8:2b:32:3e:1f:0d:79:8a:4e:05:e5:3e:a5:c7: ab:4d:0c:65:f8:66:b5:f4:03:07:74:09:7c:a8:46:94:de:a2: 43:66:fb:ab -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt6W3YtTIm5atvVlyWKsIzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM0YjEzMzg3ZmFiMWRjZjhiNjdmMTZhMGE0Mzc2MDg2MDBjNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFsfrbovIclivp5AmfyRjZPfs4En SIHvCUYkDhssUEDX9YhD+ZH1hVt+WIhFwjULrCWhwVcSUCxdYkfgxhYHSIkJIiUQ JAYmr/6mb84MOrf8NhkpOQHLQXTyPUSCHWbD7u9MN0WTfKteRbPTPfgqG90FhDhG LQWdQDJ+DRI1mI1zz54iiDmqrF9GuhPZ3Uh185VgVH+dtb3lmrvDFCTfT95dBSI8 6YRPp+AIl4/yqwBSLn4nk7vSSMJZboBzGJ/K89GuSIgGiWE4tuUlZFgPj+7pCxFj HxovVsehbK0/dzAuGDAwQhZaGdMSa9ip0M6SUDfGjj4W9YshHMmVJSRqPQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzExN2Nh My1iNjAzLTRkYjgtOTYyNi0wNDA1MjM0YWIzZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvMTE3Y2Ez LWI2MDMtNGRiOC05NjI2LTA0MDUyMzRhYjNmMS8xL3lqU3hNNGY2c2R6NHRuOFdv S1EzWUlZQXhNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuXCEAwQF1ZzgMA0EAgACMAcDBQAqAA2wMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiOEMA0GCSqGSIb3DQEBCwUAA4IBAQAbYqnC K/7IyQq5ZJXh65wt2KWCXk9MuuUyws3o0q3ZcQ0m72zXKu8kGyI8fyFHCz+NdpZV mfvIMsOhhxzFxUAQEgo9aATgKNmd0/ZOj9KQsILD3sduvK7J1TW3eC96416v3YP/ lnq/OYsZQ1jhGFfLVbvXiUq8x1Fio6PZppyxqYhQUgyvo0ONPdmDqtTEsapBk0EG yZImh4nXyL11RR4Ch1omzaChVVufOhGz2hmqL8iJVHOTvtLcXjF6ALxR278/Tf9U /aH7hs0/OmYU9i2WP2Ojw66NZfZCeZrGqCsyPh8NeYpOBeU+pcerTQxl+Ga19AMH dAl8qEaU3qJDZvur -----END CERTIFICATE-----Generated at Sun Jan 18 16:41:09 2026 by rpki-client