This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer (raw, json) Hash identifier: P86jKFlt/N1gZ5u/9kPwxOpPv9Kf8lTPlcDrb6KBAis= Subject key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F858CE56D3653D67959BD5FB451BD1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34683 IP: 87.254.96.0/19 IP: 185.69.216.0/22 IP: 195.137.228.0/23 IP: 212.24.192.0/19 IP: 2001:1698::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8c:e5:6d:36:53:d6:79:59:bd:5f:b4:51:bd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca37843f0752224459e6034569a217c8b611564b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:af:eb:a7:f7:df:63:95:f8:48:8b:ca:88:a1: 69:46:5b:cb:0c:54:97:76:79:b9:9c:49:1d:87:2e: dd:1d:27:a2:90:d3:ab:d4:bb:f6:c2:88:83:1a:63: f8:9f:f4:00:80:bc:6c:c8:19:ee:c7:87:cb:4d:f2: 73:a2:44:bf:a3:ee:f2:f4:da:ec:f4:45:1f:e1:ce: 6b:1a:51:4d:42:a4:9e:8d:17:28:9f:bf:7b:75:92: 44:fc:49:61:83:a8:c8:0e:c4:d6:b1:10:16:82:80: cd:ae:24:67:1d:25:ad:d3:d5:36:39:42:71:1c:09: 6a:47:62:e8:ea:21:48:02:0d:0f:c3:85:98:63:5e: 4c:32:cb:46:d3:d7:09:1c:41:08:b5:a2:c2:c8:35: 14:89:50:33:f2:f4:de:f7:50:df:2e:dd:0c:d5:86: 56:bd:e1:1f:7a:df:e6:6e:a3:11:2b:2b:f4:0d:ed: 34:5f:ce:00:bf:06:72:c1:31:d8:69:f1:40:8b:41: 7f:e5:f4:a5:c8:4c:84:ba:85:47:be:54:64:84:46: 66:bd:75:13:45:30:11:1a:43:5a:a6:1b:dc:c5:09: 0f:0c:8b:f3:ce:ca:f8:c5:16:8d:42:25:5b:57:7c: 79:22:93:b7:6d:8d:7d:af:44:63:5a:31:7d:61:03: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.96.0/19 185.69.216.0/22 195.137.228.0/23 212.24.192.0/19 IPv6: 2001:1698::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34683 Signature Algorithm: sha256WithRSAEncryption 28:be:20:e8:c3:5b:a7:c5:27:a1:1b:1f:4e:ff:f5:71:32:4f: e4:dc:2d:49:71:df:52:d2:1d:5a:27:5d:82:fc:29:da:ca:65: 3d:e1:3b:b8:8d:88:85:77:e0:44:68:30:83:f4:30:ac:d4:58: 30:25:e9:52:e1:c0:2b:d5:5b:4c:55:81:6f:c5:b4:cf:1d:a4: 46:86:f8:92:a8:6f:17:6b:35:c0:54:39:2a:9f:0c:c6:e4:0a: 51:19:c0:c1:30:15:f8:f6:7f:ed:f4:d0:8a:86:9f:26:0e:aa: 82:39:e1:37:ac:96:3f:f3:c6:8a:ca:af:05:eb:6c:73:ba:78: eb:ac:29:f7:34:8c:68:fc:c7:05:29:02:bd:6c:17:ab:5f:c5: 21:a0:7f:6b:3e:bd:90:01:5c:d9:08:cb:01:1b:c4:fe:5f:c2: 70:05:f3:63:40:54:8e:5c:7c:5e:4a:16:63:d5:f0:2d:b9:fb: 66:2d:f5:47:ab:50:f3:42:66:bc:35:53:e6:1e:5e:71:93:4b: 0b:9b:bb:f0:1e:a0:ab:66:8d:7a:b0:6a:3d:42:d3:57:50:f8: ea:ff:2f:22:c8:13:d3:f5:e6:72:78:84:7b:dc:6f:6a:58:48: 69:0e:0c:6e:43:98:e2:5d:ca:91:4f:08:b9:89:0f:2f:00:c1: 0b:32:40:09 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/hYzlbTZT1nlZvV+0Ub0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM3ODQzZjA3NTIyMjQ0NTllNjAzNDU2OWEyMTdjOGI2MTE1NjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK/rp/ffY5X4SIvKiKFpRlvLDFSX dnm5nEkdhy7dHSeikNOr1Lv2woiDGmP4n/QAgLxsyBnux4fLTfJzokS/o+7y9Nrs 9EUf4c5rGlFNQqSejRcon797dZJE/Elhg6jIDsTWsRAWgoDNriRnHSWt09U2OUJx HAlqR2Lo6iFIAg0Pw4WYY15MMstG09cJHEEItaLCyDUUiVAz8vTe91DfLt0M1YZW veEfet/mbqMRKyv0De00X84AvwZywTHYafFAi0F/5fSlyEyEuoVHvlRkhEZmvXUT RTARGkNaphvcxQkPDIvzzsr4xRaNQiVbV3x5IpO3bY19r0RjWjF9YQM5lQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFMo3hD8HUiJEWeYDRWmiF8i2EVZLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2Q3MTZj ZC1kNzlmLTQ0ODQtOTY4NS04ZmU3ODRlMzFlNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvZDcxNmNk LWQ3OWYtNDQ4NC05Njg1LThmZTc4NGUzMWU1ZC8xL3lqZUVQd2RTSWtSWjVnTkZh YUlYeUxZUlZrcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFV/5gAwQCuUXYAwQBw4nkAwQF1BjAMA0EAgAC MAcDBQAgARaYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCHezANBgkqhkiG9w0B AQsFAAOCAQEAKL4g6MNbp8UnoRsfTv/1cTJP5NwtSXHfUtIdWiddgvwp2splPeE7 uI2IhXfgRGgwg/QwrNRYMCXpUuHAK9VbTFWBb8W0zx2kRob4kqhvF2s1wFQ5Kp8M xuQKURnAwTAV+PZ/7fTQioafJg6qgjnhN6yWP/PGisqvBetsc7p466wp9zSMaPzH BSkCvWwXq1/FIaB/az69kAFc2QjLARvE/l/CcAXzY0BUjlx8XkoWY9XwLbn7Zi31 R6tQ80JmvDVT5h5ecZNLC5u78B6gq2aNerBqPULTV1D46v8vIsgT0/XmcniEe9xv alhIaQ4MbkOY4l3KkU8IuYkPLwDBCzJACQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:30 2026 by rpki-client