This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer File: ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer (raw, json) Hash identifier: +X2eXfGLhJ7QPo5R7ecsBhVavpd90viK8VT4+aS/SQ8= Subject key identifier: CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C055ED9053892674263C730F5D572F29F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 16:10:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201937 IP: 2a0b:67c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:5e:d9:05:38:92:67:42:63:c7:30:f5:d5:72:f2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 16:10:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca69e1e53d8c2f3cff7f794b20f630c781f0dbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:d5:86:ee:2b:af:fb:6b:a0:0a:60:f3:23: 56:fc:16:cc:e5:d8:77:22:10:8f:d1:c0:7e:37:c9: d9:ed:d0:6e:29:04:df:57:07:7a:d2:ba:c6:a0:9d: cc:0e:a7:d4:cd:93:e8:b8:26:6b:ef:d6:19:23:75: 15:05:cb:ec:b6:c5:0f:11:5f:6a:42:26:82:52:c7: b3:b2:d3:63:fa:15:7c:92:a8:6a:a8:05:b0:a9:da: 04:45:01:db:35:62:e1:0f:74:0c:b0:f2:67:d5:bb: 72:39:4c:28:e3:2b:e3:f8:0b:fc:2c:ba:0a:5d:54: 29:92:75:0f:99:65:74:ef:5d:6b:63:9a:53:7c:3b: 1b:6d:26:61:3d:2a:86:eb:5e:33:33:21:91:ed:e0: 40:33:c5:9c:dc:6e:37:2d:df:5d:fa:3b:e8:22:d4: 8a:41:3a:06:13:ab:66:e4:97:96:6a:f7:be:06:a5: f6:3b:ca:ed:6c:d5:00:86:65:02:fe:f3:5e:66:3c: 53:55:29:5e:47:8a:94:36:a8:ec:5a:66:82:ae:7a: c3:62:27:14:8b:e4:bb:69:2a:32:81:e0:67:49:85: 40:90:88:58:d1:14:8f:48:6e:5e:71:cf:e1:ba:9a: 97:8c:f3:a8:73:60:6e:5c:cf:80:92:01:e8:ad:85: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:67c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201937 Signature Algorithm: sha256WithRSAEncryption 59:f0:3f:fa:a6:58:a5:ad:87:54:28:18:1b:9c:82:9d:26:ba: c0:c6:05:8c:75:dd:b3:5b:02:53:50:45:62:a6:59:a6:9d:7d: c5:76:5c:95:11:de:6d:eb:a7:86:6c:ac:2e:2f:60:3e:dc:c8: b2:e3:56:4e:8d:6b:18:00:c1:99:1d:8d:f5:e4:7d:25:71:7b: 21:6e:9f:a9:4e:52:14:c1:21:41:db:13:42:35:7e:57:07:97: 02:fe:91:36:51:55:04:de:78:0a:c7:65:6c:c5:74:b9:68:c0: 95:e9:03:35:ca:37:05:f3:61:3d:d7:b2:a8:3c:7b:16:a5:1b: 2e:31:7c:86:41:fe:33:77:6f:33:70:aa:77:2c:3d:fd:fe:8a: 95:5c:f9:99:e2:b7:28:d0:d4:68:13:51:75:02:e1:d9:81:9f: 76:cf:4f:81:20:fb:07:3a:fd:1b:77:ae:69:ea:bc:2c:44:be: 61:cf:f4:06:7f:22:2f:41:42:a3:69:7e:93:24:cc:64:cf:0e: 21:05:12:1a:8b:88:98:97:82:f0:ca:d3:b7:87:21:5d:6c:98: 4f:b8:44:48:73:7e:b0:67:79:ee:64:65:d0:79:ec:10:d1:a6: 0c:61:66:b7:c7:5c:c8:86:d4:03:32:db:12:88:91:6d:81:10: 01:1e:f8:97 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZwFXtkFOJJnQmPHMPXVcvKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTYxMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTY5ZTFlNTNkOGMyZjNjZmY3Zjc5NGIyMGY2MzBjNzgxZjBkYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvVhu4rr/troApg8yNW/BbM5dh3 IhCP0cB+N8nZ7dBuKQTfVwd60rrGoJ3MDqfUzZPouCZr79YZI3UVBcvstsUPEV9q QiaCUsezstNj+hV8kqhqqAWwqdoERQHbNWLhD3QMsPJn1btyOUwo4yvj+Av8LLoK XVQpknUPmWV0711rY5pTfDsbbSZhPSqG614zMyGR7eBAM8Wc3G43Ld9d+jvoItSK QToGE6tm5JeWave+BqX2O8rtbNUAhmUC/vNeZjxTVSleR4qUNqjsWmaCrnrDYicU i+S7aSoygeBnSYVAkIhY0RSPSG5ecc/hupqXjPOoc2BuXM+AkgHorYXkgwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFMpp4eU9jC88/395SyD2MMeB8NuyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzQ1NTU1 NS1jNjUxLTRmZTEtYTBhNi0wOTZmYzM3MmQ1MzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNDU1NTU1 LWM2NTEtNGZlMS1hMGE2LTA5NmZjMzcyZDUzMS8xL3ltbmg1VDJNTHp6X2YzbExJ UFl3eDRIdzI3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgtnwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDFNEwDQYJKoZIhvcNAQELBQADggEBAFnwP/qmWKWth1QoGBucgp0musDGBYx1 3bNbAlNQRWKmWaadfcV2XJUR3m3rp4ZsrC4vYD7cyLLjVk6NaxgAwZkdjfXkfSVx eyFun6lOUhTBIUHbE0I1flcHlwL+kTZRVQTeeArHZWzFdLlowJXpAzXKNwXzYT3X sqg8exalGy4xfIZB/jN3bzNwqncsPf3+ipVc+ZnityjQ1GgTUXUC4dmBn3bPT4Eg +wc6/Rt3rmnqvCxEvmHP9AZ/Ii9BQqNpfpMkzGTPDiEFEhqLiJiXgvDK07eHIV1s mE+4REhzfrBnee5kZdB57BDRpgxhZrfHXMiG1AMy2xKIkW2BEAEe+Jc= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:39 2026 by rpki-client