This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer File: yohtVYfshfcSQs1XztQJVEUoFo0.cer (raw, json) Hash identifier: dGVw4FzOQ9lpyBU1TYDuiMXDxHb3YQl8PcwvLzrohCE= Subject key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37D25CFCC773CB4BD7BE1B20C83978 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203909 IP: 2001:678:d88::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d2:5c:fc:c7:73:cb:4b:d7:be:1b:20:c8:39:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca886d5587ec85f71242cd57ced409544528168d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:0d:1b:20:01:7f:fd:12:d1:a3:25:f9:b9: 67:41:d5:3f:61:42:eb:1f:10:95:a7:d7:99:c0:2b: 8c:9b:dc:9f:e3:68:c1:1e:db:d0:52:5c:a1:dc:b3: 47:c8:d3:bd:1d:51:17:91:fa:b0:bd:1c:e4:31:bd: b9:4a:5a:30:11:e5:15:a9:18:fa:d6:7d:f6:1c:1f: 59:38:28:d9:fa:6a:77:7b:40:70:2d:e6:5b:df:b0: 3f:ef:9c:70:98:ff:89:68:9d:25:75:3b:23:8d:8e: 57:17:5e:85:97:3f:f7:80:02:23:52:6d:ff:ce:2a: 18:b5:42:ee:ec:2b:32:46:f3:7b:5a:1a:19:12:3c: cc:fb:6f:8f:a1:e4:78:d6:7b:3e:60:1c:ad:33:2e: 73:b6:95:51:f2:6e:9d:f3:d2:de:10:96:4a:be:21: 44:93:0d:33:66:58:39:0a:ec:c5:5a:8b:bb:53:51: bf:99:60:af:b2:25:ae:bc:c2:47:4f:65:f1:96:a2: f9:45:4d:d7:08:de:b7:96:c0:5b:83:1a:93:e5:5e: a2:b9:e6:00:fd:d2:18:0f:1e:00:eb:5c:26:5b:59: 73:64:60:c9:17:47:e9:74:dc:85:1c:15:e5:9c:71: 79:ca:60:f7:67:35:ff:83:59:05:cc:ac:65:55:bd: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d88::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203909 Signature Algorithm: sha256WithRSAEncryption 20:88:ac:c3:f6:59:a9:d0:f2:33:df:db:ff:b3:58:af:22:3f: 70:a0:d6:ac:77:7f:23:b7:46:e7:fc:3f:cf:d7:e8:88:96:e6: fc:37:33:9b:02:d3:44:7b:a3:07:b7:bb:b2:7d:9c:3f:be:5b: fd:1d:0c:25:b0:8b:2a:ff:31:6e:d5:80:31:04:2b:8e:65:8f: e2:fd:dc:4b:8a:c9:98:2a:df:56:9f:29:54:96:55:1d:d8:23: cb:78:8d:6c:ba:45:79:33:af:6d:45:5e:9b:97:e6:52:ed:6b: 27:a9:27:6c:be:0c:5a:cf:e8:67:66:b3:85:2d:7e:71:2d:44: 36:66:a3:ef:6b:72:16:95:2e:e3:25:29:84:10:2f:51:d9:9b: 55:88:ec:df:e7:57:d2:47:0b:27:b0:15:14:53:2f:0b:5d:ed: 8d:e6:85:55:17:04:0e:70:64:29:af:81:ce:43:8b:8d:e2:f8: a6:26:7a:7d:92:05:45:20:b8:d8:51:ba:a6:93:0a:ce:72:b3: f7:c7:04:3a:85:8c:17:b1:78:58:e3:f8:33:31:c3:44:21:9e: 9d:b8:a9:a1:86:d8:99:9f:ac:5e:78:6f:75:ab:f0:b8:4c:67: 9a:7e:6d:85:17:a5:c3:1b:22:c6:24:06:f9:5f:98:48:2a:f2: da:d4:01:3b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt+N9Jc/Mdzy0vXvhsgyDl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg4NmQ1NTg3ZWM4NWY3MTI0MmNkNTdjZWQ0MDk1NDQ1MjgxNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaMNGyABf/0S0aMl+blnQdU/YULr HxCVp9eZwCuMm9yf42jBHtvQUlyh3LNHyNO9HVEXkfqwvRzkMb25SlowEeUVqRj6 1n32HB9ZOCjZ+mp3e0BwLeZb37A/75xwmP+JaJ0ldTsjjY5XF16Flz/3gAIjUm3/ zioYtULu7CsyRvN7WhoZEjzM+2+PoeR41ns+YBytMy5ztpVR8m6d89LeEJZKviFE kw0zZlg5CuzFWou7U1G/mWCvsiWuvMJHT2XxlqL5RU3XCN63lsBbgxqT5V6iueYA /dIYDx4A61wmW1lzZGDJF0fpdNyFHBXlnHF5ymD3ZzX/g1kFzKxlVb3ilQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMqIbVWH7IX3EkLNV87UCVRFKBaNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2ZlODJk MS0xNTc1LTQ3YzEtOWYyMi1jN2UyNTIwYzRjZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvZmU4MmQx LTE1NzUtNDdjMS05ZjIyLWM3ZTI1MjBjNGNlYS8xL3lvaHRWWWZzaGZjU1FzMVh6 dFFKVkVVb0ZvMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA2IMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMchTANBgkqhkiG9w0BAQsFAAOCAQEAIIisw/ZZqdDyM9/b/7NYryI/cKDW rHd/I7dG5/w/z9foiJbm/DczmwLTRHujB7e7sn2cP75b/R0MJbCLKv8xbtWAMQQr jmWP4v3cS4rJmCrfVp8pVJZVHdgjy3iNbLpFeTOvbUVem5fmUu1rJ6knbL4MWs/o Z2azhS1+cS1ENmaj72tyFpUu4yUphBAvUdmbVYjs3+dX0kcLJ7AVFFMvC13tjeaF VRcEDnBkKa+BzkOLjeL4piZ6fZIFRSC42FG6ppMKznKz98cEOoWMF7F4WOP4MzHD RCGenbipoYbYmZ+sXnhvdavwuExnmn5thRelwxsixiQG+V+YSCry2tQBOw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:19 2026 by rpki-client