This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer File: ypJvljURiT-k2fvV5k4PikODfkA.cer (raw, json) Hash identifier: 9VULZjTBUOOF781c1rAcRckYaIz2qx+id+H80YPQsg0= Subject key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E027041585F09E0B880EDE64B913 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.96.136.0/22 IP: 185.175.204.0/22 IP: 185.199.60.0/22 IP: 217.149.104.0/21 IP: 2a00:4ee0::/32 IP: 2a0b:ef80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e0:27:04:15:85:f0:9e:0b:88:0e:de:64:b9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:54:01:60:44:a5:47:f3:30:92:c9:e2:d3: 45:10:10:af:1e:1a:fa:b9:15:e9:e3:0b:21:a5:87: 96:ce:c9:e3:a0:2c:e7:41:77:c9:e2:80:c9:f6:ac: 75:2a:2f:64:f8:05:45:23:0f:a9:ea:95:b9:27:c0: 42:cf:c1:e2:75:6c:ac:37:5d:82:fa:20:37:06:39: 32:ad:10:1a:d2:46:75:c4:ab:4d:76:0c:a5:fd:ef: 47:b2:fc:bc:c8:d0:88:43:db:ac:7d:c1:89:04:21: 5d:31:df:24:ab:15:2f:7d:23:29:7b:ea:f3:97:cc: 43:d3:56:68:f4:7d:a6:7f:26:14:b7:d5:5d:60:87: d7:51:18:44:0f:1b:25:27:1d:81:01:90:e8:f8:c3: 38:14:c5:53:30:d9:bc:23:ca:6b:cc:9b:ef:e5:86: c3:ec:f1:78:d5:cd:72:f0:20:ee:c7:84:16:09:3b: 3e:e2:4c:09:14:d6:f1:1e:13:4b:cc:89:de:a3:a4: c1:15:a5:aa:3d:ed:6e:92:ba:77:25:2b:64:fc:4e: 7b:b3:69:7e:67:8c:bd:5f:5a:30:c6:3f:ee:8b:b6: f2:c7:8b:e5:9f:47:a2:92:89:62:01:68:e3:7e:b3: d4:80:5f:e0:24:a9:92:dd:86:3b:35:75:f8:3f:98: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.136.0/22 185.175.204.0/22 185.199.60.0/22 217.149.104.0/21 IPv6: 2a00:4ee0::/32 2a0b:ef80::/29 Signature Algorithm: sha256WithRSAEncryption 8f:b7:b4:6b:91:ee:55:a1:31:33:3e:da:a5:6d:f5:40:28:67: 08:af:86:cc:93:52:d2:14:c3:bc:c5:71:a2:97:ff:d8:88:70: 7c:a0:a8:e6:90:35:01:46:d0:16:d2:04:59:14:17:51:e1:95: 47:13:3c:b6:03:da:31:c4:2c:d4:ba:4e:57:16:8e:df:de:17: c7:85:f0:d7:a8:84:31:05:75:44:65:10:43:8d:97:bd:ba:39: 8e:43:d5:f4:49:71:a1:1c:3a:8c:2f:90:db:ba:b0:a6:8b:1a: 8c:fd:0b:b4:ec:bd:89:66:87:13:7e:54:8b:b0:28:78:c7:ec: 04:ae:c9:48:2d:34:d2:23:ff:d3:a5:2b:90:1d:34:5d:58:85: af:01:09:20:51:73:33:21:77:85:92:cb:37:08:9e:0c:03:af: bf:ce:2d:d9:54:3a:b4:04:16:aa:69:51:ca:7d:ef:99:c4:f3: 06:0b:7f:c4:41:50:65:5b:52:da:d2:a8:9f:20:69:ca:00:0b: ae:24:9b:df:81:c3:68:bc:72:0d:e3:55:fb:23:6b:c4:2c:8d: 4c:37:39:70:9a:a0:49:b3:3f:e1:3d:80:a5:63:67:a9:d5:9e: 74:eb:55:77:5b:83:1a:e3:a9:21:8b:eb:d0:e9:c3:1a:4a:1f: 34:37:26:29 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt3WOAnBBWF8J4LiA7eZLkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTkyNmY5NjM1MTE4OTNmYTRkOWZiZDVlNjRlMGY4YTQzODM3ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr5UAWBEpUfzMJLJ4tNFEBCvHhr6 uRXp4wshpYeWzsnjoCznQXfJ4oDJ9qx1Ki9k+AVFIw+p6pW5J8BCz8HidWysN12C +iA3BjkyrRAa0kZ1xKtNdgyl/e9Hsvy8yNCIQ9usfcGJBCFdMd8kqxUvfSMpe+rz l8xD01Zo9H2mfyYUt9VdYIfXURhEDxslJx2BAZDo+MM4FMVTMNm8I8przJvv5YbD 7PF41c1y8CDux4QWCTs+4kwJFNbxHhNLzIneo6TBFaWqPe1ukrp3JStk/E57s2l+ Z4y9X1owxj/ui7byx4vln0eikoliAWjjfrPUgF/gJKmS3YY7NXX4P5gXUwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFMqSb5Y1EYk/pNn71eZOD4pDg35AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzQ0Yjdi Yi0yNjA1LTQyNWItYjM0MS0xNDYwNWRiNTQzZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNDRiN2Ji LTI2MDUtNDI1Yi1iMzQxLTE0NjA1ZGI1NDNkMC8xL3lwSnZsalVSaVQtazJmdlY1 azRQaWtPRGZrQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCuWCIAwQCua/MAwQCucc8AwQD2ZVoMBQEAgAC MA4DBQAqAE7gAwUDKgvvgDANBgkqhkiG9w0BAQsFAAOCAQEAj7e0a5HuVaExMz7a pW31QChnCK+GzJNS0hTDvMVxopf/2IhwfKCo5pA1AUbQFtIEWRQXUeGVRxM8tgPa McQs1LpOVxaO394Xx4Xw16iEMQV1RGUQQ42Xvbo5jkPV9ElxoRw6jC+Q27qwposa jP0LtOy9iWaHE35Ui7AoeMfsBK7JSC000iP/06UrkB00XViFrwEJIFFzMyF3hZLL NwieDAOvv84t2VQ6tAQWqmlRyn3vmcTzBgt/xEFQZVtS2tKonyBpygALriSb34HD aLxyDeNV+yNrxCyNTDc5cJqgSbM/4T2ApWNnqdWedOtVd1uDGuOpIYvr0OnDGkof NDcmKQ== -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:32 2026 by rpki-client