This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer File: ypfglEx3smswKXwtScO-ausnNxE.cer (raw, json) Hash identifier: iGT8BCgq58R1Ac8+MOglGXl/vBg1SozmEEFH0HIypXo= Subject key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5D4680F659F3246218AF9511D03C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204487 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5d:46:80:f6:59:f3:24:62:18:af:95:11:d0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:f9:7d:18:ad:92:55:50:23:df:ab:16:a7: bc:88:e4:90:3e:3e:cd:9c:f6:81:18:a9:66:fa:5d: c5:2b:5c:a6:6d:f2:73:0b:8a:ac:49:65:d8:bc:d0: e5:85:19:34:e2:29:ae:43:70:d3:e5:03:46:88:44: 1b:de:5a:c7:2a:c0:0a:02:7f:90:1a:34:1d:e2:50: cc:89:50:f7:a8:95:7d:dd:70:ba:a9:76:ca:be:cd: fc:4b:d6:e0:0d:c5:f3:27:6f:3c:61:6b:12:34:f5: 52:18:06:94:89:fb:4a:82:d4:73:41:45:1e:5e:bc: c2:aa:19:43:23:3f:d3:21:5e:76:85:e6:95:25:24: c0:17:ac:25:15:99:c0:a4:3f:b4:37:93:07:f8:d2: 4f:ee:34:5a:82:75:74:a2:64:d0:33:01:51:c0:8e: 92:3d:a6:1a:4e:03:db:f6:44:e6:d5:64:61:71:63: 7f:b0:55:1b:34:de:7a:e4:3b:44:d8:03:f5:b6:38: 4e:a3:fd:5b:f8:cb:d3:61:70:ce:7a:18:e7:1a:1e: 62:ff:e1:53:09:37:3c:4f:3a:43:ac:94:a1:a9:d5: fc:5b:7f:4c:fa:0a:67:c3:c3:29:02:5b:35:c5:b7: d8:97:22:85:da:52:7b:ee:84:e1:b0:9f:ec:bc:56: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204487 Signature Algorithm: sha256WithRSAEncryption 9e:01:fd:c7:35:59:a0:04:fe:32:25:a1:61:e9:68:88:c6:4e: 2d:20:4e:63:5b:7d:2f:b7:50:9d:4d:60:ed:29:f4:60:30:95: 7d:66:de:99:d5:85:fd:1e:b5:40:62:ce:00:31:fc:30:67:5a: 31:02:de:ef:4f:6c:86:a1:47:02:5c:98:62:4b:91:5f:14:dc: 05:1e:a6:ec:d5:03:9c:e8:11:1a:2a:81:5d:9f:87:20:29:a0: 3f:ce:16:1c:08:c2:25:05:53:14:33:f7:bb:8b:11:33:cf:57: 76:7b:7b:53:0d:99:37:a2:db:2a:ab:66:20:62:40:8a:9b:bb: be:3a:e6:3d:06:1f:7d:f9:28:d0:36:e5:9c:b2:03:1b:4c:6b: 37:74:5b:8a:06:1d:7c:60:2e:e9:6f:21:ca:fc:73:d1:6a:e1: 09:ca:8e:1c:98:a5:bf:31:e6:3d:9d:9c:f2:47:2e:16:ff:78: 4d:80:76:3e:42:35:c1:8d:78:5f:a2:1b:7b:69:96:1f:6c:78: 51:b3:f6:62:d0:3a:8e:ff:81:d3:df:57:24:d4:a9:01:d5:47: 6b:ec:62:b5:6c:a7:2e:eb:7d:45:68:50:2d:44:bb:91:be:7f: 6a:be:9c:61:f7:9a:85:73:0a:a8:4f:0a:21:f9:cc:21:68:98: 74:2d:78:f5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt2611GgPZZ8yRiGK+VEdA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTk3ZTA5NDRjNzdiMjZiMzAyOTdjMmQ0OWMzYmU2YWViMjczNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq075fRitklVQI9+rFqe8iOSQPj7N nPaBGKlm+l3FK1ymbfJzC4qsSWXYvNDlhRk04imuQ3DT5QNGiEQb3lrHKsAKAn+Q GjQd4lDMiVD3qJV93XC6qXbKvs38S9bgDcXzJ288YWsSNPVSGAaUiftKgtRzQUUe XrzCqhlDIz/TIV52heaVJSTAF6wlFZnApD+0N5MH+NJP7jRagnV0omTQMwFRwI6S PaYaTgPb9kTm1WRhcWN/sFUbNN565DtE2AP1tjhOo/1b+MvTYXDOehjnGh5i/+FT CTc8TzpDrJShqdX8W39M+gpnw8MpAls1xbfYlyKF2lJ77oThsJ/svFaXDQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMqX4JRMd7JrMCl8LUnDvmrrJzcRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2MwZTM4 NS1jYmU1LTQ3ZjMtODA4ZC1lNjg3NjdjMThmMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYzBlMzg1 LWNiZTUtNDdmMy04MDhkLWU2ODc2N2MxOGYwMi8xL3lwZmdsRXgzc21zd0tYd3RT Y08tYXVzbk54RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMexzANBgkqhkiG9w0BAQsFAAOCAQEAngH9xzVZoAT+ MiWhYeloiMZOLSBOY1t9L7dQnU1g7Sn0YDCVfWbemdWF/R61QGLOADH8MGdaMQLe 709shqFHAlyYYkuRXxTcBR6m7NUDnOgRGiqBXZ+HICmgP84WHAjCJQVTFDP3u4sR M89Xdnt7Uw2ZN6LbKqtmIGJAipu7vjrmPQYfffko0DblnLIDG0xrN3RbigYdfGAu 6W8hyvxz0WrhCcqOHJilvzHmPZ2c8kcuFv94TYB2PkI1wY14X6Ibe2mWH2x4UbP2 YtA6jv+B099XJNSpAdVHa+xitWynLut9RWhQLUS7kb5/ar6cYfeahXMKqE8KIfnM IWiYdC149Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:34 2026 by rpki-client