This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer File: ysmhVQ09sawK6xHBbWPkimg7ygM.cer (raw, json) Hash identifier: AGde5gNm6N9REVGwLdO5hsq29aUQGPvE6P8AUX+r+aM= Subject key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C4D0975772EEEA0A3E2E75E0F2F74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215624 IP: 45.87.224.0/22 IP: 2a14:5480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4d:09:75:77:2e:ee:a0:a3:e2:e7:5e:0f:2f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:ad:bd:1b:60:a4:b4:cf:4b:92:ff:fc:90: fc:03:c6:7f:42:d1:8c:7f:6b:66:a2:f7:8e:e4:83: 75:2c:db:8c:59:5e:47:76:b0:53:af:ee:6c:8d:f2: 80:1c:1a:60:f7:0d:3a:d2:ca:5a:6b:e4:8a:6d:76: 42:09:25:e2:43:72:32:bd:ef:41:8d:67:b2:cd:a8: b1:05:23:e9:58:a9:d9:e7:5a:02:9e:bf:ec:37:36: 8f:1b:12:e4:48:e2:e8:aa:f9:34:31:c3:c6:d3:42: 57:7a:38:d5:ec:bf:8b:55:b1:12:a3:84:d5:b9:9f: a2:9b:7b:93:95:9c:5b:e6:04:79:c5:43:f9:8a:c8: 21:f4:75:33:d1:80:f9:d9:ef:8b:b0:13:6b:b2:10: be:e9:c2:1e:1c:90:cf:6b:47:d5:b0:79:be:5b:db: 7e:90:5e:00:f2:49:a1:71:81:40:1d:c4:a5:d6:07: 2e:96:03:d6:ab:50:12:76:d6:b5:8e:62:e7:53:be: 87:99:af:54:44:f4:67:3e:86:7c:e5:e7:e2:a2:9d: 74:d7:50:f2:72:8d:1c:54:20:b6:08:5f:66:0a:3b: f2:85:ba:7c:16:92:1a:14:e5:fb:e7:2b:95:7e:36: 17:d4:06:09:7c:b2:7b:d2:fc:18:a5:3d:4c:82:f3: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.224.0/22 IPv6: 2a14:5480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215624 Signature Algorithm: sha256WithRSAEncryption 3d:1d:df:df:82:3e:13:c2:a3:ce:4f:69:ef:0c:c8:63:4f:ec: e4:4e:28:5f:b6:52:80:b0:55:8b:ac:b5:e4:8b:55:70:11:9f: c6:f6:9f:e9:77:08:1a:d6:d4:e9:a3:fa:e2:17:70:31:e3:15: 2d:fa:f2:e8:b6:6a:65:21:60:43:29:bb:18:76:c4:c5:b7:ff: d5:05:ac:d5:ee:8c:28:28:91:0c:0f:9b:5c:6d:64:3f:92:a3: 9e:34:16:ef:5e:79:13:25:05:e5:b0:0a:ac:48:b6:44:f5:5d: 92:5b:0f:b4:a1:4e:1d:7d:3f:f1:77:1b:23:5e:c2:db:66:33: e0:6a:bf:98:94:1c:41:49:b4:8b:1f:1c:af:4b:dd:1e:2a:a9: 44:ff:9d:24:ac:82:cc:ce:b2:a9:9c:38:ee:21:46:93:9d:3c: a7:89:82:4d:a5:d5:ca:c6:59:8e:d3:f5:75:29:93:82:d6:33: d9:ae:91:14:0c:53:28:c6:bf:58:8a:29:69:08:b7:1e:cb:f1: c5:7f:e8:76:06:38:c6:f2:80:ab:56:7f:a3:e5:4b:c9:9d:cc: 40:63:d1:d9:ae:ca:57:f3:76:39:80:d0:ae:47:82:fa:6c:7d: ae:8b:8b:75:f1:5f:3d:7c:93:e2:f0:8e:c4:a6:78:fe:6b:6e: 7f:5c:8f:20 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XE0JdXcu7qCj4udeDy90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWM5YTE1NTBkM2RiMWFjMGFlYjExYzE2ZDYzZTQ4YTY4M2JjYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VStvRtgpLTPS5L//JD8A8Z/QtGM f2tmoveO5IN1LNuMWV5HdrBTr+5sjfKAHBpg9w060spaa+SKbXZCCSXiQ3Iyve9B jWeyzaixBSPpWKnZ51oCnr/sNzaPGxLkSOLoqvk0McPG00JXejjV7L+LVbESo4TV uZ+im3uTlZxb5gR5xUP5isgh9HUz0YD52e+LsBNrshC+6cIeHJDPa0fVsHm+W9t+ kF4A8kmhcYFAHcSl1gculgPWq1ASdta1jmLnU76Hma9URPRnPoZ85efiop1011Dy co0cVCC2CF9mCjvyhbp8FpIaFOX75yuVfjYX1AYJfLJ70vwYpT1MgvPlhwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMrJoVUNPbGsCusRwW1j5IpoO8oDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2Lzc0MjRj NS0yYzk5LTQ5NTItODZlNy0wNzNmYjgzYWJmYzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvNzQyNGM1 LTJjOTktNDk1Mi04NmU3LTA3M2ZiODNhYmZjNi8xL3lzbWhWUTA5c2F3SzZ4SEJi V1BraW1nN3lnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVfgMA0EAgACMAcDBQMqFFSAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKSDANBgkqhkiG9w0BAQsFAAOCAQEAPR3f34I+E8Kj zk9p7wzIY0/s5E4oX7ZSgLBVi6y15ItVcBGfxvaf6XcIGtbU6aP64hdwMeMVLfry 6LZqZSFgQym7GHbExbf/1QWs1e6MKCiRDA+bXG1kP5KjnjQW7155EyUF5bAKrEi2 RPVdklsPtKFOHX0/8XcbI17C22Yz4Gq/mJQcQUm0ix8cr0vdHiqpRP+dJKyCzM6y qZw47iFGk508p4mCTaXVysZZjtP1dSmTgtYz2a6RFAxTKMa/WIopaQi3HsvxxX/o dgY4xvKAq1Z/o+VLyZ3MQGPR2a7KV/N2OYDQrkeC+mx9rouLdfFfPXyT4vCOxKZ4 /mtuf1yPIA== -----END CERTIFICATE-----Generated at Tue Jan 27 04:15:47 2026 by rpki-client