This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer (raw, json) Hash identifier: I/aPPwNDjSrDHTXBmaLyqSB6LzPfDpQ1di5AXMXtprY= Subject key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE4C310B942794B8FC085411D805D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39512 IP: 81.24.208.0/20 IP: 194.35.60.0/22 IP: 2a00:c200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4c:31:0b:94:27:94:b8:fc:08:54:11:d8:05:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:4a:e4:97:5c:33:29:36:f4:f2:dd:f8:fc: 01:eb:1c:84:3e:e1:69:25:9c:a2:c9:26:c2:6e:cb: b5:72:7a:f8:2a:f4:61:9c:db:36:83:a8:81:32:21: f5:8b:d0:57:3e:9e:f7:86:46:e5:cd:24:0f:40:32: be:96:c9:79:29:ab:fd:94:d7:dc:20:d3:61:3f:5d: ce:ae:71:b0:9e:2c:e2:3f:04:93:9b:43:7c:0f:ec: 4b:ce:b9:55:1e:57:83:92:51:a9:a6:8e:84:ff:a5: 98:d5:f1:c3:61:a7:e8:15:03:c4:67:ad:2a:aa:15: 56:25:bc:24:af:89:1d:0a:96:b9:c3:a2:04:ec:77: 31:2e:63:fe:8d:03:06:60:6a:50:95:17:c3:49:80: 66:1d:1d:bb:e5:3c:03:98:03:eb:60:8a:45:4b:ee: 6a:7e:94:68:1a:4e:48:63:1b:2b:c1:87:c6:2f:5a: 66:e4:b0:a0:ef:d8:ad:27:33:0f:0f:44:6a:6c:2d: f5:93:9f:ae:00:fb:7e:b0:1d:4b:54:7f:f5:a0:08: 6a:ec:55:5a:bd:ea:7b:cf:d7:bb:bb:37:3e:54:ca: eb:a9:04:a2:60:16:87:f5:aa:10:12:af:42:9d:99: 1a:b4:9f:d1:5a:29:9b:61:b8:a8:c0:b1:d3:c7:25: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.24.208.0/20 194.35.60.0/22 IPv6: 2a00:c200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39512 Signature Algorithm: sha256WithRSAEncryption 46:c6:42:90:a1:2f:fc:ce:d1:72:87:95:b4:6c:24:c7:e3:34: 73:81:7f:76:c9:29:01:52:ef:d7:6b:df:1f:e9:3e:50:76:dc: 0f:41:ef:d1:35:48:1a:6c:ee:0c:d3:00:33:9e:17:ff:5f:58: 23:87:3c:af:08:c0:56:37:0d:8d:71:8b:1e:13:78:97:60:cd: 24:65:26:90:56:d9:05:ff:eb:f7:d2:61:c9:92:9b:cc:c5:62: 44:7f:8c:d6:34:82:b6:f1:65:cb:e5:aa:51:b5:15:0d:3a:d7: e5:ac:46:32:ba:93:8e:12:10:32:d7:a9:e9:08:81:83:fd:a1: cf:a0:4c:22:9c:ca:a7:77:69:46:ec:3f:80:76:05:11:01:1b: 63:e2:c6:07:f5:7c:9d:22:22:2b:bc:9e:83:64:3b:e9:73:00: 15:c4:17:c8:fc:a2:c8:c0:93:79:47:dd:ea:f6:51:38:47:ad: 56:99:42:e2:ad:26:3e:e2:09:ee:16:d0:80:f3:1c:99:41:ae: 5e:ba:bd:e3:83:94:83:ef:af:80:4d:e4:7e:44:7c:44:82:1b: dc:51:5e:8c:0a:9e:de:55:e3:20:a0:f0:18:5a:1b:13:b5:be: b5:b9:c0:ab:1b:9f:c1:3a:c1:b2:90:2c:11:86:a3:be:46:21: f1:72:e1:af -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87kwxC5QnlLj8CFQR2AXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjEyZDhiYTJlMDg5NGRkMDZjYTE0M2E1NTE3MjM0ZTU4NGFmOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmNK5JdcMyk29PLd+PwB6xyEPuFp JZyiySbCbsu1cnr4KvRhnNs2g6iBMiH1i9BXPp73hkblzSQPQDK+lsl5Kav9lNfc INNhP13OrnGwniziPwSTm0N8D+xLzrlVHleDklGppo6E/6WY1fHDYafoFQPEZ60q qhVWJbwkr4kdCpa5w6IE7HcxLmP+jQMGYGpQlRfDSYBmHR275TwDmAPrYIpFS+5q fpRoGk5IYxsrwYfGL1pm5LCg79itJzMPD0RqbC31k5+uAPt+sB1LVH/1oAhq7FVa vep7z9e7uzc+VMrrqQSiYBaH9aoQEq9CnZkatJ/RWimbYbiowLHTxyVdOQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMsS2LouCJTdBsoUOlUXI05YSvjHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzRkMTY5 Ni0zMzQxLTRkZGItOGUyMy0zNGUyMjc5YmU3NjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNGQxNjk2 LTMzNDEtNGRkYi04ZTIzLTM0ZTIyNzliZTc2NS8xL3l4TFl1aTRJbE4wR3loUTZW UmNqVGxoSy1NYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEURjQAwQCwiM8MA0EAgACMAcDBQAqAMIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCaWDANBgkqhkiG9w0BAQsFAAOCAQEARsZC kKEv/M7RcoeVtGwkx+M0c4F/dskpAVLv12vfH+k+UHbcD0Hv0TVIGmzuDNMAM54X /19YI4c8rwjAVjcNjXGLHhN4l2DNJGUmkFbZBf/r99JhyZKbzMViRH+M1jSCtvFl y+WqUbUVDTrX5axGMrqTjhIQMtep6QiBg/2hz6BMIpzKp3dpRuw/gHYFEQEbY+LG B/V8nSIiK7yeg2Q76XMAFcQXyPyiyMCTeUfd6vZROEetVplC4q0mPuIJ7hbQgPMc mUGuXrq944OUg++vgE3kfkR8RIIb3FFejAqe3lXjIKDwGFobE7W+tbnAqxufwTrB spAsEYajvkYh8XLhrw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:09 2026 by rpki-client