This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer File: yy2f-G42PbNNBVbsFkUfL38wPSQ.cer (raw, json) Hash identifier: 8L4nkKtThN4orrjNUgxAPnm4r2p9HpszNmkJ4gPWVC8= Subject key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD4914D66B1ED6A23087F50950AF8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.153.112.0/20 IP: 185.74.120.0/22 IP: 2a00:d3a0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d4:91:4d:66:b1:ed:6a:23:08:7f:50:95:0a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:c7:00:0e:66:9b:7e:06:3d:87:5e:6f:c9: 8c:db:49:10:0d:d5:1d:fa:87:14:db:11:38:d2:ec: bd:39:db:79:68:99:e5:c4:77:3a:e7:4c:aa:20:8d: 4c:d5:60:d7:85:5e:c8:c7:65:98:b9:b1:0c:bf:5c: 5b:06:3d:43:cf:22:1e:6b:dd:25:c0:d5:a2:32:f0: 2a:1a:a7:17:44:3f:95:00:4a:45:07:7e:a1:51:d3: 57:28:69:66:ee:8d:ac:f5:07:86:d3:26:98:f2:ce: 4e:15:bd:73:14:10:ff:82:ed:37:ec:da:a0:68:b2: 08:f0:3f:84:fe:36:03:94:c2:59:61:65:72:97:a4: b5:f6:a7:00:e7:a6:59:5c:c0:51:70:09:fa:db:11: 23:3e:a8:51:d7:09:06:a8:74:c0:cf:be:3b:ef:42: 89:f1:c5:4b:4d:1b:20:e2:e8:15:80:5d:50:49:ba: 57:8d:e9:8a:56:37:be:17:66:6d:6c:f4:6a:be:36: c4:d7:07:9d:12:1b:11:97:1e:b8:29:5e:ac:37:6a: 87:7c:a3:15:f5:9e:7a:ae:f6:f8:fd:22:35:ce:62: 00:c8:97:6e:80:f9:8a:eb:26:29:3f:80:e1:57:cb: 0b:f2:53:16:6c:33:45:3b:19:e2:e4:e5:d4:b1:99: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.112.0/20 185.74.120.0/22 IPv6: 2a00:d3a0::/29 Signature Algorithm: sha256WithRSAEncryption 6d:ff:ee:0f:2d:28:17:f7:d3:2d:da:26:5f:32:87:08:10:cb: 2e:8a:ed:ea:fb:be:f8:ef:9e:d0:28:02:da:a3:71:02:f2:0a: 3e:14:ec:a8:29:40:20:2b:e0:d2:7f:c1:76:de:5c:7c:24:5c: 18:0f:87:22:2c:b4:8d:d0:58:57:9a:83:e8:e4:16:3a:71:8f: d4:f7:24:eb:66:c9:dc:f7:d9:d2:c0:b1:c8:c8:b7:45:c2:6e: be:25:08:38:3e:5e:1f:49:36:a4:c2:e0:a2:23:1c:e9:3b:21: 76:06:e1:c3:f1:50:8a:ae:eb:48:30:71:53:62:60:2e:91:33: c1:43:56:0a:5e:02:1b:fa:c2:a7:d0:51:22:0e:a9:ee:c5:44: ce:90:95:5a:2d:27:39:df:bd:05:58:7f:0c:87:bd:75:52:6b: 34:7a:1b:ee:08:15:78:2a:77:fa:9a:2d:76:06:1f:87:7e:12: 61:13:be:87:01:93:ba:f2:30:e7:cd:c6:5c:8d:76:6c:f4:d4: c1:31:22:b9:a1:45:56:e5:52:04:0f:60:f1:c3:13:c5:cf:1f: c7:a4:ea:10:38:f4:9b:22:32:00:e3:4b:57:be:82:35:0c:4e: f6:7b:a0:89:26:6b:b6:dc:26:53:b0:e9:e7:d2:10:a7:62:31: 3b:ac:8e:af -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6WtSRTWax7WojCH9QlQr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjJkOWZmODZlMzYzZGIzNGQwNTU2ZWMxNjQ1MWYyZjdmMzAzZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSfHAA5mm34GPYdeb8mM20kQDdUd +ocU2xE40uy9Odt5aJnlxHc650yqII1M1WDXhV7Ix2WYubEMv1xbBj1DzyIea90l wNWiMvAqGqcXRD+VAEpFB36hUdNXKGlm7o2s9QeG0yaY8s5OFb1zFBD/gu037Nqg aLII8D+E/jYDlMJZYWVyl6S19qcA56ZZXMBRcAn62xEjPqhR1wkGqHTAz74770KJ 8cVLTRsg4ugVgF1QSbpXjemKVje+F2ZtbPRqvjbE1wedEhsRlx64KV6sN2qHfKMV 9Z56rvb4/SI1zmIAyJdugPmK6yYpP4DhV8sL8lMWbDNFOxni5OXUsZnsawIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFMstn/huNj2zTQVW7BZFHy9/MD0kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2IxYWY1 Yi0wODllLTRjYmUtYmJlOS00MjVlZTk2OGRmMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYjFhZjVi LTA4OWUtNGNiZS1iYmU5LTQyNWVlOTY4ZGYwYi8xL3l5MmYtRzQyUGJOTkJWYnNG a1VmTDM4d1BTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEBZlwAwQCuUp4MA0EAgACMAcDBQMqANOgMA0G CSqGSIb3DQEBCwUAA4IBAQBt/+4PLSgX99Mt2iZfMocIEMsuiu3q+774757QKALa o3EC8go+FOyoKUAgK+DSf8F23lx8JFwYD4ciLLSN0FhXmoPo5BY6cY/U9yTrZsnc 99nSwLHIyLdFwm6+JQg4Pl4fSTakwuCiIxzpOyF2BuHD8VCKrutIMHFTYmAukTPB Q1YKXgIb+sKn0FEiDqnuxUTOkJVaLSc5370FWH8Mh711Ums0ehvuCBV4Knf6mi12 Bh+HfhJhE76HAZO68jDnzcZcjXZs9NTBMSK5oUVW5VIED2DxwxPFzx/HpOoQOPSb IjIA40tXvoI1DE72e6CJJmu23CZTsOnn0hCnYjE7rI6v -----END CERTIFICATE-----Generated at Mon Jan 26 22:12:11 2026 by rpki-client