This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer File: yzJFVZQK5Rr10fQr1axxWGT6GCk.cer (raw, json) Hash identifier: 3vUkV49oba40YlOcJx3oEJTji08WvZpcBChufBLQHtA= Subject key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E5F69E13C69B60AB6D30E950A77FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60393 IP: 194.55.232.0/23 IP: 2001:67c:bfc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5f:69:e1:3c:69:b6:0a:b6:d3:0e:95:0a:77:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb324555940ae51af5d1f42bd5ac715864fa1829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:1c:99:59:31:f6:0f:40:1e:df:5e:fa:25: ec:bd:88:be:f2:df:79:f2:25:d5:b7:d6:19:87:50: 1d:67:de:d6:73:71:ad:af:03:ba:9f:d2:46:b8:62: f7:b6:d6:a2:98:98:6c:d2:07:0a:59:1e:61:db:67: 0d:55:23:9e:50:c3:93:59:cd:58:62:5e:f8:8a:79: 5b:fc:5e:ac:f4:75:08:1a:b2:00:fa:51:22:48:78: 84:5d:db:2d:7e:53:38:fa:47:e4:4e:02:18:d4:e5: 11:2f:06:50:6b:0c:56:ef:68:3a:02:e8:6c:1d:56: e0:39:a9:2b:77:f9:23:8d:e6:4e:85:fe:2b:65:9c: a5:a0:3f:31:d6:88:c0:f9:1a:9a:6a:06:68:28:f3: 5d:1b:9c:9e:a5:06:b3:ce:8e:a8:39:de:59:c7:00: c2:2f:aa:5a:1a:dc:8c:18:82:d0:86:6a:8b:f1:45: 6c:34:11:99:71:f5:d5:d3:f6:84:cd:bc:d9:16:7b: d5:aa:c2:19:2e:98:4f:70:32:eb:c3:90:c2:06:7e: 45:c4:9a:16:a9:7d:98:ee:b2:dd:a0:6d:9b:f6:6e: 60:5c:bc:5f:85:f2:37:5d:06:69:21:10:fd:8a:ca: fc:0d:d9:05:6d:35:e7:51:68:ff:f1:db:bb:c1:d2: 5e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.232.0/23 IPv6: 2001:67c:bfc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60393 Signature Algorithm: sha256WithRSAEncryption 48:7e:cf:37:1a:d2:51:e4:7b:03:8d:ef:7d:81:f0:47:04:5b: a3:8f:fc:9f:71:d3:0c:8b:0f:af:9b:57:e8:11:19:72:49:0e: c2:8a:03:82:9b:10:19:37:d5:05:ae:44:4d:33:2d:0e:a2:40: 7e:d9:14:a6:5e:ed:ab:cb:ef:f1:dc:36:91:d9:88:a6:7f:31: 8a:d9:b3:c5:1a:48:2d:7a:75:ea:81:db:90:cd:da:46:70:b6: 7e:f9:83:12:78:63:2b:80:75:b9:c6:b4:8f:b5:5f:65:72:39: 8b:73:5b:7b:fa:97:4a:82:e1:33:f7:1c:25:57:94:29:f6:f6: 55:03:cc:48:0c:ad:c5:d9:94:35:8c:b9:e2:b4:6c:ae:15:75: 4e:e2:0b:09:55:f3:df:59:62:17:db:b2:ab:01:5c:49:35:fe: 23:39:65:c6:cf:6a:01:b3:b4:31:ee:f6:1f:50:2e:6e:f1:fb: e0:d9:52:a8:b5:b6:db:4b:42:c7:d7:a7:9f:b3:6d:3f:16:8c: 25:45:a8:be:37:5d:89:21:89:11:8b:d1:f4:f2:5f:4a:1b:4a: d8:93:e5:02:54:a0:1f:e0:54:7c:12:4d:ea:a4:58:82:b0:0b: 48:15:44:1c:6f:53:3a:64:59:11:ff:60:5d:7e:1b:14:b9:5c: be:d6:5d:4b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5fl9p4Txptgq20w6VCnf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjMyNDU1NTk0MGFlNTFhZjVkMWY0MmJkNWFjNzE1ODY0ZmExODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ocmVkx9g9AHt9e+iXsvYi+8t95 8iXVt9YZh1AdZ97Wc3GtrwO6n9JGuGL3ttaimJhs0gcKWR5h22cNVSOeUMOTWc1Y Yl74inlb/F6s9HUIGrIA+lEiSHiEXdstflM4+kfkTgIY1OURLwZQawxW72g6Auhs HVbgOakrd/kjjeZOhf4rZZyloD8x1ojA+RqaagZoKPNdG5yepQazzo6oOd5ZxwDC L6paGtyMGILQhmqL8UVsNBGZcfXV0/aEzbzZFnvVqsIZLphPcDLrw5DCBn5FxJoW qX2Y7rLdoG2b9m5gXLxfhfI3XQZpIRD9isr8DdkFbTXnUWj/8du7wdJepwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMsyRVWUCuUa9dH0K9WscVhk+hgpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzMwMDk4 My00ZGZkLTQxOWMtYmMyMC0yMDJjMjY4OWRmYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMzAwOTgz LTRkZmQtNDE5Yy1iYzIwLTIwMmMyNjg5ZGZhMC8xL3l6SkZWWlFLNVJyMTBmUXIx YXh4V0dUNkdDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwjfoMA8EAgACMAkDBwAgAQZ8C/wwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAOvpMA0GCSqGSIb3DQEBCwUAA4IBAQBIfs83GtJR 5HsDje99gfBHBFujj/yfcdMMiw+vm1foERlySQ7CigOCmxAZN9UFrkRNMy0OokB+ 2RSmXu2ry+/x3DaR2YimfzGK2bPFGkgtenXqgduQzdpGcLZ++YMSeGMrgHW5xrSP tV9lcjmLc1t7+pdKguEz9xwlV5Qp9vZVA8xIDK3F2ZQ1jLnitGyuFXVO4gsJVfPf WWIX27KrAVxJNf4jOWXGz2oBs7Qx7vYfUC5u8fvg2VKotbbbS0LH16efs20/Fowl Rai+N12JIYkRi9H08l9KG0rYk+UCVKAf4FR8Ek3qpFiCsAtIFUQcb1M6ZFkR/2Bd fhsUuVy+1l1L -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:32 2026 by rpki-client