This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer File: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer (raw, json) Hash identifier: Ge75hdK+mmZcz05FRYjTvK9nuYH8vAp1iuwHC9OdhKk= Subject key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38924C97B1930787E2BA4B85B38C3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62003 AS: 201082 AS: 202612 AS: 210207 AS: 212156 -- 212157 IP: 147.181.0.0/16 IP: 185.52.4.0/22 IP: 2a04:9a00::/29 IP: 2a07:3500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:92:4c:97:b1:93:07:87:e2:ba:4b:85:b3:8c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:f2:e6:93:32:36:ba:87:a9:33:7e:a6:02: 4f:9c:8c:b6:2a:3a:67:7e:8e:2a:d1:83:e1:19:a5: fb:88:e2:f6:62:50:93:e6:7d:aa:39:a5:59:cb:11: 96:3c:f9:96:28:0c:a2:f0:2b:1d:50:3f:08:ca:f0: 0a:92:4c:3a:f2:c6:ed:64:03:41:dd:8a:6a:48:77: 1e:26:f1:c5:ca:72:07:1b:40:b1:f9:97:68:25:78: 2c:92:9a:75:5b:99:5e:6b:b4:d7:c9:c5:36:9a:e0: ce:8b:83:fc:b5:76:4c:6a:73:53:1b:5c:35:d3:e0: 09:0e:40:25:b3:90:c5:d0:82:e0:40:49:02:74:dc: 3e:c3:ed:4c:ca:98:5c:2b:17:ee:5a:bb:ca:be:2f: f2:94:ba:c5:44:a4:58:be:3a:6b:05:f1:1f:9c:43: fc:96:5c:3f:9d:0b:a3:e9:d9:2e:b6:69:64:88:64: 5f:b0:aa:66:ba:f4:7d:59:37:8c:99:5d:f5:a5:2d: 53:05:cf:5c:a4:17:bc:08:65:a9:85:18:40:84:40: 54:e1:fd:6b:cd:4e:d1:64:c3:dc:19:3d:be:f1:1d: df:52:c5:48:31:d9:25:8b:00:6b:89:bc:4a:66:cc: e2:c8:d8:f9:b5:aa:78:7d:ea:74:54:89:a5:dd:9b: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.181.0.0/16 185.52.4.0/22 IPv6: 2a04:9a00::/29 2a07:3500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62003 201082 202612 210207 212156-212157 Signature Algorithm: sha256WithRSAEncryption 2d:7e:50:68:97:11:42:0a:3e:42:ab:09:35:97:84:58:8c:c7: 83:c2:72:e8:98:42:2c:35:9a:39:43:52:53:32:58:56:83:50: ec:46:32:da:eb:60:84:16:b2:81:8f:61:7e:e2:ac:5d:39:1a: 5e:6c:89:86:48:a4:82:75:e0:d1:72:ce:14:09:c7:a1:d6:23: 44:46:70:88:3f:c6:86:4a:8c:3a:bf:90:00:f8:e3:76:fc:d9: f4:8d:c0:1d:08:aa:6a:db:c9:8c:12:c0:42:6c:8a:87:2f:b4: f9:72:21:85:90:e8:45:84:0f:f8:fd:88:1c:82:78:b6:7f:90: dd:bd:b6:4f:3e:90:af:51:99:dc:73:08:03:94:66:fe:8d:e6: 81:fd:1f:7b:64:6f:8c:a3:15:fb:30:75:de:d2:5e:ce:45:cd: f6:72:ca:94:5c:0c:fe:2f:c2:cc:52:63:13:43:a9:9e:03:e6: 4c:b9:d6:ca:d7:5d:e0:38:e3:ee:ff:e9:2c:e2:f0:7d:8b:1d: b2:ed:57:4b:02:aa:8a:4e:78:a9:4b:a1:e3:59:c3:cc:cb:3c: c0:07:67:f8:11:bb:2d:3b:18:08:78:19:e3:bc:01:a8:d4:75: 2a:19:64:2c:f8:96:49:9c:ab:b5:4a:1d:07:04:c8:0a:1f:17: 79:1f:5b:20 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt+OJJMl7GTB4fiukuFs4w6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDVkMjhkMTY2MjZiYzVkY2FiZjJlOTE1NDM1NzgyYjk2ZTE0MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gjy5pMyNrqHqTN+pgJPnIy2Kjpn fo4q0YPhGaX7iOL2YlCT5n2qOaVZyxGWPPmWKAyi8CsdUD8IyvAKkkw68sbtZANB 3YpqSHceJvHFynIHG0Cx+ZdoJXgskpp1W5lea7TXycU2muDOi4P8tXZManNTG1w1 0+AJDkAls5DF0ILgQEkCdNw+w+1MyphcKxfuWrvKvi/ylLrFRKRYvjprBfEfnEP8 llw/nQuj6dkutmlkiGRfsKpmuvR9WTeMmV31pS1TBc9cpBe8CGWphRhAhEBU4f1r zU7RZMPcGT2+8R3fUsVIMdkliwBribxKZsziyNj5tap4fep0VIml3ZueswIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2JiYTk3 My03YzlmLTRiMTEtYjYxMS1hZDU3NTUyMmIzNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYmJhOTcz LTdjOWYtNGIxMS1iNjExLWFkNTc1NTIyYjM2NS8xL3NGMG8wV1ltdkYzS3Z5NlJW RFY0SzViaFFIRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTARBAIAATALAwMAk7UDBAK5NAQwFAQCAAIwDgMFAyoEmgADBQMq BzUAMDUGCCsGAQUFBwEIAQH/BCYwJKAiMCACAwDyMwIDAxF6AgMDF3QCAwM1HzAK AgMDPLwCAwM8vTANBgkqhkiG9w0BAQsFAAOCAQEALX5QaJcRQgo+QqsJNZeEWIzH g8Jy6JhCLDWaOUNSUzJYVoNQ7EYy2utghBaygY9hfuKsXTkaXmyJhkikgnXg0XLO FAnHodYjREZwiD/GhkqMOr+QAPjjdvzZ9I3AHQiqatvJjBLAQmyKhy+0+XIhhZDo RYQP+P2IHIJ4tn+Q3b22Tz6Qr1GZ3HMIA5Rm/o3mgf0fe2RvjKMV+zB13tJezkXN 9nLKlFwM/i/CzFJjE0OpngPmTLnWytdd4Djj7v/pLOLwfYsdsu1XSwKqik54qUuh 41nDzMs8wAdn+BG7LTsYCHgZ47wBqNR1KhlkLPiWSZyrtUodBwTICh8XeR9bIA== -----END CERTIFICATE-----Generated at Sun Jan 11 23:35:04 2026 by rpki-client