This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer File: sG9AQEkaZW_3Um0vF2EbDWisvQw.cer (raw, json) Hash identifier: gK8BGTGOf+23N1iFBchTN9pUM/n09lQ0HTdfN8dJxgA= Subject key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3698A2640601C5BFBC7AB861DB4911 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204996 IP: 45.67.8.0/22 IP: 185.170.248.0/22 IP: 193.30.134.0/24 IP: 193.30.162.0/24 IP: 193.30.165.0 -- 193.30.166.255 IP: 2a0a:ed00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:98:a2:64:06:01:c5:bf:bc:7a:b8:61:db:49:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:b4:82:40:5b:5b:84:25:25:ba:89:8c:a2: 1d:d1:cf:a9:21:79:cc:eb:1b:43:cc:ac:a7:43:03: ca:57:91:27:ba:d1:6a:e8:ca:06:e6:08:4c:ef:26: 46:22:e3:1f:86:d9:e7:42:7f:9b:4b:70:34:1c:85: 37:77:b0:82:8a:90:57:b8:7a:0c:0d:b3:2c:92:f3: 79:4e:5c:c7:46:56:b9:9a:40:a5:cb:5b:c1:a8:16: f5:8d:04:7f:28:d7:a8:5b:42:2c:d9:6b:11:93:a2: f7:bc:74:06:a3:6c:3a:43:ea:f5:51:bd:fa:94:46: 10:06:b7:06:09:4d:cf:a2:75:6f:cd:02:d0:69:99: 51:40:e3:a4:a2:d7:a3:bc:d5:77:8d:4e:5a:24:f9: d2:7f:8c:43:54:00:5b:08:bc:61:d8:68:7c:48:b9: bd:82:c9:a6:4d:ff:83:73:fd:db:8b:c7:33:7e:4d: f5:55:e3:df:c6:96:97:ae:8a:f6:87:b5:ed:6d:ed: 79:ff:b6:50:2b:13:90:c5:f6:24:89:b7:17:dc:48: 2b:54:27:78:4e:f3:01:0a:0a:93:37:b0:a1:a5:fb: 6e:54:a0:0f:dc:49:70:a4:a4:4f:89:bc:6d:2a:cf: 66:90:09:04:a1:a3:fc:3d:c5:d4:39:f8:68:13:f9: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.8.0/22 185.170.248.0/22 193.30.134.0/24 193.30.162.0/24 193.30.165.0-193.30.166.255 IPv6: 2a0a:ed00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204996 Signature Algorithm: sha256WithRSAEncryption 4f:62:24:36:61:23:03:9f:c3:23:32:43:dd:a6:cd:1d:a3:64: 29:ab:4e:5e:1e:5b:84:53:b5:3e:cf:d1:08:e1:5c:bc:a9:e3: 4a:d7:dd:ce:46:17:fd:3d:4c:cb:5b:df:e3:22:ba:79:8e:02: 47:94:39:18:c4:26:cb:5c:19:fe:2c:4d:85:0e:27:e1:c0:b5: 59:e1:dc:75:c7:83:1d:3f:a9:3f:56:e2:c6:61:8a:8d:61:e9: 5c:f9:4a:2c:0b:1b:83:d8:bf:e2:a2:85:d0:53:cf:17:58:73: e2:8d:99:b0:3b:b1:00:86:9c:d6:85:ed:bf:bd:da:be:ab:2d: 9a:ad:96:fd:56:7b:93:84:0f:60:4d:35:d4:2e:19:08:a4:a0: c7:f7:d9:bd:5b:21:97:da:8d:cc:b8:ca:de:d0:26:fc:31:8e: d8:23:9d:59:0f:d4:e0:78:ae:c8:27:09:12:57:77:8e:67:89: e9:d1:74:fa:f1:07:76:7d:4d:0c:71:34:8d:77:9f:df:7d:f9: 03:08:35:20:01:2c:24:d2:2e:69:b0:7b:db:77:bf:db:1e:8f: 58:62:7e:05:fb:b9:2f:cd:5c:bf:f4:8c:5a:38:51:02:50:ef: 7a:9d:66:d7:e8:fe:9e:15:97:c8:8d:18:1a:93:1c:21:94:c2: 98:d8:c5:e6 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt7NpiiZAYBxb+8erhh20kRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDZmNDA0MDQ5MWE2NTZmZjc1MjZkMmYxNzYxMWIwZDY4YWNiZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1+0gkBbW4QlJbqJjKId0c+pIXnM 6xtDzKynQwPKV5EnutFq6MoG5ghM7yZGIuMfhtnnQn+bS3A0HIU3d7CCipBXuHoM DbMskvN5TlzHRla5mkCly1vBqBb1jQR/KNeoW0Is2WsRk6L3vHQGo2w6Q+r1Ub36 lEYQBrcGCU3PonVvzQLQaZlRQOOkotejvNV3jU5aJPnSf4xDVABbCLxh2Gh8SLm9 gsmmTf+Dc/3bi8czfk31VePfxpaXror2h7Xtbe15/7ZQKxOQxfYkibcX3EgrVCd4 TvMBCgqTN7ChpftuVKAP3ElwpKRPibxtKs9mkAkEoaP8PcXUOfhoE/lS5wIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFLBvQEBJGmVv91JtLxdhGw1orL0MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2NlMGIy MS1kNjVjLTQyZTYtODc0Yi1mNGNiODY3ZjkwZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvY2UwYjIx LWQ2NWMtNDJlNi04NzRiLWY0Y2I4NjdmOTBkOC8xL3NHOUFRRWthWldfM1VtMHZG MkViRFdpc3ZRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQCLUMIAwQCuar4AwQAwR6GAwQAwR6iMAwDBADB HqUDBADBHqYwDQQCAAIwBwMFAyoK7QAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AyDEMA0GCSqGSIb3DQEBCwUAA4IBAQBPYiQ2YSMDn8MjMkPdps0do2Qpq05eHluE U7U+z9EI4Vy8qeNK193ORhf9PUzLW9/jIrp5jgJHlDkYxCbLXBn+LE2FDifhwLVZ 4dx1x4MdP6k/VuLGYYqNYelc+UosCxuD2L/iooXQU88XWHPijZmwO7EAhpzWhe2/ vdq+qy2arZb9VnuThA9gTTXULhkIpKDH99m9WyGX2o3MuMre0Cb8MY7YI51ZD9Tg eK7IJwkSV3eOZ4np0XT68Qd2fU0McTSNd5/fffkDCDUgASwk0i5psHvbd7/bHo9Y Yn4F+7kvzVy/9IxaOFECUO96nWbX6P6eFZfIjRgakxwhlMKY2MXm -----END CERTIFICATE-----Generated at Mon Jan 12 08:08:13 2026 by rpki-client