This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer File: sV9qUOakiH4XxTsPwQ5LfhST7rU.cer (raw, json) Hash identifier: C3E+B2ZbIb2nlGgOcK2I67+NwGVrtdm2Aswoo3U+pio= Subject key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3577EADAD1C6DF9BEDA53D8E40E32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24969 AS: 44398 IP: 92.43.120.0/21 IP: 178.23.240.0/21 IP: 185.16.16.0/22 IP: 185.87.80.0/22 IP: 193.201.39.0/24 IP: 195.74.32.0/22 IP: 195.90.100.0/23 IP: 213.174.64.0/19 IP: 213.179.80.0/20 IP: 2a00:1e58::/32 IP: 2a02:108::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:57:7e:ad:ad:1c:6d:f9:be:da:53:d8:e4:0e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:7a:2c:43:20:6c:4f:36:3c:56:18:9c:6e: fc:d7:37:c5:95:9c:2c:66:70:89:a9:93:f4:31:bf: 98:96:e1:04:d9:84:86:0e:f5:43:0b:33:03:8b:99: 62:8e:86:7c:f2:11:26:24:fb:63:62:d0:b3:6f:bb: f9:91:93:ed:6a:14:3a:30:79:14:d4:09:95:9d:e1: cd:15:d2:9b:a1:dc:df:52:48:5e:27:bb:75:f9:b3: d1:bb:f2:fb:ee:ed:9f:c4:4b:c9:8c:3f:53:ce:cc: 48:84:72:6b:bf:c4:d7:59:ff:c9:af:50:00:8f:8d: 57:61:db:00:81:8c:78:ee:fe:2b:9d:bd:7e:7f:c5: 86:87:48:fd:d4:11:61:d4:38:07:21:1d:1f:45:48: 7a:20:3d:39:ab:b5:41:d9:73:78:1f:5f:8f:bb:76: 46:7d:dd:3c:f5:9c:0c:fa:4e:a5:54:04:d0:de:24: 9f:a8:a1:44:81:e7:2a:31:2c:f5:fd:ba:8b:89:1a: e4:33:29:08:c5:a2:e3:21:e4:19:96:45:da:9d:f7: d7:cc:8a:50:a6:8c:2e:58:92:a3:06:b3:34:fb:fe: 46:30:62:99:3c:37:1a:f4:87:aa:53:cd:b1:ac:f5: 25:3e:79:8a:20:64:5b:1b:cf:38:66:8c:67:f7:de: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.120.0/21 178.23.240.0/21 185.16.16.0/22 185.87.80.0/22 193.201.39.0/24 195.74.32.0/22 195.90.100.0/23 213.174.64.0/19 213.179.80.0/20 IPv6: 2a00:1e58::/32 2a02:108::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24969 44398 Signature Algorithm: sha256WithRSAEncryption 8d:86:1a:4c:64:e8:1e:f0:b2:00:4b:1c:30:d7:7e:8c:0e:03: c0:42:22:20:5b:99:54:e3:37:29:87:52:21:4b:6c:a0:e1:4c: 54:63:57:80:95:ed:3e:e6:2b:c8:c3:0c:d9:c2:47:5b:8d:3d: f5:7a:57:63:70:37:be:93:56:50:2d:31:20:f6:7a:e6:7f:a9: 3a:8a:4b:69:67:53:ec:2c:87:8c:51:36:66:62:94:f5:a9:c9: ba:50:eb:91:a8:f7:11:c6:27:e2:e7:db:54:9a:f0:c6:03:65: 68:cf:e3:36:61:ca:76:5c:d7:dd:d6:c1:9c:a8:0b:a5:07:59: 17:3a:be:9b:57:d9:3b:5e:4d:c7:2c:81:75:45:0a:dc:60:33: 3d:ac:3a:b1:62:69:2f:fc:a6:c7:c3:8f:06:e4:83:9d:f2:99: 98:37:54:3a:b5:b0:6c:1c:af:56:b5:59:66:f3:43:27:a9:f5: 23:97:c1:2c:cf:cd:bf:3a:7d:32:8f:ca:1a:9e:21:8e:20:d7: c8:4a:d3:65:36:13:73:f9:2c:5c:3c:35:b8:fe:b9:1a:2d:c2: 3e:48:82:9b:ba:35:a2:a9:1f:22:b0:21:dc:ef:d9:3a:44:96: 4e:6d:f6:7a:f4:b1:33:06:ec:6d:97:4a:ae:c2:17:3b:76:97: c3:40:12:b7 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt4o1d+ra0cbfm+2lPY5A4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTVmNmE1MGU2YTQ4ODdlMTdjNTNiMGZjMTBlNGI3ZTE0OTNlZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4d6LEMgbE82PFYYnG781zfFlZws ZnCJqZP0Mb+YluEE2YSGDvVDCzMDi5lijoZ88hEmJPtjYtCzb7v5kZPtahQ6MHkU 1AmVneHNFdKbodzfUkheJ7t1+bPRu/L77u2fxEvJjD9TzsxIhHJrv8TXWf/Jr1AA j41XYdsAgYx47v4rnb1+f8WGh0j91BFh1DgHIR0fRUh6ID05q7VB2XN4H1+Pu3ZG fd089ZwM+k6lVATQ3iSfqKFEgecqMSz1/bqLiRrkMykIxaLjIeQZlkXanffXzIpQ powuWJKjBrM0+/5GMGKZPDca9IeqU82xrPUlPnmKIGRbG884Zoxn994c/QIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFLFfalDmpIh+F8U7D8EOS34Uk+61MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2M5MzUy NC0zNzY1LTQ5ZTItYWEzZS0yOTg0MmJjMjcxNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYzkzNTI0 LTM3NjUtNDllMi1hYTNlLTI5ODQyYmMyNzE0NS8xL3NWOXFVT2FraUg0WHhUc1B3 UTVMZmhTVDdyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF BwEHAQH/BFYwVDA8BAIAATA2AwQDXCt4AwQDshfwAwQCuRAQAwQCuVdQAwQAwckn AwQCw0ogAwQBw1pkAwQF1a5AAwQE1bNQMBQEAgACMA4DBQAqAB5YAwUDKgIBCDAe BggrBgEFBQcBCAEB/wQPMA2gCzAJAgJhiQIDAK1uMA0GCSqGSIb3DQEBCwUAA4IB AQCNhhpMZOge8LIASxww136MDgPAQiIgW5lU4zcph1IhS2yg4UxUY1eAle0+5ivI wwzZwkdbjT31eldjcDe+k1ZQLTEg9nrmf6k6iktpZ1PsLIeMUTZmYpT1qcm6UOuR qPcRxifi59tUmvDGA2Voz+M2Ycp2XNfd1sGcqAulB1kXOr6bV9k7Xk3HLIF1RQrc YDM9rDqxYmkv/KbHw48G5IOd8pmYN1Q6tbBsHK9WtVlm80MnqfUjl8Esz82/On0y j8oaniGOINfIStNlNhNz+SxcPDW4/rkaLcI+SIKbujWiqR8isCHc79k6RJZObfZ6 9LEzBuxtl0quwhc7dpfDQBK3 -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:53 2026 by rpki-client