This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer File: sgzLpAbArQxb4AB22ZgLNIhWmoo.cer (raw, json) Hash identifier: OV/FBmMiyRCLewvaDh1gdSVR9BjDzuV/95DVuO/L//k= Subject key identifier: B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF570B5DA7C15C5ED554142045B79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57470 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f5:70:b5:da:7c:15:c5:ed:55:41:42:04:5b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b20ccba406c0ad0c5be00076d9980b3488569a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:3e:5f:a0:3b:76:a5:9a:25:39:61:60:8f: 42:f6:e3:10:8e:bd:88:95:99:57:67:e1:01:30:50: 10:3d:16:20:ee:f3:61:b9:34:0b:8c:2d:1c:b6:b8: a5:0c:96:0c:82:4c:20:95:46:03:b9:ba:0e:fa:b0: 9f:86:40:69:56:37:eb:0a:2c:11:d6:87:d9:f3:90: 68:65:60:62:70:43:ea:f0:db:86:9c:7c:77:32:6f: ae:cb:e3:92:01:60:8e:fd:9c:65:ac:6d:fb:a0:9e: b7:28:9a:4e:99:3d:e1:6b:25:a4:0e:9d:f1:67:72: 1d:b8:e0:d5:5b:1e:bb:4d:08:b8:a7:a0:9c:fc:85: 9f:6d:10:cb:a8:9e:50:e8:ed:76:4e:7f:8b:50:1f: e8:f0:42:7c:75:c0:ff:af:1e:69:a8:7d:13:fe:36: d8:32:7a:90:27:45:05:cd:02:04:db:eb:68:c3:76: 2c:33:f9:8d:15:f1:a9:6b:36:6e:c7:80:69:21:04: ea:ff:a8:34:e2:d8:ef:f3:2e:1d:23:0e:b7:96:93: cf:5e:81:fd:c7:f0:9b:37:52:7a:b2:9f:c3:89:58: 2a:c3:ed:fd:f4:f4:f6:47:91:b7:d6:45:1f:72:5b: 9f:50:78:da:43:58:90:5e:ce:5b:08:60:73:fc:c2: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 57470 Signature Algorithm: sha256WithRSAEncryption 91:40:85:d8:30:c3:b1:aa:79:b7:3f:0b:14:b4:e9:ba:7e:af: de:43:cc:42:0b:e9:0a:48:77:d1:d8:52:ae:2d:b9:42:bc:71: fd:eb:d3:9a:b8:f0:c1:c2:c6:22:f4:9b:24:94:81:14:22:ce: a1:0b:2b:2e:aa:d0:dc:dd:b7:3f:7c:be:71:a8:52:cb:0a:1c: c6:36:5b:41:f0:00:5f:b7:1e:53:cc:0a:df:89:bf:ef:73:e8: 79:4d:e4:54:ab:19:f8:c1:60:79:59:72:84:84:c4:d5:53:f3: 11:54:74:4b:62:33:e4:96:7e:21:86:3c:34:73:d8:16:15:ed: a8:ff:5f:ca:d3:22:e6:0f:3a:28:c6:90:cb:3e:c4:58:6b:0f: 60:73:0a:7c:df:46:46:81:ef:23:d1:8c:9d:99:45:d2:20:78: b5:66:61:94:20:2f:27:b4:5c:ad:1c:83:4d:7f:f0:5c:0d:08: b6:31:95:1a:7e:a2:00:83:35:57:72:91:d1:b2:85:7f:4f:49: 23:19:c1:14:7c:ce:63:29:1a:8b:f1:ed:bf:90:1a:82:23:ee: 2a:bc:af:e1:ed:bb:7e:1e:78:ee:5a:51:cc:e8:7e:e6:e4:79: a2:c7:17:0e:d5:fe:ef:dc:68:c4:33:bf:e6:cf:32:ca:16:42: 1c:02:21:40 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt26vVwtdp8FcXtVUFCBFt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjBjY2JhNDA2YzBhZDBjNWJlMDAwNzZkOTk4MGIzNDg4NTY5YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/k+X6A7dqWaJTlhYI9C9uMQjr2I lZlXZ+EBMFAQPRYg7vNhuTQLjC0ctrilDJYMgkwglUYDuboO+rCfhkBpVjfrCiwR 1ofZ85BoZWBicEPq8NuGnHx3Mm+uy+OSAWCO/ZxlrG37oJ63KJpOmT3hayWkDp3x Z3IduODVWx67TQi4p6Cc/IWfbRDLqJ5Q6O12Tn+LUB/o8EJ8dcD/rx5pqH0T/jbY MnqQJ0UFzQIE2+tow3YsM/mNFfGpazZux4BpIQTq/6g04tjv8y4dIw63lpPPXoH9 x/CbN1J6sp/DiVgqw+399PT2R5G31kUfclufUHjaQ1iQXs5bCGBz/MLmJwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLIMy6QGwK0MW+AAdtmYCzSIVpqKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzc0M2E1 MC1kN2Y0LTQyZDEtYTA5ZC03Y2E5M2VjYjIyMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNzQzYTUw LWQ3ZjQtNDJkMS1hMDlkLTdjYTkzZWNiMjIzNC8xL3NnekxwQWJBclF4YjRBQjIy WmdMTkloV21vby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDgfjANBgkqhkiG9w0BAQsFAAOCAQEAkUCF2DDDsap5 tz8LFLTpun6v3kPMQgvpCkh30dhSri25Qrxx/evTmrjwwcLGIvSbJJSBFCLOoQsr LqrQ3N23P3y+cahSywocxjZbQfAAX7ceU8wK34m/73PoeU3kVKsZ+MFgeVlyhITE 1VPzEVR0S2Iz5JZ+IYY8NHPYFhXtqP9fytMi5g86KMaQyz7EWGsPYHMKfN9GRoHv I9GMnZlF0iB4tWZhlCAvJ7RcrRyDTX/wXA0ItjGVGn6iAIM1V3KR0bKFf09JIxnB FHzOYykai/Htv5AagiPuKryv4e27fh547lpRzOh+5uR5oscXDtX+79xoxDO/5s8y yhZCHAIhQA== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:28 2026 by rpki-client