This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer File: stitAnqWdO3JNueMXU0bZJZNhEA.cer (raw, json) Hash identifier: CYYVEEyVkl8k9XjFl4CDDIRH2lyEmtSWgQXEL1ZZwCY= Subject key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EF1DB5A2BAD8997DF9EEDB29F38D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198895 IP: 45.140.133.0/24 IP: 46.229.241.0 -- 46.229.242.255 IP: 188.65.167.0/24 IP: 193.16.149.0/24 IP: 2a13:2580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f1:db:5a:2b:ad:89:97:df:9e:ed:b2:9f:38:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:e3:fe:82:22:96:6d:dc:ea:13:f2:e7:bd: c2:10:b7:d4:2a:87:e2:d0:94:89:c4:15:76:b7:2a: f6:ff:a6:a3:8b:15:5f:48:aa:e8:24:a2:3a:f5:e1: 09:1f:58:a7:00:e9:d0:75:47:04:be:da:d9:23:2a: 26:48:ea:5f:5a:df:8d:93:29:be:40:2d:7a:37:a1: 49:c8:35:aa:9d:64:ea:36:ad:3e:86:f8:37:54:c2: f2:60:4c:90:11:14:7a:f1:f5:f7:77:d6:b1:2a:39: 4d:de:df:68:69:2c:a9:e2:9f:dd:43:d8:5a:67:81: 5e:67:d2:e1:70:0f:69:8d:77:c5:c8:fa:9e:66:5e: 81:9d:7e:b7:c0:c2:c4:19:72:91:45:92:6b:55:d1: f6:07:a9:c3:26:c0:d9:43:e0:47:7a:aa:d3:45:2f: fc:eb:10:d6:9c:9a:c9:e0:47:5c:0e:32:76:53:18: 5c:0e:ff:1f:59:0d:ef:73:11:57:46:10:70:92:2c: 4f:30:2b:b0:ec:23:af:64:f0:08:f0:f8:56:02:7a: e2:59:ca:15:cf:47:45:51:66:a3:f9:6f:fa:f6:78: 81:04:69:15:cb:2d:9b:eb:e9:ce:58:db:9c:0c:6f: ee:30:5d:18:9d:5c:4c:25:78:bf:11:78:dd:33:bf: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.133.0/24 46.229.241.0-46.229.242.255 188.65.167.0/24 193.16.149.0/24 IPv6: 2a13:2580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198895 Signature Algorithm: sha256WithRSAEncryption 8f:b3:71:15:b1:c7:50:ff:c0:cb:c2:63:8c:62:31:e3:5f:38: d7:f8:00:4c:0f:39:93:21:a9:f5:cb:f5:63:70:5d:2c:8b:99: 52:a1:63:ab:d7:9c:c2:2d:39:fc:b6:c0:fa:7f:9d:76:58:cd: a4:26:ce:6e:8c:31:30:e4:a6:47:6e:af:c4:b0:a4:37:4b:40: 36:ea:35:b4:e7:71:17:cf:05:bc:31:46:cc:8f:01:24:c6:95: 9d:3a:f1:b2:75:92:5e:78:fd:2f:6e:2c:c0:01:54:5a:1b:4f: da:35:cc:dc:c7:9f:cf:bd:10:04:2c:86:f8:6e:9f:50:89:64: 43:95:39:c6:b2:5a:cf:ca:df:13:37:08:6a:f9:05:00:9c:84: 29:c9:1e:1a:0b:54:53:7b:86:2f:1b:82:c6:b4:7d:08:98:57: c9:96:3a:fa:15:35:81:38:36:f7:1c:32:d2:b1:a0:67:15:60: 86:7f:83:ce:50:74:61:76:aa:47:0a:d7:39:d7:dd:12:20:7e: 98:58:94:36:05:1f:5a:c9:97:7a:b8:9e:c0:06:81:64:d7:96: 83:b9:ac:e3:53:38:06:5c:fb:6e:f9:90:c7:10:78:b4:de:c6: 7e:be:3c:17:24:91:f2:ac:e8:72:81:c9:d5:0e:e1:7e:ff:9d: 8b:62:93:9d -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt8fvHbWiutiZffnu2ynzjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmQ4YWQwMjdhOTY3NGVkYzkzNmU3OGM1ZDRkMWI2NDk2NGQ4NDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN/j/oIilm3c6hPy573CELfUKofi 0JSJxBV2tyr2/6ajixVfSKroJKI69eEJH1inAOnQdUcEvtrZIyomSOpfWt+Nkym+ QC16N6FJyDWqnWTqNq0+hvg3VMLyYEyQERR68fX3d9axKjlN3t9oaSyp4p/dQ9ha Z4FeZ9LhcA9pjXfFyPqeZl6BnX63wMLEGXKRRZJrVdH2B6nDJsDZQ+BHeqrTRS/8 6xDWnJrJ4EdcDjJ2UxhcDv8fWQ3vcxFXRhBwkixPMCuw7COvZPAI8PhWAnriWcoV z0dFUWaj+W/69niBBGkVyy2b6+nOWNucDG/uMF0YnVxMJXi/EXjdM78RKwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzg4Yzlk Ny1lMzc3LTQ4NzQtOTg2OC03MTUyNDdjM2RjZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvODhjOWQ3 LWUzNzctNDg3NC05ODY4LTcxNTI0N2MzZGNkYy8xL3N0aXRBbnFXZE8zSk51ZU1Y VTBiWkpaTmhFQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQALYyFMAwDBAAu5fEDBAAu5fIDBAC8QacDBADB EJUwDQQCAAIwBwMFAyoTJYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwjvMA0G CSqGSIb3DQEBCwUAA4IBAQCPs3EVscdQ/8DLwmOMYjHjXzjX+ABMDzmTIan1y/Vj cF0si5lSoWOr15zCLTn8tsD6f512WM2kJs5ujDEw5KZHbq/EsKQ3S0A26jW053EX zwW8MUbMjwEkxpWdOvGydZJeeP0vbizAAVRaG0/aNczcx5/PvRAELIb4bp9QiWRD lTnGslrPyt8TNwhq+QUAnIQpyR4aC1RTe4YvG4LGtH0ImFfJljr6FTWBODb3HDLS saBnFWCGf4POUHRhdqpHCtc5190SIH6YWJQ2BR9ayZd6uJ7ABoFk15aDuazjUzgG XPtu+ZDHEHi03sZ+vjwXJJHyrOhygcnVDuF+/52LYpOd -----END CERTIFICATE-----Generated at Fri Jan 2 20:04:56 2026 by rpki-client