This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer File: sxU2q-49e1S4MDubxpqKq76XAOQ.cer (raw, json) Hash identifier: HvZiwtd/9/ABmtryJDvuiypDpQ+1wTXjUkISGnBDtDw= Subject key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECB98B9748DFEA6961B61E1122DC3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208592 IP: 45.94.216.0/22 IP: 185.121.2.0/23 IP: 2a04:2c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b9:8b:97:48:df:ea:69:61:b6:1e:11:22:dc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:02:0e:a4:0a:9b:13:c4:5b:6e:fd:95:80: 41:b1:30:b3:5c:d9:15:12:96:5c:5f:3b:f0:cb:be: 4d:22:5d:40:89:92:12:bf:08:d4:a6:fc:7e:df:84: 22:42:27:f0:43:ac:95:0f:87:2d:3e:5d:46:9a:45: 77:48:f7:11:7f:08:16:f2:b4:0c:81:48:fe:bf:21: ce:3e:77:5f:c8:fd:1b:67:2c:ed:f6:03:81:9a:15: 9a:e7:37:84:17:0e:b9:c5:68:a8:ec:e2:a4:2c:a6: df:eb:8c:92:fc:7a:e9:fd:83:92:25:e3:97:d5:af: 98:c4:df:9b:49:be:44:9d:2c:4d:f6:e8:1a:02:9e: 81:2b:f9:69:c3:90:34:df:9d:3c:97:cc:cf:18:62: 16:09:50:a2:4a:00:af:fa:27:8b:0c:d8:ae:1d:bb: 87:e2:cb:59:15:d6:a2:32:1e:ca:cd:53:3b:af:bf: 6a:22:f9:37:ca:b8:5d:dc:e7:8d:5c:65:7d:af:80: e4:83:76:fa:1c:c3:01:15:5e:7a:67:7e:15:3b:f8: 7b:c0:56:c2:28:37:0c:21:66:c5:82:a0:ec:30:75: 91:03:36:c7:6c:99:54:84:c0:6d:62:e6:75:7c:5f: e6:db:5d:8b:1b:68:b2:85:69:fb:d0:6c:f4:bb:a1: 23:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.216.0/22 185.121.2.0/23 IPv6: 2a04:2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208592 Signature Algorithm: sha256WithRSAEncryption 8e:1a:81:65:dc:2e:06:3a:7d:8e:b6:6d:69:80:b4:3d:1c:d6: a2:14:bf:e5:af:af:2e:df:cb:2c:4b:e9:8e:03:90:3b:cd:43: 8e:ab:51:a3:75:e1:72:14:b5:f5:66:75:00:b9:d0:8a:ac:94: 45:e8:c4:5d:4c:20:38:c5:5d:3a:88:6c:e1:d2:2b:18:0b:3c: 75:45:2c:3e:a5:5a:e3:12:73:91:e3:e5:2f:a5:08:e6:00:e5: d3:99:44:5e:d9:51:77:35:3d:cb:b5:8d:9a:7e:07:a5:73:52: b4:a6:a9:75:9b:5c:cc:3c:4f:a1:17:d7:c0:1f:df:9d:06:39: bb:a8:1c:41:00:02:26:dc:58:28:d0:3d:9e:b4:a0:ae:70:ca: 42:8d:f0:f2:73:e9:b2:39:8d:55:7e:8e:ed:5e:a1:35:2c:47: cd:34:c9:4a:14:e5:30:13:88:53:a9:33:db:fd:d0:7e:37:eb: 55:aa:75:b9:81:33:2a:dd:c7:30:c2:b5:b2:88:8d:8e:2b:d1: 5b:b4:b5:2b:27:4e:7c:df:2e:af:b5:a9:32:4f:0e:36:9b:ba: c9:12:af:8d:c0:28:d7:2e:27:1b:0a:3f:49:04:e8:00:fd:c7: da:ed:68:e5:03:f0:5c:c9:3f:0f:0b:36:d1:1f:71:f0:d9:38: be:5f:e2:df -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57LmLl0jf6mlhth4RItw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzE1MzZhYmVlM2Q3YjU0YjgzMDNiOWJjNjlhOGFhYmJlOTcwMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdkCDqQKmxPEW279lYBBsTCzXNkV EpZcXzvwy75NIl1AiZISvwjUpvx+34QiQifwQ6yVD4ctPl1GmkV3SPcRfwgW8rQM gUj+vyHOPndfyP0bZyzt9gOBmhWa5zeEFw65xWio7OKkLKbf64yS/Hrp/YOSJeOX 1a+YxN+bSb5EnSxN9ugaAp6BK/lpw5A03508l8zPGGIWCVCiSgCv+ieLDNiuHbuH 4stZFdaiMh7KzVM7r79qIvk3yrhd3OeNXGV9r4Dkg3b6HMMBFV56Z34VO/h7wFbC KDcMIWbFgqDsMHWRAzbHbJlUhMBtYuZ1fF/m212LG2iyhWn70Gz0u6EjrwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLMVNqvuPXtUuDA7m8aaiqu+lwDkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2RjZjMy Zi0zMjZkLTRlNDAtODVhMy1jY2M4NzdiNWEzNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZGNmMzJm LTMyNmQtNGU0MC04NWEzLWNjYzg3N2I1YTM3NS8xL3N4VTJxLTQ5ZTFTNE1EdWJ4 cHFLcTc2WEFPUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLV7YAwQBuXkCMA0EAgACMAcDBQAqBALAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMu0DANBgkqhkiG9w0BAQsFAAOCAQEAjhqB ZdwuBjp9jrZtaYC0PRzWohS/5a+vLt/LLEvpjgOQO81DjqtRo3XhchS19WZ1ALnQ iqyURejEXUwgOMVdOohs4dIrGAs8dUUsPqVa4xJzkePlL6UI5gDl05lEXtlRdzU9 y7WNmn4HpXNStKapdZtczDxPoRfXwB/fnQY5u6gcQQACJtxYKNA9nrSgrnDKQo3w 8nPpsjmNVX6O7V6hNSxHzTTJShTlMBOIU6kz2/3QfjfrVap1uYEzKt3HMMK1soiN jivRW7S1KydOfN8ur7WpMk8ONpu6yRKvjcAo1y4nGwo/SQToAP3H2u1o5QPwXMk/ Dws20R9x8Nk4vl/i3w== -----END CERTIFICATE-----Generated at Sat Jan 3 13:19:35 2026 by rpki-client