This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer File: S-iWpBlThdS5S3KVmIzPv6ismcU.cer (raw, json) Hash identifier: xYHhbs1Tv5zjShLsOreyRFDzHdfuiZlHiJdbgF+QB/g= Subject key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F0AF997BD00E26BC225EA99EA0BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205052 IP: 185.231.196.0/22 IP: 2a0c:7900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f0:af:99:7b:d0:0e:26:bc:22:5e:a9:9e:a0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:70:7a:02:73:39:91:45:9a:c8:10:a5:fc: 35:cc:16:32:42:68:76:10:f4:81:16:ed:8e:a9:e1: ca:e2:e9:d0:70:62:2a:fb:ee:52:48:4e:dd:a5:8f: 28:f3:c7:ae:14:34:01:5c:6d:e9:b2:36:14:1f:9a: 10:c9:4c:3e:76:33:bd:8c:3a:57:3c:61:c8:88:1d: e5:18:8d:d6:14:5a:6d:d1:d8:29:b2:e2:ff:28:8e: f3:bb:63:df:c0:5b:9e:e7:f8:d3:88:a2:2f:bd:15: e6:89:f5:b4:77:cf:c0:ec:11:fc:95:26:1c:bb:82: d7:f2:4c:3f:ea:09:17:59:a4:e4:de:8e:26:a7:2d: c1:44:2e:20:c8:c5:f8:40:0e:64:c4:da:8a:72:f4: 50:ff:95:71:bd:74:b4:81:88:6f:e6:55:ed:dc:61: ea:38:e4:b5:c9:28:98:e0:9b:9f:3c:99:0c:e9:0d: 1b:59:f2:14:1d:b1:b6:cf:51:21:e9:9d:d4:a7:9a: 79:f7:c3:75:50:2b:97:0c:6d:1a:3e:24:63:92:49: bb:e0:b7:6b:9a:ad:cf:b3:52:61:15:b7:37:e4:bf: e6:53:50:7b:50:c3:cc:55:0e:60:9d:d7:e7:06:23: 27:20:aa:79:4d:e6:28:29:6f:88:a3:f2:8f:be:e3: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.196.0/22 IPv6: 2a0c:7900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205052 Signature Algorithm: sha256WithRSAEncryption 89:fe:e3:23:16:57:02:b0:18:04:fa:47:a3:1c:96:72:33:07: 76:15:68:53:a1:47:bf:cc:2d:7f:4c:f1:2e:10:b8:3e:74:1b: 7f:c3:94:26:e6:6b:53:36:99:e4:93:d0:0a:f7:b8:2e:9c:57: 1a:ea:8c:bc:7d:90:b2:82:fb:59:d8:12:f5:76:9e:0c:bd:6b: a6:98:14:ec:88:29:51:a2:23:cc:f8:27:38:99:28:82:a9:8c: 1a:22:02:20:c6:bc:2c:ef:ec:ef:c3:d0:73:49:ce:c7:c3:1c: 14:d6:48:ad:1e:62:a0:57:35:da:e9:a2:2d:fc:92:cd:93:f8: d8:02:11:35:bd:63:be:81:25:85:15:f5:8f:8e:3e:84:b6:d8: d4:1e:77:6f:d7:5a:77:60:7b:f4:ec:3e:64:f5:b6:00:8d:da: 41:f5:47:f5:07:5a:95:64:e0:fd:05:80:f4:96:f7:82:b4:e4: 6a:bf:e5:89:56:a8:86:02:76:c6:da:ac:2e:6a:34:91:5b:30: 7c:14:0e:d1:4c:54:7a:bd:5e:80:8f:11:f1:68:ca:b4:4a:f9: f0:a9:e4:0a:89:97:52:44:98:82:3b:48:60:b9:be:38:31:ea: 2a:a5:94:1f:c5:ce:c6:01:1a:4d:da:e3:84:8f:3c:c3:44:5d: a2:75:50:24 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FfCvmXvQDia8Il6pnqC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmU4OTZhNDE5NTM4NWQ0Yjk0YjcyOTU5ODhjY2ZiZmE4YWM5OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQdwegJzOZFFmsgQpfw1zBYyQmh2 EPSBFu2OqeHK4unQcGIq++5SSE7dpY8o88euFDQBXG3psjYUH5oQyUw+djO9jDpX PGHIiB3lGI3WFFpt0dgpsuL/KI7zu2PfwFue5/jTiKIvvRXmifW0d8/A7BH8lSYc u4LX8kw/6gkXWaTk3o4mpy3BRC4gyMX4QA5kxNqKcvRQ/5VxvXS0gYhv5lXt3GHq OOS1ySiY4JufPJkM6Q0bWfIUHbG2z1Eh6Z3Up5p598N1UCuXDG0aPiRjkkm74Ldr mq3Ps1JhFbc35L/mU1B7UMPMVQ5gndfnBiMnIKp5TeYoKW+Io/KPvuMNnQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEvolqQZU4XUuUtylZiMz7+orJnFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzdhMTNl ZS1iNzMxLTRmZjktYmVmMC00YjE1ODFmMDlkM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvN2ExM2Vl LWI3MzEtNGZmOS1iZWYwLTRiMTU4MWYwOWQzYi8xL1MtaVdwQmxUaGRTNVMzS1Zt SXpQdjZpc21jVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuefEMA0EAgACMAcDBQMqDHkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMg/DANBgkqhkiG9w0BAQsFAAOCAQEAif7jIxZXArAY BPpHoxyWcjMHdhVoU6FHv8wtf0zxLhC4PnQbf8OUJuZrUzaZ5JPQCve4LpxXGuqM vH2QsoL7WdgS9XaeDL1rppgU7IgpUaIjzPgnOJkogqmMGiICIMa8LO/s78PQc0nO x8McFNZIrR5ioFc12umiLfySzZP42AIRNb1jvoElhRX1j44+hLbY1B53b9dad2B7 9Ow+ZPW2AI3aQfVH9QdalWTg/QWA9Jb3grTkar/liVaohgJ2xtqsLmo0kVswfBQO 0UxUer1egI8R8WjKtEr58KnkComXUkSYgjtIYLm+ODHqKqWUH8XOxgEaTdrjhI88 w0RdonVQJA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:51 2026 by rpki-client