This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer (raw, json) Hash identifier: qRqCel0P+U2QwNZhtpb1TzakS4d36gtEEb+lqY8X1SI= Subject key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1602F74A163ABCFFEEBE98FC3C719C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34305 AS: 205467 IP: 85.12.0.0/18 IP: 91.148.192.0/18 IP: 176.124.71.0/24 IP: 185.91.28.0/22 IP: 193.138.220.0 -- 193.138.231.255 IP: 195.200.84.0/23 IP: 2a01:788::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:02:f7:4a:16:3a:bc:ff:ee:be:98:fc:3c:71:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b48cf146b4c73d274096d705708d24b729329f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:0d:5a:91:56:9c:f4:b1:53:04:1d:da:64: 6e:20:28:b1:93:4c:6e:e5:11:e9:50:72:15:c1:85: 31:6e:db:36:fd:0a:c7:59:1a:25:04:4d:b5:46:24: f4:97:36:bd:a5:3a:33:e7:3d:71:f5:57:d3:9c:3d: 5e:41:e1:8b:91:08:48:dd:11:7c:27:8f:05:5f:25: 3e:34:9d:2c:3c:e3:64:71:59:41:43:dd:2f:ec:66: a0:eb:0e:61:08:45:c0:44:26:1a:47:06:75:ab:81: 54:d0:70:3a:de:36:b9:a4:48:a0:07:09:e7:c2:9c: 13:3f:69:18:25:9a:4a:92:cf:ce:21:b1:ca:6e:95: f9:38:ac:6d:b0:22:de:91:4c:13:b4:c0:82:d6:28: 48:82:0e:05:a5:d6:e7:8e:d5:05:36:55:95:13:a3: 45:79:c4:d8:a6:54:a9:3d:75:fd:4d:29:f7:cd:cf: 9a:3b:3e:0d:21:84:bc:66:cb:7d:76:6e:08:e7:70: 95:2a:23:c9:fb:0c:e4:ee:83:30:dc:23:53:ce:a1: 35:48:4c:48:3a:cd:87:2a:c0:70:a2:eb:98:b2:7e: 95:fe:bd:64:58:16:71:60:f7:39:43:96:b3:a5:17: d3:32:86:8b:95:c7:e2:e2:4c:0d:14:aa:dd:3e:e8: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.12.0.0/18 91.148.192.0/18 176.124.71.0/24 185.91.28.0/22 193.138.220.0-193.138.231.255 195.200.84.0/23 IPv6: 2a01:788::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34305 205467 Signature Algorithm: sha256WithRSAEncryption 79:f2:19:6d:56:f9:c0:80:49:08:99:12:0e:b8:3b:56:c5:04: c4:fa:61:05:c1:bc:74:98:db:a7:b6:7b:91:0d:90:45:a8:46: 65:63:49:13:e3:16:b4:87:4e:94:ea:a8:d1:98:58:8e:0c:1c: 9e:1f:02:ff:c9:38:ed:9c:de:e0:3f:c7:96:65:51:99:a7:59: a1:38:bb:b4:62:b9:17:3b:c9:b4:64:b5:ee:6a:8d:8e:dd:c2: c8:35:2d:5a:a8:91:a9:0d:fc:7e:88:9b:2b:f7:e6:c6:8b:c9: d1:30:da:be:a0:93:9b:26:de:14:78:dd:42:41:3e:aa:0b:46: 43:65:56:e8:71:d7:36:28:82:29:7b:97:f7:dd:80:d8:15:c4: a4:4a:72:d9:58:8f:c8:2c:83:6a:26:c6:86:c4:f4:3b:b4:b6: 39:b8:29:7b:ce:1e:5a:c0:39:42:3e:4b:c8:33:26:48:10:15: 53:64:3c:2c:c0:f4:82:c1:2b:05:51:63:04:63:b0:34:e2:58: b1:9d:03:16:a6:11:22:a2:2e:17:3f:eb:f3:6f:97:62:c5:f5: 13:cf:cd:b5:9c:e2:a0:8c:13:16:3d:b1:2d:b1:8c:e2:a7:1a: f7:cb:18:d9:62:84:59:33:8b:ac:62:cb:0b:1c:3c:da:9e:01: a5:82:da:de -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt/FgL3ShY6vP/uvpj8PHGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjQ4Y2YxNDZiNGM3M2QyNzQwOTZkNzA1NzA4ZDI0YjcyOTMyOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz0NWpFWnPSxUwQd2mRuICixk0xu 5RHpUHIVwYUxbts2/QrHWRolBE21RiT0lza9pToz5z1x9VfTnD1eQeGLkQhI3RF8 J48FXyU+NJ0sPONkcVlBQ90v7Gag6w5hCEXARCYaRwZ1q4FU0HA63ja5pEigBwnn wpwTP2kYJZpKks/OIbHKbpX5OKxtsCLekUwTtMCC1ihIgg4FpdbnjtUFNlWVE6NF ecTYplSpPXX9TSn3zc+aOz4NIYS8Zst9dm4I53CVKiPJ+wzk7oMw3CNTzqE1SExI Os2HKsBwouuYsn6V/r1kWBZxYPc5Q5azpRfTMoaLlcfi4kwNFKrdPujgzQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFEtIzxRrTHPSdAltcFcI0ktykyn4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzNiYmI1 Mi0zOTNlLTQ3NjItYTcwYy02NGE2YTA1Yjk5MDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvM2JiYjUy LTM5M2UtNDc2Mi1hNzBjLTY0YTZhMDViOTkwNS8xL1MwalBGR3RNYzlKMENXMXdW d2pTUzNLVEtmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQGVQwAAwQGW5TAAwQAsHxHAwQCuVscMAwDBALB itwDBAPBiuADBAHDyFQwDQQCAAIwBwMFACoBB4gwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAIYBAgMDIpswDQYJKoZIhvcNAQELBQADggEBAHnyGW1W+cCASQiZEg64 O1bFBMT6YQXBvHSY26e2e5ENkEWoRmVjSRPjFrSHTpTqqNGYWI4MHJ4fAv/JOO2c 3uA/x5ZlUZmnWaE4u7RiuRc7ybRkte5qjY7dwsg1LVqokakN/H6Imyv35saLydEw 2r6gk5sm3hR43UJBPqoLRkNlVuhx1zYogil7l/fdgNgVxKRKctlYj8gsg2omxobE 9Du0tjm4KXvOHlrAOUI+S8gzJkgQFVNkPCzA9ILBKwVRYwRjsDTiWLGdAxamESKi Lhc/6/Nvl2LF9RPPzbWc4qCMExY9sS2xjOKnGvfLGNlihFkzi6xiywscPNqeAaWC 2t4= -----END CERTIFICATE-----Generated at Mon Jan 12 00:52:05 2026 by rpki-client