This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer File: S2jh-6e0SntmYjayElPX1jYtDYM.cer (raw, json) Hash identifier: 68vW1kDrASbGo83/308QHws9LugzzfrILcMmEKGc/YU= Subject key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834353E3719DB9D9B4BA7517E44DBD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.17.197.0/24 IP: 194.145.114.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:35:3e:37:19:db:9d:9b:4b:a7:51:7e:44:db:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:5b:a0:27:c7:8c:39:fd:dd:c2:d9:50:af: 98:93:9f:d2:96:e2:c2:2c:f3:e1:2d:76:5a:93:b3: e7:5b:4d:d8:6c:e9:d7:0a:7c:31:04:75:13:7e:29: 8b:64:f4:91:fe:85:3d:04:af:51:7e:81:12:e8:8b: af:ac:fe:c0:b1:a4:a8:2e:8a:7a:97:b1:e6:b4:46: b7:c8:71:dc:f5:e5:71:e4:86:0d:97:3f:78:65:49: 71:0a:fb:4a:cb:d2:44:e8:45:f8:8f:39:6d:7b:c8: ef:8b:93:57:f9:ab:a0:a1:77:67:72:08:9c:9e:aa: 50:2e:7e:8f:b2:41:53:64:8b:96:60:11:74:a7:4a: 06:7b:ed:64:ff:f1:15:9f:4d:11:71:37:aa:34:4b: ec:f7:6b:75:a2:25:18:76:72:4c:c0:f1:11:5d:50: 51:87:3a:a7:ef:2e:5a:b1:c0:28:97:d3:a2:79:e4: cc:16:e4:81:7a:3d:f9:e4:52:b2:d7:e7:db:71:b6: 5e:d7:ca:3e:03:a3:3a:bf:3c:cc:3e:39:83:91:50: 51:43:7f:09:c6:81:b8:d6:25:e7:d3:ec:2d:b7:60: 7e:29:45:ff:1a:23:41:08:bd:2e:9f:03:ba:e2:0f: ce:e7:23:f4:2a:5e:2a:c7:b0:1a:93:86:55:9a:6e: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.197.0/24 194.145.114.0/24 Signature Algorithm: sha256WithRSAEncryption 58:a7:f9:4d:7e:f7:dd:b9:ce:48:f3:f2:e9:8f:3e:e5:f5:ad: 18:46:04:b6:c4:3a:87:a9:97:66:9c:da:d8:ae:b2:14:3f:a9: 6b:f2:22:c1:48:40:22:35:5b:5d:1a:18:77:0f:fa:42:ec:eb: f3:f4:cf:f0:d7:db:fc:8a:4c:84:3b:6c:b4:ac:5b:bc:1f:6e: 25:6a:00:ad:1a:a0:de:17:6a:2b:9c:be:9d:84:47:e4:d3:c2: a3:4f:f2:27:5c:f6:56:f2:31:2f:44:f5:e6:e3:62:82:d1:50: aa:32:05:43:6d:91:c9:fb:0f:a4:c6:cd:c6:67:80:48:00:74: 1a:4c:65:b9:c4:74:1a:28:77:84:ef:24:8e:22:01:b7:e1:0c: 74:86:6c:75:da:e3:d0:4e:3f:a5:ce:2b:73:98:a5:2c:25:16: fb:84:1d:9c:47:6c:09:50:78:4d:7b:2d:cf:9d:71:83:83:2c: 32:0a:d0:27:4c:2c:15:61:d9:d7:6c:9e:90:f3:5c:52:b8:f0: b3:36:cb:74:4b:f1:6a:3f:74:d4:dc:7d:9b:89:9b:f5:96:a6: 4d:7f:8d:43:1b:61:2f:d4:f2:3f:b0:29:ba:43:ab:5c:17:06: c5:be:58:98:ba:8c:75:b8:e2:d4:87:7f:f1:7e:da:c0:20:9a: 95:d4:2c:a1 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt4NDU+NxnbnZtLp1F+RNvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjY4ZTFmYmE3YjQ0YTdiNjY2MjM2YjIxMjUzZDdkNjM2MmQwZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArItboCfHjDn93cLZUK+Yk5/SluLC LPPhLXZak7PnW03YbOnXCnwxBHUTfimLZPSR/oU9BK9RfoES6IuvrP7AsaSoLop6 l7HmtEa3yHHc9eVx5IYNlz94ZUlxCvtKy9JE6EX4jzlte8jvi5NX+augoXdncgic nqpQLn6PskFTZIuWYBF0p0oGe+1k//EVn00RcTeqNEvs92t1oiUYdnJMwPERXVBR hzqn7y5ascAol9OieeTMFuSBej355FKy1+fbcbZe18o+A6M6vzzMPjmDkVBRQ38J xoG41iXn0+wtt2B+KUX/GiNBCL0unwO64g/O5yP0Kl4qx7Aak4ZVmm4kkQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFEto4funtEp7ZmI2shJT19Y2LQ2DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2YxNDA3 OS00MTE0LTRiZWMtODc5Yy04YjA2ZWM1NjRhMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZjE0MDc5 LTQxMTQtNGJlYy04NzljLThiMDZlYzU2NGExYi8xL1MyamgtNmUwU250bVlqYXlF bFBYMWpZdERZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwRHFAwQAwpFyMA0GCSqGSIb3DQEBCwUAA4IB AQBYp/lNfvfduc5I8/Lpjz7l9a0YRgS2xDqHqZdmnNrYrrIUP6lr8iLBSEAiNVtd Ghh3D/pC7Ovz9M/w19v8ikyEO2y0rFu8H24lagCtGqDeF2ornL6dhEfk08KjT/In XPZW8jEvRPXm42KC0VCqMgVDbZHJ+w+kxs3GZ4BIAHQaTGW5xHQaKHeE7ySOIgG3 4Qx0hmx12uPQTj+lzitzmKUsJRb7hB2cR2wJUHhNey3PnXGDgywyCtAnTCwVYdnX bJ6Q81xSuPCzNst0S/FqP3TU3H2biZv1lqZNf41DG2Ev1PI/sCm6Q6tcFwbFvliY uox1uOLUh3/xftrAIJqV1Cyh -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:53 2026 by rpki-client