This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer File: S3CjpsSoVyUDdZizkT4hhp29040.cer (raw, json) Hash identifier: /nyKdUya/IT14DfcNjcAOmw2p0xZByWsgZwo/eSf0iI= Subject key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3751CF7FA6FCB50170DE83B51961BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197444 IP: 91.217.52.0/23 IP: 91.221.148.0/23 IP: 217.26.221.0/24 IP: 2001:67c:2038::/48 IP: 2a13:50c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:51:cf:7f:a6:fc:b5:01:70:de:83:b5:19:61:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:29:46:b7:af:10:54:0e:a8:cd:72:f0:70: 5f:01:e2:60:be:a2:2a:41:87:9c:6f:12:d1:3c:f0: 95:e9:ae:d0:7b:5e:05:89:74:e7:c2:6e:6a:b0:20: 7f:6c:fa:bc:31:f1:20:d3:ab:64:c2:e8:ed:0c:06: 6d:82:1c:f6:8d:7b:8f:1b:1e:2f:ff:40:1e:3a:cd: 6f:d0:f8:33:59:df:bd:5a:3d:a4:a6:2d:70:d8:ad: d3:e1:f5:87:08:67:6a:13:65:51:f3:9f:42:4d:38: d6:f3:2e:b7:b4:de:02:13:d5:03:83:c2:1d:d0:0f: 8f:2f:ba:3a:c6:d3:df:3b:73:e9:4c:61:4e:52:01: 32:f9:82:01:8d:0e:f1:7f:7f:a6:95:18:1e:da:90: 94:cc:58:34:53:8e:fe:33:80:f3:3f:61:4c:4d:8c: ff:df:a1:73:d5:65:7a:34:62:c7:8d:be:54:bd:61: f2:fc:b7:36:7d:9f:70:f3:85:bb:2e:06:1f:2b:aa: 66:97:63:9c:71:41:21:b3:90:26:3c:de:29:79:4c: ad:40:c9:f8:2b:da:5d:f5:10:5b:1e:af:23:94:15: e5:2f:a2:97:d5:01:35:80:05:71:ab:41:ce:3a:e9: a6:07:87:72:d6:91:f2:57:f2:fc:50:a6:02:ff:f7: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.52.0/23 91.221.148.0/23 217.26.221.0/24 IPv6: 2001:67c:2038::/48 2a13:50c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197444 Signature Algorithm: sha256WithRSAEncryption 6e:9b:bb:3f:d0:4f:5c:dd:39:1a:56:40:36:05:c1:28:51:c6: 7a:15:18:af:11:2a:ac:81:e5:b1:ec:15:77:53:32:c0:83:b0: 44:f8:53:7c:e8:59:f4:85:5c:12:85:02:08:3a:18:19:a6:13: 62:4a:fd:09:b1:fe:00:03:62:fc:74:20:1a:b3:a2:96:96:3a: 08:75:05:0f:92:54:59:81:42:8b:76:a5:e8:40:d3:75:d9:0b: 8c:99:46:22:2f:74:7f:8b:42:63:16:5e:c4:95:02:2c:8e:65: e0:a5:ec:1f:3e:9a:95:25:d4:a3:cc:a2:3b:ee:e3:59:84:bf: 0f:71:20:ef:23:55:7e:8c:7a:60:06:2e:f4:03:e5:fd:a1:82: 9e:69:f1:52:39:94:c3:23:71:8f:ea:d1:d7:fb:e5:df:8c:b9: 7a:e1:06:35:6d:fd:93:b1:4f:56:1a:d2:d5:ff:a7:e3:a3:ad: 2e:84:35:6a:81:2b:35:d4:52:6a:80:62:48:3e:a7:36:73:bb: 40:cc:c7:bf:b3:6b:6c:0c:42:d7:61:2f:7a:f3:e0:eb:38:24: a0:8b:fe:92:ea:4e:e6:48:51:19:63:1d:22:e1:48:68:05:95: bc:68:38:5b:ce:61:5b:97:01:95:d8:f1:4d:64:be:8f:81:67: 26:68:a4:14 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt+N1HPf6b8tQFw3oO1GWG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjcwYTNhNmM0YTg1NzI1MDM3NTk4YjM5MTNlMjE4NjlkYmRkMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2IpRrevEFQOqM1y8HBfAeJgvqIq QYecbxLRPPCV6a7Qe14FiXTnwm5qsCB/bPq8MfEg06tkwujtDAZtghz2jXuPGx4v /0AeOs1v0PgzWd+9Wj2kpi1w2K3T4fWHCGdqE2VR859CTTjW8y63tN4CE9UDg8Id 0A+PL7o6xtPfO3PpTGFOUgEy+YIBjQ7xf3+mlRge2pCUzFg0U47+M4DzP2FMTYz/ 36Fz1WV6NGLHjb5UvWHy/Lc2fZ9w84W7LgYfK6pml2OccUEhs5AmPN4peUytQMn4 K9pd9RBbHq8jlBXlL6KX1QE1gAVxq0HOOummB4dy1pHyV/L8UKYC//fkvwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFEtwo6bEqFclA3WYs5E+IYadvdONMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2RjNzAx MC0xOWY5LTQ3NjgtYTYxNS00ODI1YjI5ZGQ1NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZGM3MDEw LTE5ZjktNDc2OC1hNjE1LTQ4MjViMjlkZDU3Mi8xL1MzQ2pwc1NvVnlVRGRaaXpr VDRoaHAyOTA0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQBW9k0AwQBW92UAwQA2RrdMBYEAgACMBADBwAg AQZ8IDgDBQMqE1DAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMDRDANBgkqhkiG 9w0BAQsFAAOCAQEAbpu7P9BPXN05GlZANgXBKFHGehUYrxEqrIHlsewVd1MywIOw RPhTfOhZ9IVcEoUCCDoYGaYTYkr9CbH+AANi/HQgGrOilpY6CHUFD5JUWYFCi3al 6EDTddkLjJlGIi90f4tCYxZexJUCLI5l4KXsHz6alSXUo8yiO+7jWYS/D3Eg7yNV fox6YAYu9APl/aGCnmnxUjmUwyNxj+rR1/vl34y5euEGNW39k7FPVhrS1f+n46Ot LoQ1aoErNdRSaoBiSD6nNnO7QMzHv7NrbAxC12EvevPg6zgkoIv+kupO5khRGWMd IuFIaAWVvGg4W85hW5cBldjxTWS+j4FnJmikFA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:36 2026 by rpki-client