This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer (raw, json) Hash identifier: /rtATGuG2ZccRhNPHJ00b05fqwLSKCKCutQFzEgfjYs= Subject key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED319E6D5C5FE22CB382436D3EE6A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199937 IP: 185.42.68.0/22 IP: 2a04:8e80::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:31:9e:6d:5c:5f:e2:2c:b3:82:43:6d:3e:e6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:82:9f:40:0c:70:e7:51:9d:9f:b1:d5:4a: 81:26:09:61:c2:71:45:27:3a:2b:d2:53:84:b9:c4: 15:e8:a4:6d:88:7c:20:98:18:51:7a:08:75:3a:73: 36:99:f0:b6:94:e1:c1:33:ce:9a:e5:30:3e:c7:e4: f0:30:da:44:e1:44:37:1c:41:b0:47:fd:fe:48:64: 50:fb:24:3c:c2:1c:f5:32:86:5a:de:f0:06:07:95: 43:04:58:9c:3c:99:61:35:da:85:8e:49:eb:6f:a6: 4d:30:dc:88:b8:fe:c2:38:67:46:a1:54:f7:ca:9b: 3b:81:aa:06:c4:83:ba:3c:08:b3:bd:83:84:1f:e0: 07:39:4a:7a:87:a7:1d:2c:df:9e:c7:df:56:d2:8e: 5b:1a:74:5a:5c:8c:7d:54:7e:ea:99:b2:80:4d:84: d5:be:ed:3c:c9:75:dc:b8:0c:11:ba:1c:d1:1e:66: a1:c8:85:6c:69:ab:b3:34:db:46:29:9d:72:47:3a: 84:7a:1f:de:04:6e:4b:4c:d5:d7:fb:a7:34:46:31: 3e:5d:a8:db:ea:7d:b1:4b:c4:9a:42:24:ed:90:e1: 87:15:45:c2:5c:ca:48:1e:9c:8b:61:51:cf:b3:36: e3:21:3c:7a:bd:d8:25:ca:c9:96:8d:e2:1a:0d:5c: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.68.0/22 IPv6: 2a04:8e80::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199937 Signature Algorithm: sha256WithRSAEncryption 29:ff:9f:25:fa:13:8c:dd:2b:f4:bc:80:6e:58:22:45:e5:8c: 5b:dd:9e:8c:36:a5:8f:fb:db:f0:97:eb:62:fd:c1:54:c5:2d: 11:7d:d9:dc:c6:6c:0d:e1:22:10:76:aa:31:ae:88:20:30:a2: b2:04:24:9b:18:5c:a6:73:b5:46:5c:3a:c8:4d:6a:84:5d:2a: de:5e:d4:81:ce:39:20:7e:05:7a:7a:b2:32:d6:ef:75:b6:79: 93:25:38:2b:60:d6:4a:4c:fe:e1:44:a7:04:cf:34:2f:60:6d: 63:e7:39:30:50:c9:bc:a5:16:69:d8:06:4a:dd:04:66:7d:fd: 70:99:b7:25:29:60:8d:b9:f9:00:cc:77:0c:fe:b5:fd:0f:13: 0e:62:39:d7:2e:c5:6b:46:10:78:d8:b0:ae:e5:b2:7b:31:18: 54:e9:d0:10:bf:6a:a3:c3:23:3e:65:d6:df:9c:e3:ad:cf:ca: 81:2b:7d:f8:ef:3a:d8:9f:fe:a9:a4:6d:aa:db:c2:7d:19:d9: de:24:c3:ca:b1:ca:84:5b:82:4b:f6:b7:9a:6e:12:45:d6:98: d5:58:7b:d6:66:f9:2d:5a:51:91:d6:57:5f:49:64:04:5c:99: d3:9c:33:2c:96:c0:89:ff:7b:b3:e6:39:d9:3e:f6:f9:cc:82: 3f:4a:b2:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87TGebVxf4iyzgkNtPuanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjc5NmYwYjMwNTFiNWJjODE0YjJlODljYjQ3MGEzODI2YjJiZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuqCn0AMcOdRnZ+x1UqBJglhwnFF Jzor0lOEucQV6KRtiHwgmBhRegh1OnM2mfC2lOHBM86a5TA+x+TwMNpE4UQ3HEGw R/3+SGRQ+yQ8whz1MoZa3vAGB5VDBFicPJlhNdqFjknrb6ZNMNyIuP7COGdGoVT3 yps7gaoGxIO6PAizvYOEH+AHOUp6h6cdLN+ex99W0o5bGnRaXIx9VH7qmbKATYTV vu08yXXcuAwRuhzRHmahyIVsaauzNNtGKZ1yRzqEeh/eBG5LTNXX+6c0RjE+Xajb 6n2xS8SaQiTtkOGHFUXCXMpIHpyLYVHPszbjITx6vdglysmWjeIaDVxq0wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEt5bwswUbW8gUsuictHCjgmsr8AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2JiNDZm NS05ZmYyLTQwNTgtOTA1MC1mYmRjYjFhNDE0NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvYmI0NmY1 LTlmZjItNDA1OC05MDUwLWZiZGNiMWE0MTQ2Ny8xL1MzbHZDekJSdGJ5QlN5Nkp5 MGNLT0NheXZ3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSpEMA0EAgACMAcDBQEqBI6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMNATANBgkqhkiG9w0BAQsFAAOCAQEAKf+fJfoTjN0r 9LyAblgiReWMW92ejDalj/vb8JfrYv3BVMUtEX3Z3MZsDeEiEHaqMa6IIDCisgQk mxhcpnO1Rlw6yE1qhF0q3l7Ugc45IH4FenqyMtbvdbZ5kyU4K2DWSkz+4USnBM80 L2BtY+c5MFDJvKUWadgGSt0EZn39cJm3JSlgjbn5AMx3DP61/Q8TDmI51y7Fa0YQ eNiwruWyezEYVOnQEL9qo8MjPmXW35zjrc/KgSt9+O862J/+qaRtqtvCfRnZ3iTD yrHKhFuCS/a3mm4SRdaY1Vh71mb5LVpRkdZXX0lkBFyZ05wzLJbAif97s+Y52T72 +cyCP0qyyw== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:21 2026 by rpki-client