This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer (raw, json) Hash identifier: ZV8+ZQkFuJQi832YMSEM4i6ScnC5jcquMHBfaEbNRjM= Subject key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77590C40EB671651DEDDA010C67A86F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56697 IP: 185.130.216.0/22 IP: 2a06:e2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0c:40:eb:67:16:51:de:dd:a0:10:c6:7a:86:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b89d87f8e41b5082d38916015e059e56dd0114e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:f6:de:44:65:26:72:0b:f9:ef:59:d0:2f: fc:61:f8:1b:61:98:0e:a2:57:94:93:b5:a6:35:b7: 03:26:97:af:39:46:38:b9:c3:14:d4:bd:a6:f9:d4: f7:01:8b:4b:e8:71:42:59:d1:93:33:e6:f9:bc:74: ea:2e:f8:70:9f:7c:5b:1a:13:67:6f:5d:27:88:c7: 4c:63:af:b1:59:89:e2:1f:d5:32:9e:da:5c:04:0c: 0a:60:6a:a4:a0:d7:f1:ab:a9:96:58:47:d9:95:61: 0f:16:f6:40:77:35:7a:3c:d2:1c:16:36:56:06:72: 34:fc:2a:f2:0a:58:9e:23:69:de:3d:00:4b:ae:76: 3d:97:da:32:9e:ae:04:a9:de:f4:9f:cd:a6:07:02: 48:a7:e8:1e:b1:88:f8:11:24:95:bc:27:86:f1:95: 78:60:df:96:39:15:ed:77:3e:be:00:0c:0a:55:28: 1e:17:33:cf:b3:b3:41:af:96:6f:3d:26:d2:fa:c5: e9:41:7a:f8:6e:62:57:41:15:5e:36:11:83:77:48: ea:38:e7:bb:2d:b4:5c:40:91:b3:9e:b8:0e:0e:37: c5:1a:66:ae:83:20:b9:29:d2:f2:6b:65:2c:c8:9a: b8:c5:1f:ba:ad:30:53:f1:e8:a9:30:f8:ee:14:db: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.216.0/22 IPv6: 2a06:e2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56697 Signature Algorithm: sha256WithRSAEncryption 75:cf:fa:6d:ad:f8:01:e4:2d:eb:d1:15:b0:d0:a5:51:a0:57: 11:47:88:0b:9d:b0:51:1a:8c:30:f0:7e:e6:f2:dd:84:b8:17: d3:d0:9e:a9:52:74:9c:7c:dd:3c:56:c9:e3:be:da:6e:8e:de: 78:e7:73:66:f9:94:45:0b:ad:9b:be:1b:35:cc:1c:57:71:6f: f9:0b:8e:0f:aa:59:4d:03:e3:50:18:0c:87:09:4a:48:97:e2: 19:6b:0e:38:c9:0d:f1:e0:0a:5b:ff:bc:d9:03:c4:61:b4:0e: 61:6e:d9:ed:84:e2:98:38:6d:36:82:4a:fa:7d:04:43:b5:65: c5:d7:48:38:93:2f:53:53:76:3f:60:98:3e:3d:9d:33:1d:18: 46:29:b4:4d:c2:c7:75:d3:d6:be:4d:c7:03:83:1e:2a:8f:ab: 93:c3:32:73:6d:da:3a:33:39:1a:5a:01:41:4a:58:ab:63:ff: d2:ba:91:ac:47:27:f1:28:6e:29:c5:a9:cb:6d:83:36:d7:62: cc:7e:e5:b0:5b:2a:60:33:57:71:51:58:5d:03:18:3f:25:69: c6:32:35:eb:62:26:c7:02:97:f8:8a:43:25:54:8a:fa:fd:78: 42:a9:52:2d:4e:7f:b8:64:9c:1f:14:a2:a7:d6:4e:36:15:af: e1:3e:ce:0b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WQxA62cWUd7doBDGeobxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjg5ZDg3ZjhlNDFiNTA4MmQzODkxNjAxNWUwNTllNTZkZDAxMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rn23kRlJnIL+e9Z0C/8YfgbYZgO oleUk7WmNbcDJpevOUY4ucMU1L2m+dT3AYtL6HFCWdGTM+b5vHTqLvhwn3xbGhNn b10niMdMY6+xWYniH9UyntpcBAwKYGqkoNfxq6mWWEfZlWEPFvZAdzV6PNIcFjZW BnI0/CryClieI2nePQBLrnY9l9oynq4Eqd70n82mBwJIp+gesYj4ESSVvCeG8ZV4 YN+WORXtdz6+AAwKVSgeFzPPs7NBr5ZvPSbS+sXpQXr4bmJXQRVeNhGDd0jqOOe7 LbRcQJGznrgODjfFGmaugyC5KdLya2UsyJq4xR+6rTBT8eipMPjuFNuZnQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEuJ2H+OQbUILTiRYBXgWeVt0BFOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzRiYTk3 My0wZTlmLTQzNTItOTgzOC02NDJkYzkxMjc2ODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNGJhOTcz LTBlOWYtNDM1Mi05ODM4LTY0MmRjOTEyNzY4MC8xL1M0bllmNDVCdFFndE9KRmdG ZUJaNVczUUVVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYLYMA0EAgACMAcDBQMqBuLAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDdeTANBgkqhkiG9w0BAQsFAAOCAQEAdc/6ba34AeQt 69EVsNClUaBXEUeIC52wURqMMPB+5vLdhLgX09CeqVJ0nHzdPFbJ477abo7eeOdz ZvmURQutm74bNcwcV3Fv+QuOD6pZTQPjUBgMhwlKSJfiGWsOOMkN8eAKW/+82QPE YbQOYW7Z7YTimDhtNoJK+n0EQ7VlxddIOJMvU1N2P2CYPj2dMx0YRim0TcLHddPW vk3HA4MeKo+rk8Myc23aOjM5GloBQUpYq2P/0rqRrEcn8ShuKcWpy22DNtdizH7l sFsqYDNXcVFYXQMYPyVpxjI162ImxwKX+IpDJVSK+v14QqlSLU5/uGScHxSip9ZO NhWv4T7OCw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:31 2026 by rpki-client