This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer File: S92aEzqSSGoU7cTnYlsk-V04kcw.cer (raw, json) Hash identifier: 1+pFv7U1BFL3KYxksvX8tf7moQq0N9tojNGFrCnNJKc= Subject key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77593773415B85AC37956C5CC709662C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197931 IP: 45.128.98.0/24 IP: 91.216.98.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:37:73:41:5b:85:ac:37:95:6c:5c:c7:09:66:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:4b:03:ae:f6:f7:a6:7f:97:63:75:6d:24: 06:56:01:48:4a:6d:a8:eb:14:59:2b:33:bd:ef:d0: e1:b8:d4:78:c2:37:6a:dc:4c:d6:fd:0a:c0:ba:1b: a7:54:9c:17:1b:aa:9e:2f:56:29:3f:97:78:8c:ae: 6a:0c:a5:b6:62:c5:47:4a:38:86:02:a7:c2:f8:2a: 40:66:bd:b1:6f:11:65:15:7a:5f:74:6f:d9:99:e3: f1:8f:b8:66:dd:b7:7c:f7:be:c1:77:e8:99:5a:54: b2:9e:fc:43:71:07:b9:6a:80:fe:48:cf:b0:c2:b8: 76:51:0d:01:18:7c:9c:da:5e:b2:a0:55:4b:c1:65: 02:7e:cb:26:4b:74:0d:59:47:5d:6f:2c:aa:23:3b: 15:27:84:e4:d4:14:69:d1:d9:95:d9:68:ae:4c:a6: 17:d1:20:0a:57:87:81:ef:da:0b:77:5c:3b:f7:4b: 70:43:85:47:fc:8d:a3:a8:e5:c9:94:95:61:17:58: de:52:8a:23:4d:b8:94:39:ad:7c:9e:80:65:2c:92: 03:e0:18:15:6c:80:eb:4d:73:f9:b8:1e:3a:ef:ec: 01:c6:09:1c:9a:b7:ff:86:65:44:62:62:7f:99:9f: 3c:4d:29:4e:c1:34:c7:4c:ef:46:d4:6a:cc:e7:7c: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.98.0/24 91.216.98.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197931 Signature Algorithm: sha256WithRSAEncryption b1:a5:45:e6:d5:6d:a5:e8:90:5f:08:df:5c:46:ac:10:27:0a: 75:f3:a6:ba:f0:8a:a4:9c:48:8b:70:f5:e6:22:b5:e5:3a:85: 47:f4:bf:c9:02:e2:15:28:79:9c:14:48:cb:99:9d:a4:53:8d: b8:64:d5:56:bb:a3:b2:d5:61:a5:f1:f6:c2:9e:24:9f:f1:f0: 09:69:d5:85:a2:54:75:ff:58:48:aa:22:8a:04:7d:94:9d:7d: 67:bf:ea:cb:57:1c:6f:03:cb:8b:60:fc:fe:75:4c:ef:75:43: 27:1c:2f:10:37:b8:ba:c6:93:64:e2:01:fb:5e:ed:2f:7f:c2: 55:c1:92:f4:28:1d:26:1c:5c:39:fb:80:1b:9f:09:5b:71:20: c0:a5:46:f1:ec:d1:13:ca:d1:07:ca:8e:15:88:6d:38:16:d0: ed:d4:d0:6a:55:9d:5e:7c:fb:ec:69:e9:95:44:a8:fe:d7:9a: 5d:85:0d:a1:be:a6:ff:c8:82:f1:c0:eb:43:51:50:85:09:12: fe:42:30:c4:f7:02:a7:f6:bc:9b:6b:68:4d:cd:82:c1:86:31: 4a:7d:a3:40:b7:fd:47:65:fc:30:b9:8b:13:de:bf:5d:5a:a3: df:78:eb:3e:8d:47:22:7b:be:a0:46:8b:50:29:5f:a8:36:03: 57:b8:3d:20 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt3WTdzQVuFrDeVbFzHCWYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmRkOWExMzNhOTI0ODZhMTRlZGM0ZTc2MjViMjRmOTVkMzg5MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi91LA67296Z/l2N1bSQGVgFISm2o 6xRZKzO979DhuNR4wjdq3EzW/QrAuhunVJwXG6qeL1YpP5d4jK5qDKW2YsVHSjiG AqfC+CpAZr2xbxFlFXpfdG/ZmePxj7hm3bd8977Bd+iZWlSynvxDcQe5aoD+SM+w wrh2UQ0BGHyc2l6yoFVLwWUCfssmS3QNWUddbyyqIzsVJ4Tk1BRp0dmV2WiuTKYX 0SAKV4eB79oLd1w790twQ4VH/I2jqOXJlJVhF1jeUoojTbiUOa18noBlLJID4BgV bIDrTXP5uB467+wBxgkcmrf/hmVEYmJ/mZ88TSlOwTTHTO9G1GrM53z0PQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFEvdmhM6kkhqFO3E52JbJPldOJHMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzcwYTQ5 OS1jODdlLTQ1NDYtODk1MC1iNzA0ZWUyN2M2NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNzBhNDk5 LWM4N2UtNDU0Ni04OTUwLWI3MDRlZTI3YzY1Yy8xL1M5MmFFenFTU0dvVTdjVG5Z bHNrLVYwNGtjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQALYBiAwQAW9hiMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMFKzANBgkqhkiG9w0BAQsFAAOCAQEAsaVF5tVtpeiQXwjfXEasECcK dfOmuvCKpJxIi3D15iK15TqFR/S/yQLiFSh5nBRIy5mdpFONuGTVVrujstVhpfH2 wp4kn/HwCWnVhaJUdf9YSKoiigR9lJ19Z7/qy1ccbwPLi2D8/nVM73VDJxwvEDe4 usaTZOIB+17tL3/CVcGS9CgdJhxcOfuAG58JW3EgwKVG8ezRE8rRB8qOFYhtOBbQ 7dTQalWdXnz77GnplUSo/teaXYUNob6m/8iC8cDrQ1FQhQkS/kIwxPcCp/a8m2to Tc2CwYYxSn2jQLf9R2X8MLmLE96/XVqj33jrPo1HInu+oEaLUClfqDYDV7g9IA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:08 2026 by rpki-client