This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer File: SFldSlTtZEITxEYZXjb3jsGig5k.cer (raw, json) Hash identifier: y0PnhIVgrcrGpeXXFMmOiA9GnlzhJmar9tKVdeGjN5s= Subject key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4AF32D3A69B13FEA68C6ED411481E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.83.100.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:af:32:d3:a6:9b:13:fe:a6:8c:6e:d4:11:48:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48595d4a54ed644213c446195e36f78ec1a28399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:d6:31:a3:7b:88:33:35:ae:77:dd:3c:9e: 9c:82:34:33:62:88:30:cb:ec:85:e6:6e:6e:5c:f3: 71:49:cf:70:86:ed:eb:26:c7:72:11:86:10:83:8a: 9f:0d:33:b0:70:47:a6:27:af:b3:26:06:40:be:c2: 78:a6:08:da:97:46:c5:e8:92:09:ca:1e:d9:b2:30: ca:12:64:c1:2a:2b:58:72:0a:5d:73:44:dc:52:10: b8:d9:13:f5:91:f6:15:ce:9e:20:6d:b1:bb:19:2e: f2:77:a3:7e:84:44:22:fa:05:80:0b:ff:b1:e3:96: dd:77:e5:32:73:f7:4e:64:ce:aa:a9:8a:18:53:e0: 81:3d:f8:d1:4e:cd:82:26:3c:3b:19:23:fc:9e:6e: 8f:46:8e:bd:c0:e2:ac:0b:0b:7e:0f:d5:8e:d6:29: 42:a8:12:5d:6f:36:1c:7d:6a:64:bd:42:c9:96:fa: ac:01:47:df:ab:75:cd:19:a0:31:0e:5d:37:28:7b: f4:b7:38:d4:1d:03:b4:f8:9a:3b:49:24:58:cc:c6: ae:72:0b:46:bc:c6:4c:82:37:74:5b:5a:bd:99:18: 8a:4c:76:bb:55:da:59:e2:a2:86:5a:fa:e6:ab:b6: cf:53:75:9a:4c:5b:36:ff:e2:c0:3e:e0:8c:35:81: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.100.0/22 Signature Algorithm: sha256WithRSAEncryption 51:6c:1d:c3:62:6d:7f:ee:d5:87:84:c0:e8:91:30:b3:5e:3f: 9d:36:e2:91:f1:d4:be:01:ed:39:b4:52:f3:a2:2b:c4:18:c3: e4:ef:a0:98:74:11:e1:d0:56:67:1b:03:95:6f:fd:f3:14:01: 1b:25:01:72:cd:d0:c7:c9:08:c3:e1:01:0f:82:8f:22:c3:db: 0d:c6:1a:92:ef:fd:19:ec:1f:e0:ce:cb:41:18:cd:14:ac:55: a6:4f:99:b7:93:5b:3c:c7:8b:04:1d:dc:3b:db:59:71:2b:82: 49:9c:05:70:aa:7a:68:c1:09:3e:b2:bd:29:5f:fa:c5:23:5d: 42:ee:5b:61:d5:9a:7a:bb:4c:ab:66:9b:6f:09:f3:82:58:5b: 64:b8:5c:51:79:a3:a4:f5:62:89:73:9f:78:6b:f2:46:2e:67: a5:9c:df:74:a3:79:59:4f:57:39:a4:b0:0d:6a:c3:5a:67:88: 05:64:da:2a:1e:33:04:f2:1f:f4:d4:a4:69:b7:4a:45:ac:db: b5:ed:4c:a1:a6:a5:11:45:9e:70:97:4f:f6:12:24:73:d9:a9: d1:43:96:ca:ce:01:09:0e:72:13:d8:71:9b:90:70:e4:aa:2a: d9:eb:9d:8c:90:32:f6:c7:b4:df:44:8c:ce:1c:50:01:f4:fb: 99:0a:d7:3b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pK8y06abE/6mjG7UEUgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODU5NWQ0YTU0ZWQ2NDQyMTNjNDQ2MTk1ZTM2Zjc4ZWMxYTI4Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKjWMaN7iDM1rnfdPJ6cgjQzYogw y+yF5m5uXPNxSc9whu3rJsdyEYYQg4qfDTOwcEemJ6+zJgZAvsJ4pgjal0bF6JIJ yh7ZsjDKEmTBKitYcgpdc0TcUhC42RP1kfYVzp4gbbG7GS7yd6N+hEQi+gWAC/+x 45bdd+Uyc/dOZM6qqYoYU+CBPfjRTs2CJjw7GSP8nm6PRo69wOKsCwt+D9WO1ilC qBJdbzYcfWpkvULJlvqsAUffq3XNGaAxDl03KHv0tzjUHQO0+Jo7SSRYzMaucgtG vMZMgjd0W1q9mRiKTHa7VdpZ4qKGWvrmq7bPU3WaTFs2/+LAPuCMNYHszQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEhZXUpU7WRCE8RGGV42947BooOZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzZlNmY1 MS00ZTEzLTQ2NWUtYjRkNi0yZThkY2RkNTE2NTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNmU2ZjUx LTRlMTMtNDY1ZS1iNGQ2LTJlOGRjZGQ1MTY1MS8xL1NGbGRTbFR0WkVJVHhFWVpY amIzanNHaWc1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVNkMA0GCSqGSIb3DQEBCwUAA4IBAQBRbB3D Ym1/7tWHhMDokTCzXj+dNuKR8dS+Ae05tFLzoivEGMPk76CYdBHh0FZnGwOVb/3z FAEbJQFyzdDHyQjD4QEPgo8iw9sNxhqS7/0Z7B/gzstBGM0UrFWmT5m3k1s8x4sE Hdw721lxK4JJnAVwqnpowQk+sr0pX/rFI11C7lth1Zp6u0yrZptvCfOCWFtkuFxR eaOk9WKJc594a/JGLmelnN90o3lZT1c5pLANasNaZ4gFZNoqHjME8h/01KRpt0pF rNu17UyhpqURRZ5wl0/2EiRz2anRQ5bKzgEJDnIT2HGbkHDkqirZ652MkDL2x7Tf RIzOHFAB9PuZCtc7 -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:02 2026 by rpki-client