This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer (raw, json) Hash identifier: wZiCv2P/RahAIm5pahYSyhL4AWX4XTtgGNOwmbFlgGU= Subject key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80792818D4736B868BE6C71992C370 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60980 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:79:28:18:d4:73:6b:86:8b:e6:c7:19:92:c3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:6a:71:8d:95:f6:8b:7b:8b:b4:16:43:0a: dc:28:9a:22:bc:38:5c:e3:1a:72:4f:29:b6:bf:4d: 26:aa:ba:0a:e9:80:b3:49:d7:bd:65:4d:b2:d5:80: 7c:6d:d6:d6:68:59:18:64:50:78:76:ad:87:a1:04: 41:2d:6a:f0:13:6c:b2:d6:08:32:b6:37:8d:87:92: 7a:de:57:c4:1d:1d:e5:84:68:41:76:81:60:4d:51: 3c:d4:56:41:a7:45:0c:9c:d0:05:f0:bc:26:30:01: 3e:94:71:9e:f2:bb:a8:e6:06:bb:d2:bf:3c:65:e9: a0:07:bb:aa:35:a6:dc:01:a3:2b:51:e8:59:6d:cb: ab:26:98:c8:9d:39:0b:96:2f:28:00:83:7d:43:7d: 32:7c:30:b7:ec:3f:a6:65:14:fb:cd:7f:66:6c:be: ac:bd:c4:c4:80:16:c0:dc:6f:d6:d6:d1:3d:75:a6: 1f:a1:b0:08:6c:94:cf:21:cb:cf:a2:e4:4f:00:85: 3a:b1:5e:59:b5:2c:cf:4b:af:cc:6d:6a:bc:5d:99: 51:bf:8e:00:5b:da:ce:ad:84:32:7a:d8:55:e8:64: 13:95:c4:6e:8e:c0:9f:ae:c7:d7:ed:38:12:b3:98: 49:60:7d:2a:fe:55:13:82:5f:e2:0b:a6:cd:a5:eb: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60980 Signature Algorithm: sha256WithRSAEncryption a6:ba:f5:9d:a1:a3:a2:e2:86:f1:b6:29:44:13:ae:6e:2c:e0: 1b:77:85:80:42:2e:eb:db:0e:67:cb:10:0e:2b:61:5a:cf:86: 13:27:a6:30:77:dd:63:f7:4e:4c:2a:4d:cf:1f:38:7a:d8:eb: 5e:a0:d6:c2:a7:e9:9a:83:72:cd:34:7c:b4:da:5d:2e:0a:3d: 4a:fa:67:7f:79:11:20:d1:ad:09:64:51:45:8c:ba:6d:00:ea: c4:b4:47:e5:80:b8:b9:75:6c:74:a9:54:4a:59:ec:20:c7:15: 67:01:ba:41:82:9b:dd:0f:6e:e6:23:80:47:3a:47:7b:26:d5: b7:ab:1f:c8:35:2b:f3:0d:5f:16:64:98:c5:60:58:67:d5:cd: 2a:9a:e1:09:e8:c6:5e:c3:66:c3:c0:b4:d4:24:d0:cb:ca:22: cb:3e:e3:32:40:88:83:39:47:dd:da:2b:1a:7c:05:ae:5c:08: 83:d2:d0:28:c9:07:74:c2:e5:28:c4:79:f6:fb:52:03:c7:1b: 14:0f:98:09:c4:37:8e:aa:88:91:fe:84:2d:e9:a6:34:be:0b: 2d:b2:24:ac:4f:6d:6b:63:48:17:eb:89:fc:af:2a:31:1c:1d: 4a:04:79:88:f5:97:8d:59:c9:70:cf:3a:f3:fe:3b:63:ae:6e: ad:00:f9:f2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8gHkoGNRza4aL5scZksNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTBkMDQyY2ZhNzY2ZTdlMmJiNmYwYjA0YzM3ZDYwM2ZmYTMzODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z9qcY2V9ot7i7QWQwrcKJoivDhc 4xpyTym2v00mqroK6YCzSde9ZU2y1YB8bdbWaFkYZFB4dq2HoQRBLWrwE2yy1ggy tjeNh5J63lfEHR3lhGhBdoFgTVE81FZBp0UMnNAF8LwmMAE+lHGe8ruo5ga70r88 ZemgB7uqNabcAaMrUehZbcurJpjInTkLli8oAIN9Q30yfDC37D+mZRT7zX9mbL6s vcTEgBbA3G/W1tE9daYfobAIbJTPIcvPouRPAIU6sV5ZtSzPS6/MbWq8XZlRv44A W9rOrYQyethV6GQTlcRujsCfrsfX7TgSs5hJYH0q/lUTgl/iC6bNpeveBwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEkNBCz6dm5+K7bwsEw31gP/ozg+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2RjODc3 OC1hNTcwLTRlNDgtYWMzMy05NjI2MmM4MTkzMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvZGM4Nzc4 LWE1NzAtNGU0OC1hYzMzLTk2MjYyYzgxOTMzMy8xL1NRMEVMUHAyYm40cnR2Q3dU RGZXQV8tak9ENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDuNDANBgkqhkiG9w0BAQsFAAOCAQEAprr1naGjouKG 8bYpRBOubizgG3eFgEIu69sOZ8sQDithWs+GEyemMHfdY/dOTCpNzx84etjrXqDW wqfpmoNyzTR8tNpdLgo9Svpnf3kRINGtCWRRRYy6bQDqxLRH5YC4uXVsdKlUSlns IMcVZwG6QYKb3Q9u5iOARzpHeybVt6sfyDUr8w1fFmSYxWBYZ9XNKprhCejGXsNm w8C01CTQy8oiyz7jMkCIgzlH3dorGnwFrlwIg9LQKMkHdMLlKMR59vtSA8cbFA+Y CcQ3jqqIkf6ELemmNL4LLbIkrE9ta2NIF+uJ/K8qMRwdSgR5iPWXjVnJcM868/47 Y65urQD58g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:38 2026 by rpki-client