This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer (raw, json) Hash identifier: 2v6Ltc07OQMwvvTa+6TcEqsy8nxTh2ov8BmDtjjfH1s= Subject key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E000F1F423BBD6D3FE285D27F1588 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209807 IP: 2001:67c:ed0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:00:0f:1f:42:3b:bd:6d:3f:e2:85:d2:7f:15:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:ab:1a:64:13:5a:4b:dd:16:a4:08:09:06: be:d9:70:cc:c0:73:86:d6:cb:ca:73:37:36:68:5d: 54:d2:60:45:98:c6:b0:e7:2d:e3:90:5b:95:c7:73: 2c:f0:43:1e:85:ea:b3:a6:7b:1b:99:de:ff:0b:90: 1c:04:f8:54:a2:4b:a3:1d:aa:fd:c9:f4:39:bf:5e: d3:09:e6:e9:2c:ba:cf:22:7e:d2:03:4c:87:a3:6f: c8:93:24:8f:ee:92:e7:00:da:f7:3a:38:af:dc:1f: 77:4e:8d:92:c2:d7:cc:18:05:1f:7b:7e:72:e5:5d: 94:5a:0c:27:10:d8:f3:00:da:77:e2:a7:de:e6:a7: 66:8c:4f:cb:3a:f5:85:76:82:6f:ba:72:4f:76:69: d1:de:09:32:36:e8:ec:60:8a:fc:af:d2:8a:ec:2c: c4:42:ae:17:65:60:c1:91:92:6a:36:f6:e7:8d:ee: 2b:d6:84:d1:ae:c7:f1:5a:d1:f9:3d:a8:b9:3c:51: 42:0f:f6:2e:39:85:9b:95:1e:39:e1:35:0b:68:da: fc:3e:33:2f:a4:8c:2a:96:b4:e1:8a:2f:84:79:00: 6d:f9:48:c1:fc:87:f0:32:dd:f8:2d:f6:b7:5a:64: 16:51:3f:f8:f6:cf:33:da:d0:04:99:68:53:25:33: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ed0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209807 Signature Algorithm: sha256WithRSAEncryption 27:9d:4b:77:3f:af:22:8e:bb:d3:fd:5e:b8:9b:79:f6:eb:bd: da:5a:ae:8e:27:42:9f:59:35:b9:4a:44:cf:62:4f:b8:37:a0: a9:d2:5b:77:72:bc:5d:1e:67:cd:62:4f:cc:15:e7:1a:6e:75: 53:19:b9:f3:f5:09:ca:ab:b7:2e:6f:2b:8c:6d:d1:35:28:14: dd:a3:07:f5:52:06:53:3c:41:ba:b4:3a:42:74:48:5f:54:bf: e1:1c:07:b3:3e:26:c0:99:24:63:d1:2d:d5:1e:e2:8e:c9:1f: 00:84:c6:0d:b8:81:d6:88:8f:5b:c1:20:67:f3:68:7e:ac:94: 6f:e0:9b:87:74:8c:d6:10:93:27:8e:20:4f:ac:d1:b9:df:07: e6:f8:e3:31:4e:5d:f4:01:08:21:6f:47:1c:90:41:44:51:35: dc:e9:a9:b5:f1:7a:cc:7f:78:b2:4d:b4:f8:3f:8b:72:07:1a: 72:82:07:fd:a8:1e:55:e0:f8:fa:27:af:66:ae:cc:46:45:14: fb:23:f2:20:cf:21:f9:35:54:1c:08:38:f5:40:a4:82:c3:5c: 84:98:f6:59:0d:8e:42:46:e9:90:2a:5b:ae:d5:c4:f4:9d:b9: 4e:b7:e1:ec:bc:aa:26:db:1d:93:2a:21:d6:9d:6a:e0:a0:16: 3f:a4:3c:10 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5fgAPH0I7vW0/4oXSfxWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTE3NTg3NzNhOTllNzcxYjkwY2E5YmIyMmY3ZmNhZGJmYjYzMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKirGmQTWkvdFqQICQa+2XDMwHOG 1svKczc2aF1U0mBFmMaw5y3jkFuVx3Ms8EMeheqzpnsbmd7/C5AcBPhUokujHar9 yfQ5v17TCebpLLrPIn7SA0yHo2/IkySP7pLnANr3Ojiv3B93To2SwtfMGAUfe35y 5V2UWgwnENjzANp34qfe5qdmjE/LOvWFdoJvunJPdmnR3gkyNujsYIr8r9KK7CzE Qq4XZWDBkZJqNvbnje4r1oTRrsfxWtH5Pai5PFFCD/YuOYWblR454TULaNr8PjMv pIwqlrThii+EeQBt+UjB/IfwMt34Lfa3WmQWUT/49s8z2tAEmWhTJTOrXQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFEkXWHc6medxuQypuyL3/K2/tjJIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2U4YzY3 Mi1kYTFhLTQxMzMtOTIxZS1lN2RiOTVlM2JjYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvZThjNjcy LWRhMWEtNDEzMy05MjFlLWU3ZGI5NWUzYmNjNC8xL1NSZFlkenFaNTNHNURLbTdJ dmY4cmItMk1rZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7QMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMzjzANBgkqhkiG9w0BAQsFAAOCAQEAJ51Ldz+vIo670/1euJt59uu92lqu jidCn1k1uUpEz2JPuDegqdJbd3K8XR5nzWJPzBXnGm51Uxm58/UJyqu3Lm8rjG3R NSgU3aMH9VIGUzxBurQ6QnRIX1S/4RwHsz4mwJkkY9Et1R7ijskfAITGDbiB1oiP W8EgZ/NofqyUb+Cbh3SM1hCTJ44gT6zRud8H5vjjMU5d9AEIIW9HHJBBRFE13Omp tfF6zH94sk20+D+LcgcacoIH/ageVeD4+ievZq7MRkUU+yPyIM8h+TVUHAg49UCk gsNchJj2WQ2OQkbpkCpbrtXE9J25Trfh7LyqJtsdkyoh1p1q4KAWP6Q8EA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:37 2026 by rpki-client