This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer File: SRdsODQdjHE7eV5Y9QAupnUFlyg.cer (raw, json) Hash identifier: QFCVhovchfJzMWU4Qbvy5TzPna7IKICLMBhLEwvtHCs= Subject key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C0FB7AA3FD7F70BAF9EE89FF489FC277F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 30 Jan 2026 16:23:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207234 IP: 185.60.196.0/22 IP: 194.39.178.0/23 IP: 194.39.212.0/23 IP: 2a02:7520::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:b7:aa:3f:d7:f7:0b:af:9e:e8:9f:f4:89:fc:27:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 30 16:23:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49176c38341d8c713b795e58f5002ea675059728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:a9:f7:85:34:00:9e:4c:27:71:5c:fd:5a: 22:47:6c:11:30:e0:c6:35:b9:f2:64:6a:8e:a0:0a: 6d:e8:43:12:f0:e9:62:e1:66:c9:b2:fe:e2:27:33: 2c:bd:7a:68:be:d4:51:d4:0c:b1:11:f9:f1:fc:8f: bc:1e:79:0d:c0:6d:c2:57:f0:c8:cb:cb:3f:71:04: 40:1f:fc:35:21:5e:fb:c6:b2:c7:9d:00:76:1e:96: bc:fa:e4:bd:87:73:7f:de:0f:6f:58:bf:c6:91:d8: 8e:d5:42:53:29:52:33:0c:0d:53:be:67:b1:ee:3c: 02:9a:b1:1a:4c:b3:00:10:66:bc:2f:f9:b4:3b:3b: a9:41:c1:a1:2e:a8:ab:cf:d5:24:9c:0f:06:32:e0: 10:e6:48:88:ac:9b:43:c2:57:c1:fb:c4:22:3d:81: a8:e7:01:30:74:dd:f8:a4:80:23:45:20:0a:23:03: cd:32:dd:51:a1:60:92:32:dc:53:7a:08:02:70:3d: ee:37:0d:57:f6:f7:25:14:8b:fe:94:4f:43:19:86: 1d:78:a7:ef:43:0f:b0:5f:5d:9e:cc:81:19:dc:8d: 3f:51:25:c6:b0:24:b3:07:18:97:86:7b:72:23:15: 4d:05:2c:d4:66:60:01:e2:f8:fa:41:a2:eb:40:c0: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.196.0/22 194.39.178.0/23 194.39.212.0/23 IPv6: 2a02:7520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207234 Signature Algorithm: sha256WithRSAEncryption 01:01:af:1c:9e:7b:67:9c:8e:ef:72:18:a0:f3:b9:06:e3:13: 57:b6:28:0c:18:d4:16:6e:1f:d7:8a:ca:5a:a2:bc:e6:9b:59: aa:04:b5:ef:54:5b:27:88:83:ad:e6:45:72:2a:03:01:41:17: c2:17:39:c9:36:b2:21:78:c1:46:24:72:1b:3a:ff:4e:63:10: f3:bd:e4:5b:5b:11:46:2f:4d:81:95:98:d5:29:84:29:2b:ba: ea:00:b9:02:1c:d3:8b:a8:01:36:64:cd:d6:56:f4:81:59:c4: 39:19:54:00:f1:1c:eb:a6:96:79:4f:05:71:b6:ad:1f:b5:fa: ec:44:6e:f7:f8:44:aa:0e:54:91:21:63:33:33:7a:1f:47:c3: 06:40:dd:33:3f:72:7c:25:a1:03:8e:c6:d5:71:a4:e8:9d:58: ab:d3:7c:f5:ee:af:aa:89:4d:b3:80:59:aa:24:54:ff:5e:dc: 65:1e:4d:02:6d:40:37:cb:ce:c1:23:4d:ab:6f:1a:01:0c:07: 4a:49:d1:a7:3f:de:15:34:4e:7e:82:0c:f3:0b:18:1c:6f:50: 18:c3:d3:f8:df:8d:df:75:96:08:3c:32:83:6a:f5:f2:1a:35: b6:31:3e:1b:22:f1:db:f4:35:eb:f1:c9:c5:28:e9:be:0f:c3: c2:e7:bf:3d -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZwPt6o/1/cLr57on/SJ/Cd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTMwMTYyMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTE3NmMzODM0MWQ4YzcxM2I3OTVlNThmNTAwMmVhNjc1MDU5NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbSp94U0AJ5MJ3Fc/VoiR2wRMODG NbnyZGqOoApt6EMS8Oli4WbJsv7iJzMsvXpovtRR1AyxEfnx/I+8HnkNwG3CV/DI y8s/cQRAH/w1IV77xrLHnQB2Hpa8+uS9h3N/3g9vWL/GkdiO1UJTKVIzDA1Tvmex 7jwCmrEaTLMAEGa8L/m0OzupQcGhLqirz9UknA8GMuAQ5kiIrJtDwlfB+8QiPYGo 5wEwdN34pIAjRSAKIwPNMt1RoWCSMtxTeggCcD3uNw1X9vclFIv+lE9DGYYdeKfv Qw+wX12ezIEZ3I0/USXGsCSzBxiXhntyIxVNBSzUZmAB4vj6QaLrQMAeiwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFEkXbDg0HYxxO3leWPUALqZ1BZcoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2FkZmE3 Yi1jZjM3LTQ5ZDItOTZhZi1iZDdjYWYwNTQxYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvYWRmYTdi LWNmMzctNDlkMi05NmFmLWJkN2NhZjA1NDFiOC8xL1NSZHNPRFFkakhFN2VWNVk5 UUF1cG5VRmx5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuTzEAwQBwieyAwQBwifUMA0EAgACMAcDBQAq AnUgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMpgjANBgkqhkiG9w0BAQsFAAOC AQEAAQGvHJ57Z5yO73IYoPO5BuMTV7YoDBjUFm4f14rKWqK85ptZqgS171RbJ4iD reZFcioDAUEXwhc5yTayIXjBRiRyGzr/TmMQ873kW1sRRi9NgZWY1SmEKSu66gC5 AhzTi6gBNmTN1lb0gVnEORlUAPEc66aWeU8FcbatH7X67ERu9/hEqg5UkSFjMzN6 H0fDBkDdMz9yfCWhA47G1XGk6J1Yq9N89e6vqolNs4BZqiRU/17cZR5NAm1AN8vO wSNNq28aAQwHSknRpz/eFTROfoIM8wsYHG9QGMPT+N+N33WWCDwyg2r18ho1tjE+ GyLx2/Q16/HJxSjpvg/Dwue/PQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:54 2026 by rpki-client