This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer File: STotSDdjMKWC-vPjAy73sLzKM-g.cer (raw, json) Hash identifier: junLylAz2JbHDb069SE8lgaWmppXR2lCp80oVg42CvA= Subject key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14157CD84D8DF53962CF540EC8F56E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8565 AS: 31693 AS: 201961 IP: 62.244.64.0 -- 62.244.69.255 IP: 62.244.82.0/23 IP: 62.244.100.0 -- 62.244.107.255 IP: 164.138.56.0/21 IP: 2a00:bbc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:15:7c:d8:4d:8d:f5:39:62:cf:54:0e:c8:f5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1b:e2:96:9f:d8:53:f7:3f:48:5b:64:03:f0: 86:b7:e0:09:4b:1b:2d:3e:1f:55:ad:8f:be:29:c1: 7a:71:6e:e9:29:63:f3:5c:fe:1a:3b:58:47:03:27: da:7e:20:6a:06:99:4e:82:57:05:c5:90:dd:ad:c7: ce:18:b9:7f:c4:b1:13:9f:83:29:8a:c8:16:37:9c: 1e:ad:4f:2a:57:17:5d:fb:e8:27:f5:bc:b0:4f:16: 70:a4:c9:1d:0f:85:51:86:3a:7a:77:da:55:64:61: 6b:96:e8:03:0f:21:b2:2c:6d:09:44:3f:4b:47:12: 51:df:be:63:ad:6f:3a:d5:da:84:11:0f:ce:10:fd: 0f:64:72:39:7e:b8:c1:46:97:6f:cd:98:f3:ee:e9: 38:64:74:24:c9:87:1a:8b:ce:44:ea:49:6c:d1:92: de:3c:72:b1:bf:5e:e8:5a:a0:0a:df:76:10:2d:60: 9b:0f:a4:1f:c2:47:00:6a:c8:e2:94:39:4f:ee:09: 69:92:66:25:17:43:d8:c1:ec:05:bd:26:25:72:0b: 45:6d:71:33:17:d1:e4:91:c5:65:bd:a2:43:55:dc: 3b:de:2a:98:73:6b:08:85:96:04:c8:89:0e:59:35: ab:cc:30:7a:a6:ab:48:b6:d1:5d:c1:42:6f:10:2b: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.64.0-62.244.69.255 62.244.82.0/23 62.244.100.0-62.244.107.255 164.138.56.0/21 IPv6: 2a00:bbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8565 31693 201961 Signature Algorithm: sha256WithRSAEncryption 24:69:ad:47:06:25:a8:f8:e6:6d:27:9a:37:34:5a:27:c7:70: f7:a5:3b:26:37:32:1e:dd:bd:8a:83:32:d2:a8:16:85:fc:4b: 3c:cb:48:16:4c:9a:30:ac:ba:14:59:2d:cf:13:4e:c7:80:aa: 1b:19:e6:4d:c9:01:8b:73:a3:39:90:06:dd:57:fa:3b:36:03: ce:17:99:eb:c5:4b:5a:28:ea:1d:f2:d2:23:93:cc:ff:37:90: 10:31:3c:1d:2f:09:c4:72:33:05:a3:ad:24:5f:96:10:d1:34: 19:b8:57:09:80:89:d1:cb:82:3b:60:bf:34:a9:82:82:3a:f4: 58:c2:36:6f:b2:a9:76:3d:47:87:93:b4:e2:4d:9d:15:c0:4e: ad:3e:db:42:8c:04:0d:5b:0d:bf:27:04:7a:52:b6:6d:a0:47: f7:92:9e:f5:0f:8b:c4:0a:4c:d7:1d:15:8b:f2:93:f3:f9:26: 0c:29:2f:da:c9:5c:41:76:41:c8:c4:99:8a:38:43:48:61:ba: cb:1b:bf:0e:ab:ff:c9:ed:37:13:59:e8:87:48:bd:56:ca:a9: 9d:6e:c6:bc:91:34:4c:1c:31:af:66:b2:69:54:72:b0:cf:72: 4f:e8:db:01:bd:46:a0:cc:69:61:35:0e:00:8d:94:8b:b3:39: 5d:c8:ff:de -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt/FBV82E2N9Tliz1QOyPVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTNhMmQ0ODM3NjMzMGE1ODJmYWYzZTMwMzJlZjdiMGJjY2EzM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRvilp/YU/c/SFtkA/CGt+AJSxst Ph9VrY++KcF6cW7pKWPzXP4aO1hHAyfafiBqBplOglcFxZDdrcfOGLl/xLETn4Mp isgWN5werU8qVxdd++gn9bywTxZwpMkdD4VRhjp6d9pVZGFrlugDDyGyLG0JRD9L RxJR375jrW861dqEEQ/OEP0PZHI5frjBRpdvzZjz7uk4ZHQkyYcai85E6kls0ZLe PHKxv17oWqAK33YQLWCbD6QfwkcAasjilDlP7glpkmYlF0PYwewFvSYlcgtFbXEz F9HkkcVlvaJDVdw73iqYc2sIhZYEyIkOWTWrzDB6pqtIttFdwUJvECvH7QIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFEk6LUg3YzClgvrz4wMu97C8yjPoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2Q3NjVh NC01NGViLTQxMGQtOGYzZC02ODliYTRkMzNjNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDc2NWE0 LTU0ZWItNDEwZC04ZjNkLTY4OWJhNGQzM2M0Yi8xL1NUb3RTRGRqTUtXQy12UGpB eTczc0x6S00tZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFAGCCsGAQUF BwEHAQH/BEEwPzAuBAIAATAoMAwDBAY+9EADBAE+9EQDBAE+9FIwDAMEAj70ZAME Aj70aAMEA6SKODANBAIAAjAHAwUAKgC7wDAiBggrBgEFBQcBCAEB/wQTMBGgDzAN AgIhdQICe80CAwMU6TANBgkqhkiG9w0BAQsFAAOCAQEAJGmtRwYlqPjmbSeaNzRa J8dw96U7JjcyHt29ioMy0qgWhfxLPMtIFkyaMKy6FFktzxNOx4CqGxnmTckBi3Oj OZAG3Vf6OzYDzheZ68VLWijqHfLSI5PM/zeQEDE8HS8JxHIzBaOtJF+WENE0GbhX CYCJ0cuCO2C/NKmCgjr0WMI2b7Kpdj1Hh5O04k2dFcBOrT7bQowEDVsNvycEelK2 baBH95Ke9Q+LxApM1x0Vi/KT8/kmDCkv2slcQXZByMSZijhDSGG6yxu/Dqv/ye03 E1noh0i9VsqpnW7GvJE0TBwxr2ayaVRysM9yT+jbAb1GoMxpYTUOAI2Ui7M5Xcj/ 3g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:12 2026 by rpki-client