This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer File: SYKxcZtP7HCLpmsper4NsI-tDh4.cer (raw, json) Hash identifier: YiJgGzUAcMaJAHCbMI7cUxtS0KA/y98K9hO6JK1gdJs= Subject key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E381E0B53572B59D31E4A9C3D1789E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201026 IP: 91.240.34.0/24 IP: 185.85.220.0/22 IP: 2a05:aec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1e:0b:53:57:2b:59:d3:1e:4a:9c:3d:17:89:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:93:b6:3f:be:b1:72:68:9c:f7:5c:6a:d1: 1d:83:5f:75:05:ac:24:a0:77:b8:53:ab:b9:8a:76: 87:82:4d:1b:49:b1:fd:b1:ee:c1:d8:13:e3:0b:20: 32:4e:77:90:4b:a8:15:8f:95:de:eb:80:25:66:12: c2:28:84:b1:e8:2e:96:bd:84:69:50:f7:d6:5a:8b: b3:8a:20:4d:21:b7:79:a1:17:44:07:88:ca:fc:82: 85:22:d2:f5:5e:88:f8:17:84:6e:10:76:5f:a5:c4: 77:92:14:0d:14:54:f9:e4:01:29:0f:ee:e3:28:09: 4a:c5:b8:98:0b:8a:e8:9d:44:8c:41:c4:45:ba:53: dc:c0:16:db:a3:d6:c3:af:80:09:08:56:bd:00:e3: 57:f6:b6:fb:e0:32:89:11:7b:8a:37:fd:fd:52:59: 09:89:e5:a2:ea:50:93:cc:a1:b2:0d:f9:65:10:ec: 91:01:3d:3b:f5:6d:34:d2:51:80:7c:29:e8:91:e4: 3f:c0:c5:52:55:cd:07:9f:22:2e:ec:fc:e5:9a:02: 78:e2:90:8f:d4:18:65:34:0c:85:10:20:42:0a:52: 4e:35:2b:f1:14:da:71:8e:79:93:b1:e7:7e:da:a7: 01:d5:f6:d9:ce:ec:70:d6:b0:6b:e0:4c:5d:d1:0f: 63:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.34.0/24 185.85.220.0/22 IPv6: 2a05:aec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201026 Signature Algorithm: sha256WithRSAEncryption 82:6a:ff:73:96:ca:3c:f6:65:df:5b:60:27:87:dc:a8:2e:9e: f7:c2:ba:a6:a6:60:23:35:98:60:ca:ba:fa:50:49:f2:be:d2: f7:e4:80:b4:43:08:84:72:d7:ce:55:a2:de:18:f5:5b:56:5b: 27:95:b3:bb:95:1a:ee:68:d8:fd:22:91:06:48:79:e3:73:b1: 32:c2:5b:4f:70:15:25:aa:7f:9e:56:c3:70:21:86:37:85:d7: 14:3b:41:d3:42:8b:3d:db:09:3e:43:84:e9:63:22:20:39:e6: 8a:cb:44:f9:18:d5:e5:f7:ff:ae:19:21:ba:97:b5:50:3b:41: e6:1c:04:65:50:72:54:85:47:25:83:42:a2:28:2a:f3:d6:ae: 89:66:c0:91:8f:11:cb:6b:c2:57:2e:84:a8:e8:40:ed:33:1b: b8:f0:19:04:30:15:f6:36:49:97:30:21:17:df:80:34:73:3b: 53:42:8b:79:8e:53:34:14:99:6f:d5:3c:4d:d5:cd:da:ed:2d: 03:cc:7e:95:23:41:64:a5:18:31:8c:9c:46:96:52:90:6c:0a: c9:f9:59:bb:57:39:b0:c2:3d:72:5f:be:32:31:4d:c0:87:31: 4b:55:02:6c:c1:9e:e6:4a:f7:19:0e:ff:8d:a6:f5:97:1d:c7: e0:f2:cf:de -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OB4LU1crWdMeSpw9F4nnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTgyYjE3MTliNGZlYzcwOGJhNjZiMjk3YWJlMGRiMDhmYWQwZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5CTtj++sXJonPdcatEdg191Bawk oHe4U6u5inaHgk0bSbH9se7B2BPjCyAyTneQS6gVj5Xe64AlZhLCKISx6C6WvYRp UPfWWouziiBNIbd5oRdEB4jK/IKFItL1Xoj4F4RuEHZfpcR3khQNFFT55AEpD+7j KAlKxbiYC4ronUSMQcRFulPcwBbbo9bDr4AJCFa9AONX9rb74DKJEXuKN/39UlkJ ieWi6lCTzKGyDfllEOyRAT079W000lGAfCnokeQ/wMVSVc0HnyIu7PzlmgJ44pCP 1BhlNAyFECBCClJONSvxFNpxjnmTsed+2qcB1fbZzuxw1rBr4Exd0Q9j5wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEmCsXGbT+xwi6ZrKXq+DbCPrQ4eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2Q4ZjE0 NS0xZTBkLTQ3MWQtODUzNi1hZTZiODRjMjgxOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvZDhmMTQ1 LTFlMGQtNDcxZC04NTM2LWFlNmI4NGMyODE5NS8xL1NZS3hjWnRQN0hDTHBtc3Bl cjROc0ktdERoNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW/AiAwQCuVXcMA0EAgACMAcDBQMqBa7AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRQjANBgkqhkiG9w0BAQsFAAOCAQEAgmr/ c5bKPPZl31tgJ4fcqC6e98K6pqZgIzWYYMq6+lBJ8r7S9+SAtEMIhHLXzlWi3hj1 W1ZbJ5Wzu5Ua7mjY/SKRBkh543OxMsJbT3AVJap/nlbDcCGGN4XXFDtB00KLPdsJ PkOE6WMiIDnmistE+RjV5ff/rhkhupe1UDtB5hwEZVByVIVHJYNCoigq89auiWbA kY8Ry2vCVy6EqOhA7TMbuPAZBDAV9jZJlzAhF9+ANHM7U0KLeY5TNBSZb9U8TdXN 2u0tA8x+lSNBZKUYMYycRpZSkGwKyflZu1c5sMI9cl++MjFNwIcxS1UCbMGe5kr3 GQ7/jab1lx3H4PLP3g== -----END CERTIFICATE-----Generated at Sat Jan 10 07:09:46 2026 by rpki-client