This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer File: Sagbp1iajhvw4aCc9KoPTpCQHVc.cer (raw, json) Hash identifier: TJOWbYdyOwkDQl/1/OTm7VITVRvbSZUe0SGChyDK9Uc= Subject key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C72B1E2F61616E7FDA79237BE1DA07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50541 IP: 46.149.97.0/24 IP: 217.18.92.0/24 IP: 2a10:2800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2b:1e:2f:61:61:6e:7f:da:79:23:7b:e1:da:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:ac:7f:ae:6a:7c:fe:8c:ca:35:48:80:bb: 19:a5:a6:1a:a0:57:23:44:08:a2:6b:33:fc:b9:9f: e3:57:6e:97:96:18:24:cb:fe:16:10:8d:33:80:45: 49:9e:4b:e2:35:0b:8c:48:ad:23:c8:f8:e2:bb:12: b7:4f:9f:8b:13:df:31:0e:6f:b6:3c:cb:41:2a:3e: e8:77:42:8b:f2:66:90:47:58:b0:2d:89:d1:8c:b8: 29:78:91:f6:77:c4:c7:1e:af:01:5e:75:98:f5:b0: 7f:47:71:2f:db:51:e0:16:23:61:8f:49:10:fe:46: 2e:90:b6:f7:48:75:8d:a8:cd:ab:34:9b:c4:9c:fd: 77:8a:99:ae:48:23:99:2b:6f:ac:c2:e4:98:b9:d6: 08:e5:8d:24:2b:c8:91:bd:29:26:18:48:85:bf:b2: 7c:4d:4c:d8:5c:9d:bd:dd:dc:82:c5:bc:0f:29:dc: 86:07:f3:c4:44:a8:25:62:30:a6:b1:71:5d:b8:cf: 0d:54:a2:30:3f:06:ec:d5:45:0b:2f:41:14:00:64: eb:24:d7:b1:2e:95:6a:ee:bc:52:96:2a:e4:3e:35: 6a:bb:43:db:80:d7:d3:3e:4a:12:bf:53:16:ab:44: 0f:83:cf:e7:4d:35:9f:b3:e3:6a:65:a6:2d:a1:1b: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.97.0/24 217.18.92.0/24 IPv6: 2a10:2800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50541 Signature Algorithm: sha256WithRSAEncryption a7:f8:aa:dc:fc:3a:e2:5f:82:df:40:b2:02:2d:c9:da:76:66: 05:d1:a8:17:6b:36:91:90:64:ed:0c:27:5e:5e:4f:8c:b8:06: 2b:c3:95:b3:16:7c:df:d3:ef:c6:a8:3d:80:83:84:3e:28:7e: c3:17:8c:43:de:20:7f:30:f7:5f:73:0e:67:ea:48:66:c7:c3: ee:81:01:bb:4b:7c:15:40:60:11:54:b1:6a:ee:7b:fa:e4:60: fc:46:b9:13:c4:d9:34:1a:c5:f5:e9:a7:42:7f:e2:39:3c:28: 3b:6b:24:de:a8:2a:2b:86:9a:cd:c0:5e:56:4b:cc:7d:89:c0: c8:cd:cb:c6:1f:43:27:6d:bb:91:a4:9f:3a:62:56:33:b5:50: cf:97:af:3d:d1:3e:3e:cc:ca:49:a9:48:fa:53:07:bc:40:45: 18:e0:c4:3d:48:50:9c:14:5f:a8:81:a3:f2:ac:9e:10:93:a0: 57:84:75:42:3e:0a:11:25:8f:92:75:cf:49:f0:17:be:f5:bd: fa:4f:2c:a9:2f:27:4b:90:a2:3e:82:12:af:56:4f:6e:0a:d7: 69:3e:c7:fe:04:51:e0:f9:55:50:fa:58:aa:bd:66:49:a2:26: 91:0c:80:7c:95:72:cb:2c:c8:3e:f1:ee:ae:0f:87:c6:49:96: 24:27:e7:cb -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xyseL2Fhbn/aeSN74doHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWE4MWJhNzU4OWE4ZTFiZjBlMWEwOWNmNGFhMGY0ZTkwOTAxZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Gsf65qfP6MyjVIgLsZpaYaoFcj RAiiazP8uZ/jV26Xlhgky/4WEI0zgEVJnkviNQuMSK0jyPjiuxK3T5+LE98xDm+2 PMtBKj7od0KL8maQR1iwLYnRjLgpeJH2d8THHq8BXnWY9bB/R3Ev21HgFiNhj0kQ /kYukLb3SHWNqM2rNJvEnP13ipmuSCOZK2+swuSYudYI5Y0kK8iRvSkmGEiFv7J8 TUzYXJ293dyCxbwPKdyGB/PERKglYjCmsXFduM8NVKIwPwbs1UULL0EUAGTrJNex LpVq7rxSlirkPjVqu0PbgNfTPkoSv1MWq0QPg8/nTTWfs+NqZaYtoRtshwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEmoG6dYmo4b8OGgnPSqD06QkB1XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4Lzk5ZTA4 ZC1iNGY1LTQzNTMtOTYwMi02MDMxZDVkZTNmMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvOTllMDhk LWI0ZjUtNDM1My05NjAyLTYwMzFkNWRlM2YzOS8xL1NhZ2JwMWlhamh2dzRhQ2M5 S29QVHBDUUhWYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQALpVhAwQA2RJcMA0EAgACMAcDBQMqECgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFbTANBgkqhkiG9w0BAQsFAAOCAQEAp/iq 3Pw64l+C30CyAi3J2nZmBdGoF2s2kZBk7QwnXl5PjLgGK8OVsxZ839Pvxqg9gIOE Pih+wxeMQ94gfzD3X3MOZ+pIZsfD7oEBu0t8FUBgEVSxau57+uRg/Ea5E8TZNBrF 9emnQn/iOTwoO2sk3qgqK4aazcBeVkvMfYnAyM3Lxh9DJ227kaSfOmJWM7VQz5ev PdE+PszKSalI+lMHvEBFGODEPUhQnBRfqIGj8qyeEJOgV4R1Qj4KESWPknXPSfAX vvW9+k8sqS8nS5CiPoISr1ZPbgrXaT7H/gRR4PlVUPpYqr1mSaImkQyAfJVyyyzI PvHurg+HxkmWJCfnyw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:01 2026 by rpki-client