This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer File: SboHm38CFqb2ZzyXHCr63VrpQuo.cer (raw, json) Hash identifier: 7D9NnSKBPxGVQ8mbftS93AsB+y7WkYQjj3UsS/3p4ZM= Subject key identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE4D37416067C95C05D5BAE051CEDE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213139 IP: 91.218.56.0/24 IP: 2a07:f140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4d:37:41:60:67:c9:5c:05:d5:ba:e0:51:ce:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:1f:90:14:a5:9f:42:c2:e0:b1:2b:4b:21: 13:1d:af:27:ca:28:a1:32:aa:c7:4e:41:5a:b4:02: 81:12:0c:52:51:5d:de:92:69:74:cf:07:5e:92:b3: 59:3d:16:94:02:c6:1b:a1:bc:51:ad:89:1e:90:eb: 07:bc:b4:89:a7:f8:f7:76:8c:c1:5e:b8:6f:a6:73: 52:d7:e9:28:5a:60:71:46:5e:e8:18:e3:95:e2:e7: 02:ab:32:45:5e:69:4d:48:2c:d0:ce:bb:cc:7f:fb: 45:59:6b:11:34:5f:bf:28:66:fc:b2:1a:9b:6c:3d: 5f:c3:8a:07:31:74:21:94:79:53:38:c1:35:02:24: ee:08:3e:9d:9d:2c:45:6a:af:38:33:2f:d2:67:ac: da:c4:ae:6f:c0:16:3e:a7:97:bc:41:d9:a6:c9:da: 03:c5:29:b8:17:05:27:05:28:27:a7:2e:d5:96:69: 96:80:de:75:f7:11:38:99:a2:59:41:7a:68:d3:58: 97:85:de:87:5a:a3:27:4b:ab:a1:2b:20:fc:69:1c: 9d:ea:a1:ad:5e:a1:09:25:66:20:03:45:e3:87:f3: fc:e2:a7:84:00:73:1e:b1:42:df:e7:b1:e1:86:e5: 5e:e5:87:76:2c:4f:87:d4:fc:4d:b4:7a:25:15:3c: 0d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.56.0/24 IPv6: 2a07:f140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213139 Signature Algorithm: sha256WithRSAEncryption 98:a4:6d:ac:fe:df:2a:03:25:28:a6:ce:3a:11:f4:9b:44:5a: 18:a7:93:13:03:14:5c:86:fc:c1:6a:18:87:70:39:c6:82:b7: 7e:00:2f:78:d3:41:ff:b1:9a:9d:7d:75:e6:71:03:45:85:60: 5d:bd:f2:f5:74:8b:be:d0:0d:0c:f4:2e:4d:47:84:b3:c0:a4: 96:de:a6:fc:75:62:53:f2:27:42:f4:14:da:ab:b6:4d:1c:ef: 8e:cc:ac:31:69:3a:11:04:6f:94:b8:33:dc:d1:bd:70:14:d7: 39:5d:11:57:02:40:6f:4f:db:e3:fe:91:1c:da:23:c1:7e:8a: bc:99:54:0b:c6:0c:dc:bf:f3:dd:88:e1:fa:b2:fc:33:28:a9: 55:3e:16:a6:2f:c9:af:de:2c:16:08:f2:a2:36:b1:e2:90:21: 48:e4:c5:d3:de:9e:44:15:b5:a1:a7:24:3d:e8:8e:f3:1f:98: 3a:01:a0:94:5b:18:f1:16:75:53:5c:be:cf:77:7a:a9:b5:04: 8c:f6:65:a4:d5:86:e3:dd:82:02:39:95:53:42:41:73:ea:eb: 02:5b:a5:55:e0:50:4c:62:22:9b:2f:fd:63:a7:a8:a2:14:00: 62:a7:1b:a6:38:62:6d:0f:b8:50:24:bd:a1:a7:7f:80:26:d3: 6e:0a:d0:24 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87k03QWBnyVwF1brgUc7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWJhMDc5YjdmMDIxNmE2ZjY2NzNjOTcxYzJhZmFkZDVhZTk0MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEgfkBSln0LC4LErSyETHa8nyiih MqrHTkFatAKBEgxSUV3ekml0zwdekrNZPRaUAsYbobxRrYkekOsHvLSJp/j3dozB XrhvpnNS1+koWmBxRl7oGOOV4ucCqzJFXmlNSCzQzrvMf/tFWWsRNF+/KGb8shqb bD1fw4oHMXQhlHlTOME1AiTuCD6dnSxFaq84My/SZ6zaxK5vwBY+p5e8QdmmydoD xSm4FwUnBSgnpy7VlmmWgN519xE4maJZQXpo01iXhd6HWqMnS6uhKyD8aRyd6qGt XqEJJWYgA0Xjh/P84qeEAHMesULf57HhhuVe5Yd2LE+H1PxNtHolFTwNbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEm6B5t/Aham9mc8lxwq+t1a6ULqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2NiNWYy MS1iOWRmLTQwZGItYjU2Ni0zZTNjZDk1YTVjMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvY2I1ZjIx LWI5ZGYtNDBkYi1iNTY2LTNlM2NkOTVhNWMyZS8xL1Nib0htMzhDRnFiMlp6eVhI Q3I2M1ZycFF1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9o4MA0EAgACMAcDBQMqB/FAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNAkzANBgkqhkiG9w0BAQsFAAOCAQEAmKRtrP7fKgMl KKbOOhH0m0RaGKeTEwMUXIb8wWoYh3A5xoK3fgAveNNB/7GanX115nEDRYVgXb3y 9XSLvtANDPQuTUeEs8Cklt6m/HViU/InQvQU2qu2TRzvjsysMWk6EQRvlLgz3NG9 cBTXOV0RVwJAb0/b4/6RHNojwX6KvJlUC8YM3L/z3Yjh+rL8MyipVT4Wpi/Jr94s Fgjyojax4pAhSOTF096eRBW1oackPeiO8x+YOgGglFsY8RZ1U1y+z3d6qbUEjPZl pNWG492CAjmVU0JBc+rrAlulVeBQTGIimy/9Y6eoohQAYqcbpjhibQ+4UCS9oad/ gCbTbgrQJA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:46 2026 by rpki-client