This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer (raw, json) Hash identifier: Q/Flh0raL2YjUa5DVMzlvypJ/uIyfHu9FLBSH9de5QY= Subject key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E848F0905F783D73850D40C0CD62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47723 IP: 92.246.148.0/22 IP: 93.90.220.0/22 IP: 185.58.220.0/22 IP: 185.236.208.0/22 IP: 2a02:6620::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e8:48:f0:90:5f:78:3d:73:85:0d:40:c0:cd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:dc:17:33:16:f1:1b:02:46:0d:ea:3c:04: f7:32:8e:97:9d:d1:a5:3e:6d:3f:40:b5:ab:29:3d: 3b:5c:f0:92:81:20:65:42:fc:b5:b3:62:af:51:12: 84:5f:2f:b2:12:09:b7:1e:18:c2:15:d1:f2:ba:5a: fd:c9:92:78:25:f7:0b:76:f1:59:1a:d7:ae:77:ad: 60:0b:7e:ca:82:f3:7f:7c:a3:8e:64:37:c7:40:63: 0d:30:e9:37:c5:0e:67:ba:f0:54:55:b5:4b:89:ce: 98:e9:f1:38:8b:a7:b6:db:b8:da:18:34:8e:d1:0f: 0a:66:2f:85:25:c1:23:52:1c:95:16:48:3a:c4:0b: bf:6b:52:1e:5b:a8:5a:2d:f1:a8:ec:28:fd:7b:f7: 69:40:1c:e7:25:72:ad:29:b4:bf:04:77:f3:32:ed: c4:7d:6f:e7:47:1a:47:71:b5:a4:7f:46:14:34:38: 70:61:74:fe:4e:64:73:43:7a:be:4c:91:c0:ce:6d: 88:a2:b4:13:8d:a2:96:07:85:86:45:e4:41:31:ef: 2c:0a:cc:a5:45:7d:85:49:69:a7:2b:72:f6:bd:dd: 36:e4:01:9c:ec:a8:82:76:5a:d8:ff:e9:78:d4:48: fb:e8:4f:10:e4:51:60:cb:8b:81:13:9b:78:c9:7d: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.246.148.0/22 93.90.220.0/22 185.58.220.0/22 185.236.208.0/22 IPv6: 2a02:6620::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47723 Signature Algorithm: sha256WithRSAEncryption 0c:26:88:b5:f7:10:a4:ef:0c:c4:43:bb:6d:cf:04:1c:f4:c3: 6f:9b:87:38:e9:0d:a3:5f:ca:ff:b8:41:74:90:31:a9:36:9b: ce:50:dd:76:47:9f:32:f6:1c:1d:6f:c6:59:f0:60:db:cc:cc: 86:47:79:80:1c:0d:e5:f0:29:15:e0:da:21:45:5f:0e:b7:ad: 9a:2d:a6:49:2b:3a:16:71:1e:c9:67:9b:4e:71:87:15:9b:35: 10:db:65:cc:cc:d0:94:68:75:5f:e5:8b:4a:66:1f:3c:34:74: 15:c9:89:37:45:cf:76:5f:e6:7e:22:83:3b:01:a1:23:a7:5a: f0:8b:83:d1:69:86:de:45:37:3a:a7:a3:4d:a6:a5:15:99:5a: 5c:83:84:c4:ae:72:2b:71:b3:c7:0d:51:31:c2:7b:bf:98:d0: cb:bc:fc:9e:f8:75:ea:8d:0b:09:33:21:4c:7d:a2:bb:f2:2f: 93:b8:82:c9:82:a4:a3:56:07:e3:1f:2b:46:87:bd:5c:63:1e: dd:ab:31:38:63:b1:32:17:4e:3a:21:87:98:83:98:82:d3:9f: f8:a8:fa:5b:f7:b3:03:3c:6c:56:76:20:90:bf:63:af:3f:07: a3:33:b2:25:e5:72:8e:2f:75:0d:41:2d:cb:92:0d:2e:81:af: 2b:7a:86:16 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5EOhI8JBfeD1zhQ1AwM1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWJhNzRjOGNiZTFlMjdmYWNhNWM2N2U4OWQzZjYyM2MxZjA5YTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucLcFzMW8RsCRg3qPAT3Mo6XndGl Pm0/QLWrKT07XPCSgSBlQvy1s2KvURKEXy+yEgm3HhjCFdHyulr9yZJ4JfcLdvFZ Gteud61gC37KgvN/fKOOZDfHQGMNMOk3xQ5nuvBUVbVLic6Y6fE4i6e227jaGDSO 0Q8KZi+FJcEjUhyVFkg6xAu/a1IeW6haLfGo7Cj9e/dpQBznJXKtKbS/BHfzMu3E fW/nRxpHcbWkf0YUNDhwYXT+TmRzQ3q+TJHAzm2IorQTjaKWB4WGReRBMe8sCsyl RX2FSWmnK3L2vd025AGc7KiCdlrY/+l41Ej76E8Q5FFgy4uBE5t4yX22fwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFEm6dMjL4eJ/rKXGfonT9iPB8JpeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2U3MzZm YS04MWM4LTQ3NWYtYTczZS0yYmIwZTFjMGUzZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZTczNmZh LTgxYzgtNDc1Zi1hNzNlLTJiYjBlMWMwZTNlZi8xL1NicDB5TXZoNG4tc3BjWi1p ZFAySThId21sNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCXPaUAwQCXVrcAwQCuTrcAwQCuezQMA0EAgAC MAcDBQMqAmYgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC6azANBgkqhkiG9w0B AQsFAAOCAQEADCaItfcQpO8MxEO7bc8EHPTDb5uHOOkNo1/K/7hBdJAxqTabzlDd dkefMvYcHW/GWfBg28zMhkd5gBwN5fApFeDaIUVfDretmi2mSSs6FnEeyWebTnGH FZs1ENtlzMzQlGh1X+WLSmYfPDR0FcmJN0XPdl/mfiKDOwGhI6da8IuD0WmG3kU3 OqejTaalFZlaXIOExK5yK3Gzxw1RMcJ7v5jQy7z8nvh16o0LCTMhTH2iu/Ivk7iC yYKko1YH4x8rRoe9XGMe3asxOGOxMhdOOiGHmIOYgtOf+Kj6W/ezAzxsVnYgkL9j rz8HozOyJeVyji91DUEty5INLoGvK3qGFg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:15 2026 by rpki-client