This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer File: SdhmPTuWngJTom1UJb7hxdRDs2E.cer (raw, json) Hash identifier: xmqiVDAmOcS1aFmbqpGegFUdGcE7F1uriddsIV06v4g= Subject key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3579BC74A26AF8664250AE33CF9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.117.192.0/22 IP: 2a06:8600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:35:79:bc:74:a2:6a:f8:66:42:50:ae:33:cf:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49d8663d3b969e0253a26d5425bee1c5d443b361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:fc:26:1c:47:86:ec:3d:ec:03:46:80:f6: b1:ad:ed:23:01:62:eb:b0:f4:f0:d6:f4:27:10:fd: 54:dd:20:8b:1c:68:cb:79:81:50:d9:c7:9b:e7:37: 5b:85:79:23:b2:5c:c3:b1:38:15:b6:e1:28:7d:93: 22:03:9d:28:54:b7:39:a3:0a:b0:9f:f3:c9:33:e7: a3:3d:2a:58:fe:13:2a:0d:51:73:fb:41:60:70:55: 89:3c:8b:61:a9:78:3c:2b:7a:1c:07:4a:66:ca:97: 50:0c:c8:73:37:14:80:5f:49:64:45:35:11:b9:d8: a7:10:95:51:99:64:40:22:ba:c8:79:ec:66:3f:56: cf:e0:c7:f1:ef:90:b0:b7:87:fa:37:c6:26:80:56: 1d:9c:db:b7:ca:6d:b1:16:a2:a8:6d:94:ca:a3:aa: 35:67:d7:83:1c:02:44:01:d0:ff:4d:c8:01:1b:36: 61:eb:99:b1:d4:3f:98:c8:53:ee:5e:c0:cb:76:42: 6d:92:86:47:15:e3:f5:9b:39:9a:93:d4:43:ce:df: 90:03:cb:9e:25:18:ed:89:b2:b3:fd:9b:74:28:74: 1f:48:96:e0:e9:e5:4a:ca:21:10:aa:61:5d:30:42: 1e:85:49:9e:75:9f:4b:63:c3:91:4f:e9:e2:40:cb: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.192.0/22 IPv6: 2a06:8600::/29 Signature Algorithm: sha256WithRSAEncryption 20:41:d1:d6:a6:8a:6f:86:32:0f:72:3e:20:81:20:e5:0c:74: 40:80:48:91:14:2d:ba:d8:8f:13:70:bb:9d:78:11:e8:74:17: 2b:a9:7a:4c:f6:87:eb:66:76:cc:38:e2:b5:ec:33:2b:28:c4: af:09:06:0e:86:09:d8:75:00:60:dc:b5:6d:79:9f:92:58:ab: 4b:a5:6c:1c:dd:5a:70:f5:91:52:28:1b:00:69:b8:de:1a:e0: af:95:dc:52:9f:4b:1e:ca:28:45:e7:64:04:67:cc:f5:c3:fa: 9a:4a:b1:bb:17:ac:c0:b0:a8:54:3d:65:a1:39:5f:3e:1d:94: 4d:91:17:d8:d4:23:fd:35:ac:c5:aa:46:33:bd:60:63:80:ec: 47:b4:bd:5e:0a:56:b8:47:14:5a:e1:dd:30:bc:d9:f1:f3:7b: 26:dc:7f:5e:8b:f3:c3:41:85:29:c3:eb:f5:a0:98:2c:96:78: d1:7d:0f:fd:0f:71:bf:0f:10:0a:39:38:e8:5a:86:87:91:fa: a5:ca:46:1a:87:0a:8f:88:33:54:fd:cc:d6:42:ec:97:c8:23: ae:bb:4c:17:bc:6b:c7:21:d8:f5:ad:a8:2f:05:f0:e3:f4:73: c6:47:aa:c1:a5:e3:0a:54:8a:92:07:c1:d3:ae:73:fb:13:8c: 42:a6:ed:a3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26zV5vHSiavhmQlCuM8+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWQ4NjYzZDNiOTY5ZTAyNTNhMjZkNTQyNWJlZTFjNWQ0NDNiMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFb8JhxHhuw97ANGgPaxre0jAWLr sPTw1vQnEP1U3SCLHGjLeYFQ2ceb5zdbhXkjslzDsTgVtuEofZMiA50oVLc5owqw n/PJM+ejPSpY/hMqDVFz+0FgcFWJPIthqXg8K3ocB0pmypdQDMhzNxSAX0lkRTUR udinEJVRmWRAIrrIeexmP1bP4Mfx75Cwt4f6N8YmgFYdnNu3ym2xFqKobZTKo6o1 Z9eDHAJEAdD/TcgBGzZh65mx1D+YyFPuXsDLdkJtkoZHFeP1mzmak9RDzt+QA8ue JRjtibKz/Zt0KHQfSJbg6eVKyiEQqmFdMEIehUmedZ9LY8ORT+niQMup2QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEnYZj07lp4CU6JtVCW+4cXUQ7NhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2E1ZDAw ZC02MjY2LTQ2ZWEtYmM4Yy00MTgyYmVkYjk4YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvYTVkMDBk LTYyNjYtNDZlYS1iYzhjLTQxODJiZWRiOThhMS8xL1NkaG1QVHVXbmdKVG9tMVVK YjdoeGRSRHMyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXXAMA0EAgACMAcDBQMqBoYAMA0GCSqGSIb3 DQEBCwUAA4IBAQAgQdHWpopvhjIPcj4ggSDlDHRAgEiRFC262I8TcLudeBHodBcr qXpM9ofrZnbMOOK17DMrKMSvCQYOhgnYdQBg3LVteZ+SWKtLpWwc3Vpw9ZFSKBsA abjeGuCvldxSn0seyihF52QEZ8z1w/qaSrG7F6zAsKhUPWWhOV8+HZRNkRfY1CP9 NazFqkYzvWBjgOxHtL1eCla4RxRa4d0wvNnx83sm3H9ei/PDQYUpw+v1oJgslnjR fQ/9D3G/DxAKOTjoWoaHkfqlykYahwqPiDNU/czWQuyXyCOuu0wXvGvHIdj1ragv BfDj9HPGR6rBpeMKVIqSB8HTrnP7E4xCpu2j -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:09 2026 by rpki-client