This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer File: SeRO7qJladDdvQ6GN_Es9QWk7ek.cer (raw, json) Hash identifier: Yu9xUmzpg7m3MYm7h1wNEc0HfXB6sCLQbjrZ4EGCugM= Subject key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4DC327CCEC7E8C74C8A660C451B5A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35676 AS: 216353 IP: 178.213.64.0/21 IP: 185.16.252.0/22 IP: 193.105.186.0/24 IP: 194.5.88.0/23 IP: 195.234.36.0/24 IP: 2a03:6f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dc:32:7c:ce:c7:e8:c7:4c:8a:66:0c:45:1b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:c9:dc:40:88:fb:da:d9:0c:e8:a7:e6:a9: 7b:19:34:68:57:6a:04:6e:23:40:d7:4a:ce:14:91: b5:b3:26:6c:9b:8e:78:92:93:6c:f6:fd:c8:fa:27: fc:50:6d:9a:15:bc:74:62:6e:3a:2a:d3:74:91:bd: fc:89:9c:06:2a:3d:41:ba:2c:5a:22:9b:eb:e0:e3: 1d:92:48:34:1e:d3:f8:69:c3:f0:f5:48:09:6f:6e: 08:b2:25:a8:71:0d:4d:36:1e:b2:b1:93:b8:98:e8: 12:2c:cd:da:a3:4e:bc:37:dc:c3:c1:96:bb:2e:60: 9e:d3:96:c6:20:ed:7d:b0:60:00:55:66:46:2d:43: 14:f5:8e:96:69:b7:85:26:50:fa:36:c7:d2:fe:6f: 40:fd:88:03:ac:25:8e:01:54:93:c7:57:7b:e7:a5: 59:44:b1:ad:40:be:bb:a4:cc:98:cf:3c:19:04:51: 51:e9:74:6c:cf:ad:f4:53:9d:b4:63:27:64:f5:c8: f4:19:a1:b6:0b:d8:26:2a:f7:6c:0b:5e:6d:7d:00: a1:d5:2b:e2:7a:99:9b:1d:0f:e6:02:db:76:69:43: fb:80:2d:e3:9a:5a:1c:5e:34:80:37:d5:88:e5:66: 05:e0:7f:3d:4f:91:c2:12:a9:42:4d:36:49:ed:86: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.64.0/21 185.16.252.0/22 193.105.186.0/24 194.5.88.0/23 195.234.36.0/24 IPv6: 2a03:6f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35676 216353 Signature Algorithm: sha256WithRSAEncryption 23:94:86:0f:0a:04:cf:c7:c3:9c:95:27:66:dc:d5:22:ca:91: d6:d6:59:6c:e0:66:fa:0d:cb:29:85:5b:c1:44:dc:12:a7:95: bb:fa:31:f8:70:89:23:e2:08:db:6b:73:c5:b0:44:4e:06:b7: 7c:d9:1b:56:fb:e9:5e:29:fb:66:04:5d:64:91:6e:06:3f:14: 21:2d:3f:af:33:f3:2d:37:7f:b8:8f:31:59:05:59:22:c7:e8: 56:4f:9e:75:27:7d:0a:11:cd:bc:a6:49:90:fd:e1:e2:bb:b9: 9c:88:70:d7:d1:13:f6:ba:9c:59:2e:5c:6c:ff:24:8e:2f:69: 72:d3:f2:30:31:78:5c:4c:fb:e0:96:29:0b:85:1a:20:d8:ee: 98:ff:22:d3:1e:fe:5b:0e:55:6e:ea:c0:ed:69:83:49:65:f4: e6:5d:92:73:fc:6d:f4:b2:f4:2a:1c:62:63:4c:f4:f8:4b:01: b0:f4:ba:8b:af:eb:31:e7:de:23:ba:71:12:e7:39:2a:26:e6: da:55:9d:bd:3a:e7:e5:fe:4a:bc:99:17:09:1b:8a:cf:52:f9: 26:61:79:5e:51:20:ed:e2:57:78:bd:79:06:fb:05:31:31:16: 76:b0:4e:3b:55:20:fc:d2:66:27:4f:4f:4e:93:9b:ea:38:04: 10:7c:bf:fa -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt7pNwyfM7H6MdMimYMRRtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWU0NGVlZWEyNjU2OWQwZGRiZDBlODYzN2YxMmNmNTA1YTRlZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9HJ3ECI+9rZDOin5ql7GTRoV2oE biNA10rOFJG1syZsm454kpNs9v3I+if8UG2aFbx0Ym46KtN0kb38iZwGKj1Buixa Ipvr4OMdkkg0HtP4acPw9UgJb24IsiWocQ1NNh6ysZO4mOgSLM3ao068N9zDwZa7 LmCe05bGIO19sGAAVWZGLUMU9Y6WabeFJlD6NsfS/m9A/YgDrCWOAVSTx1d756VZ RLGtQL67pMyYzzwZBFFR6XRsz630U520Yydk9cj0GaG2C9gmKvdsC15tfQCh1Svi epmbHQ/mAtt2aUP7gC3jmlocXjSAN9WI5WYF4H89T5HCEqlCTTZJ7YaxNwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFEnkTu6iZWnQ3b0OhjfxLPUFpO3pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2MzZGMx Yi1kMWVlLTRmZjItYTVhYS1mMGM0YmU4ZTI0MGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYzNkYzFi LWQxZWUtNGZmMi1hNWFhLWYwYzRiZThlMjQwYS8xL1NlUk83cUpsYWREZHZRNkdO X0VzOVFXazdlay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDstVAAwQCuRD8AwQAwWm6AwQBwgVYAwQAw+ok MA0EAgACMAcDBQMqA2+AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCLXAIDA00h MA0GCSqGSIb3DQEBCwUAA4IBAQAjlIYPCgTPx8OclSdm3NUiypHW1lls4Gb6Dcsp hVvBRNwSp5W7+jH4cIkj4gjba3PFsEROBrd82RtW++leKftmBF1kkW4GPxQhLT+v M/MtN3+4jzFZBVkix+hWT551J30KEc28pkmQ/eHiu7mciHDX0RP2upxZLlxs/ySO L2ly0/IwMXhcTPvglikLhRog2O6Y/yLTHv5bDlVu6sDtaYNJZfTmXZJz/G30svQq HGJjTPT4SwGw9LqLr+sx594junES5zkqJubaVZ29Oufl/kq8mRcJG4rPUvkmYXle USDt4ld4vXkG+wUxMRZ2sE47VSD80mYnT09Ok5vqOAQQfL/6 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:59 2026 by rpki-client