This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer File: SepQocYggnYq_aAH1vyLS9sFdJ8.cer (raw, json) Hash identifier: xSNnYH0GmDO+NqMovggpvTi4kzWMB7djphctDqUS55Q= Subject key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791040E0A43BD4DFCC948B3273964B33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207796 IP: 194.50.204.0/24 IP: 194.50.209.0/24 IP: 194.50.216.0/24 IP: 194.50.218.0/24 IP: 2a14:5ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:40:e0:a4:3b:d4:df:cc:94:8b:32:73:96:4b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:53:45:c6:de:e6:ab:ef:69:fd:41:24:60: ab:d5:01:13:28:a2:0d:f3:1a:9f:24:63:89:7b:80: 72:51:66:94:f1:6b:69:9d:98:ac:0f:f6:cb:d3:1e: 5f:2d:b4:48:97:87:95:50:c2:51:48:31:f8:5b:a3: 87:cc:12:fa:64:27:94:6b:67:a5:02:3d:4c:36:75: 50:76:94:ce:71:2e:6e:2a:03:a6:14:28:e5:11:d5: ea:e3:6b:ba:d3:af:30:b7:c9:05:45:28:5b:12:de: 3d:39:16:fc:65:80:cb:f1:d0:d8:04:f2:5b:f7:34: ea:99:74:a9:2e:19:12:fd:2f:a5:cd:28:97:21:97: f2:07:f0:a3:31:27:9b:fd:12:81:84:92:d9:cf:35: 07:f0:41:dd:51:ab:5c:c1:dc:0a:f5:ae:b7:c0:6a: 0a:98:3c:06:22:5d:ed:10:12:9a:84:95:e4:8a:e8: c1:cf:24:c6:fb:3b:d7:19:1c:bd:33:2f:10:d8:d9: d6:c8:73:ff:4e:be:f3:78:8d:31:b7:50:4e:a4:07: 87:d8:92:d8:09:44:d8:fb:97:00:96:a6:07:06:7c: c8:22:3f:26:6c:cc:9c:17:34:95:ed:b1:8c:d7:61: f0:46:0b:e2:05:70:b3:11:21:76:0a:2f:6c:d5:af: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.204.0/24 194.50.209.0/24 194.50.216.0/24 194.50.218.0/24 IPv6: 2a14:5ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207796 Signature Algorithm: sha256WithRSAEncryption 67:4d:7e:38:6b:c8:14:13:cd:5d:33:cb:fe:37:e2:7a:0f:75: d0:35:dd:a3:92:e3:21:99:85:d0:9b:48:11:7f:b3:5e:e7:a3: 84:6b:54:57:45:e2:da:5e:18:5b:ab:17:62:76:5e:1f:27:90: 5b:57:8d:40:aa:6d:01:a0:0a:7d:b6:9c:77:9e:3b:23:d2:c2: ef:ce:3a:3b:6e:76:da:42:c0:2e:2f:cf:4a:21:d7:bb:0f:26: ad:2a:d8:e8:db:bc:0d:d4:8c:23:c4:42:a4:27:fc:d8:26:11: f7:60:60:b9:ba:8a:27:e1:64:58:08:e3:8b:8c:89:a9:b8:7f: a9:63:fc:72:ff:9b:be:c9:90:37:f9:4e:e9:c4:ac:85:88:a7: 0f:7e:68:62:0d:25:41:3f:41:db:8d:c6:92:28:d0:96:54:92: 33:9f:a7:27:29:a5:9d:c8:2b:81:1a:73:54:a4:55:3c:c4:ca: bf:99:f3:b9:2d:29:c0:a1:b0:61:0e:ca:df:33:c6:42:3f:ec: c8:ba:53:33:9b:a5:9a:7a:9d:1b:3d:d4:18:20:03:51:76:7c: 61:39:0e:4c:84:57:7f:d5:49:48:78:c3:0d:ac:49:0b:b9:bd: 65:d5:09:a4:a4:c3:52:d0:ef:ee:f9:47:63:7b:5b:83:93:e9: b1:48:c6:d9 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5EEDgpDvU38yUizJzlkszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWVhNTBhMWM2MjA4Mjc2MmFmZGEwMDdkNmZjOGI0YmRiMDU3NDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0pTRcbe5qvvaf1BJGCr1QETKKIN 8xqfJGOJe4ByUWaU8WtpnZisD/bL0x5fLbRIl4eVUMJRSDH4W6OHzBL6ZCeUa2el Aj1MNnVQdpTOcS5uKgOmFCjlEdXq42u6068wt8kFRShbEt49ORb8ZYDL8dDYBPJb 9zTqmXSpLhkS/S+lzSiXIZfyB/CjMSeb/RKBhJLZzzUH8EHdUatcwdwK9a63wGoK mDwGIl3tEBKahJXkiujBzyTG+zvXGRy9My8Q2NnWyHP/Tr7zeI0xt1BOpAeH2JLY CUTY+5cAlqYHBnzIIj8mbMycFzSV7bGM12HwRgviBXCzESF2Ci9s1a8nqQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFEnqUKHGIIJ2Kv2gB9b8i0vbBXSfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzQ4YTll Yi0xOGRiLTRmOTItOTU4MC0yNzJkYWI1YWZhNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvNDhhOWVi LTE4ZGItNGY5Mi05NTgwLTI3MmRhYjVhZmE2Ni8xL1NlcFFvY1lnZ25ZcV9hQUgx dnlMUzlzRmRKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAwjLMAwQAwjLRAwQAwjLYAwQAwjLaMA0EAgAC MAcDBQMqFFrAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrtDANBgkqhkiG9w0B AQsFAAOCAQEAZ01+OGvIFBPNXTPL/jfieg910DXdo5LjIZmF0JtIEX+zXuejhGtU V0Xi2l4YW6sXYnZeHyeQW1eNQKptAaAKfbacd547I9LC7846O2522kLALi/PSiHX uw8mrSrY6Nu8DdSMI8RCpCf82CYR92BgubqKJ+FkWAjji4yJqbh/qWP8cv+bvsmQ N/lO6cSshYinD35oYg0lQT9B243GkijQllSSM5+nJymlncgrgRpzVKRVPMTKv5nz uS0pwKGwYQ7K3zPGQj/syLpTM5ulmnqdGz3UGCADUXZ8YTkOTIRXf9VJSHjDDaxJ C7m9ZdUJpKTDUtDv7vlHY3tbg5PpsUjG2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:10 2026 by rpki-client