This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer File: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer (raw, json) Hash identifier: yKm9aEGDUAM7dTtsMZq+nVOnG9Ex6eCaRWTs/xCfsWc= Subject key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EEB9A4FB25D3028D76AFB090182DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201491 IP: 185.73.48.0/22 IP: 2a05:3fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:eb:9a:4f:b2:5d:30:28:d7:6a:fb:09:01:82:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:d6:1a:87:56:f3:51:d4:f5:99:98:a7:f6: c6:f7:f7:95:62:17:4e:2c:6b:35:cb:e8:50:b3:14: f5:c1:da:26:56:9e:2a:64:70:f4:89:20:06:cf:cf: 7a:8c:99:f3:8b:0f:bf:e4:7a:7a:cf:ed:43:e2:9a: 65:2b:55:5a:8d:1e:63:e3:9d:aa:7b:b2:fe:3b:96: 16:4f:b0:ec:da:14:fc:3f:f8:2b:64:f0:0e:d1:cb: f2:be:cc:6e:37:3f:e7:f8:1d:14:68:3c:60:0f:9c: 0f:82:47:bf:31:0a:cf:9e:e4:c5:83:ed:95:f6:46: db:74:6e:9f:35:f1:80:fb:05:da:10:98:3e:4b:f2: f4:4e:b7:c6:1b:7a:d3:34:b3:19:54:01:af:ac:f5: 06:e5:c9:82:5f:23:47:c2:cc:88:09:4d:d1:08:53: 57:04:98:55:63:20:95:52:eb:bd:f6:fd:48:7b:da: 17:06:a4:69:0a:60:ea:df:09:3d:c9:54:87:5c:4c: 57:d9:36:b8:f7:4a:24:f0:1e:2f:c2:ae:da:13:97: ff:a6:2b:9a:2d:81:88:fb:d2:25:6d:a1:cd:30:79: af:48:30:23:6e:bf:d9:22:c2:d8:9a:52:5e:c7:66: d3:72:57:1a:49:84:c4:59:c7:83:88:e0:58:7d:65: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.48.0/22 IPv6: 2a05:3fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201491 Signature Algorithm: sha256WithRSAEncryption 56:43:ca:1a:13:c0:f3:02:aa:9b:1c:c8:98:dc:27:28:51:20: 85:27:4d:96:e9:e8:cb:0e:be:4f:87:c5:f4:7c:35:ef:ae:a8: ce:f5:1d:b4:3d:d9:c0:a6:da:fe:55:e3:67:7b:8f:30:f8:c3: f9:df:d0:ea:23:9c:85:17:e0:cc:e1:92:c5:4f:2e:2e:b2:af: de:55:a3:68:63:fa:b7:2d:74:9b:be:49:2c:7d:af:ce:21:cd: 9d:cc:77:fe:0e:86:7e:24:37:ac:ec:c7:ae:25:5d:f3:9d:af: 66:03:fe:57:5b:c9:c6:5d:8e:49:af:3e:e9:2a:67:8a:47:1b: 0e:a8:3c:2a:ee:ee:e1:b8:1e:63:77:25:89:bf:89:f1:3c:e4: 59:88:8d:1e:3b:51:71:74:03:06:6c:f9:ff:95:18:4e:b5:a0: 77:22:28:14:71:c3:11:25:12:ad:33:a0:bc:86:5a:ab:f5:63: 4f:2d:79:8a:86:6c:35:a8:7d:b1:09:68:de:35:6f:a7:f2:ff: ce:83:4a:bf:86:37:f0:4f:23:78:22:45:c2:62:4a:96:ce:83: 9d:04:1a:41:1c:ff:5d:91:77:3d:93:7f:22:0d:3e:a9:f6:72: c5:62:a2:22:48:ed:77:50:65:42:3c:30:32:62:33:55:77:a3: a0:1f:82:63 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8fuuaT7JdMCjXavsJAYLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTFlZDRiZjUwMmMwZjJkOGJjODcwMjZjMThhYzk4NTliMGYxZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNbWGodW81HU9ZmYp/bG9/eVYhdO LGs1y+hQsxT1wdomVp4qZHD0iSAGz896jJnziw+/5Hp6z+1D4pplK1VajR5j452q e7L+O5YWT7Ds2hT8P/grZPAO0cvyvsxuNz/n+B0UaDxgD5wPgke/MQrPnuTFg+2V 9kbbdG6fNfGA+wXaEJg+S/L0TrfGG3rTNLMZVAGvrPUG5cmCXyNHwsyICU3RCFNX BJhVYyCVUuu99v1Ie9oXBqRpCmDq3wk9yVSHXExX2Ta490ok8B4vwq7aE5f/piua LYGI+9IlbaHNMHmvSDAjbr/ZIsLYmlJex2bTclcaSYTEWceDiOBYfWVxRwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEoe1L9QLA8ti8hwJsGKyYWbDx3sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4Lzk3Yzkx Ni04MWIxLTRiM2EtOWZlZS0zNTZhMTlmNTU1MDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOTdjOTE2 LTgxYjEtNGIzYS05ZmVlLTM1NmExOWY1NTUwNi8xL1NoN1V2MUFzRHkyTHlIQW13 WXJKaFpzUEhldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUkwMA0EAgACMAcDBQMqBT/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTEzANBgkqhkiG9w0BAQsFAAOCAQEAVkPKGhPA8wKq mxzImNwnKFEghSdNlunoyw6+T4fF9Hw1766ozvUdtD3ZwKba/lXjZ3uPMPjD+d/Q 6iOchRfgzOGSxU8uLrKv3lWjaGP6ty10m75JLH2vziHNncx3/g6GfiQ3rOzHriVd 852vZgP+V1vJxl2OSa8+6SpnikcbDqg8Ku7u4bgeY3clib+J8TzkWYiNHjtRcXQD Bmz5/5UYTrWgdyIoFHHDESUSrTOgvIZaq/VjTy15ioZsNah9sQlo3jVvp/L/zoNK v4Y38E8jeCJFwmJKls6DnQQaQRz/XZF3PZN/Ig0+qfZyxWKiIkjtd1BlQjwwMmIz VXejoB+CYw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:39 2026 by rpki-client