This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer File: SjQVWNugttuUxVzgbjBv9lGdbvE.cer (raw, json) Hash identifier: V91Erq4QbU68USuFiWaEJmra4vPuDCyjtCYsC39J6/E= Subject key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECDFE8B4DD2250B7A009057299B3DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49792 IP: 2001:67c:1194::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:df:e8:b4:dd:22:50:b7:a0:09:05:72:99:b3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:42:29:2e:58:e0:61:7b:da:62:7e:15:83: 5d:25:39:ce:01:2c:af:2d:69:8f:62:97:bd:b7:43: 94:d9:81:bc:b3:32:d8:81:7d:bf:b6:27:55:96:37: a1:3f:9f:0b:2b:d6:5a:2a:a6:bd:28:31:53:a0:fe: 27:aa:e2:1d:fd:1d:89:ad:89:9e:4e:d2:91:4f:c1: d9:98:f9:2c:fe:55:b6:1e:25:fa:1a:df:26:53:05: b3:90:ff:e4:66:33:94:79:4f:a9:f8:9b:ee:ae:9e: 3c:94:70:c1:ff:0e:ca:18:0e:cd:98:71:33:38:1f: fe:55:a6:f6:1d:af:82:53:55:e9:b5:1f:af:72:34: 52:3d:4e:c8:bd:6a:5a:d6:71:b5:a1:87:94:ca:2a: 40:c5:ca:e3:ca:66:f0:12:88:3b:3d:ce:c4:c0:63: de:dd:bb:3e:7e:24:9a:de:7a:65:be:5c:49:a1:a1: 84:fd:3a:89:f1:1b:17:e1:69:e7:fc:06:51:21:68: fb:f0:5c:3f:8e:59:0a:c6:0e:77:a1:6b:27:d3:2b: 16:31:63:8a:6c:bf:d3:8a:63:0b:a3:1b:89:4a:db: a7:5b:fc:cc:5a:b2:48:75:42:31:98:1b:45:7d:a9: 2f:27:5f:4e:ea:2d:d3:f6:4d:81:97:17:88:db:66: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1194::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49792 Signature Algorithm: sha256WithRSAEncryption 74:ef:60:77:9f:bf:49:89:34:1a:f8:11:c4:cc:c6:cb:b7:76: dd:b2:df:6b:cd:3d:37:58:25:13:9b:4b:b4:96:d2:5b:14:4c: b2:d9:b7:69:32:68:e3:be:90:e4:9a:a0:56:9d:93:c2:70:93: 10:94:59:55:38:5e:22:ba:16:ac:d5:b1:3f:4d:8f:99:e9:e5: a9:70:42:dd:c4:4b:99:0d:06:b0:9f:c8:d8:f3:5e:f2:2f:37: 4e:40:f2:93:15:4a:19:ef:66:9f:5b:94:80:9d:29:f6:e1:2f: 85:77:87:51:69:ed:f1:c9:5e:94:85:bf:6c:6d:90:38:42:b1: ad:3d:af:5d:90:60:21:5e:13:1e:78:c4:b9:fa:94:9c:4e:d3: 6d:40:e4:6e:78:64:97:35:14:1e:47:1f:53:ed:bd:2f:fb:3b: df:c5:bb:29:6d:03:83:b6:14:a4:7e:39:2d:47:40:39:40:5f: 95:df:fc:9f:aa:8a:94:11:15:37:24:38:67:af:cf:69:63:39: 19:a4:29:bc:8c:09:24:47:24:db:2b:fe:8a:37:3b:80:04:25: d3:29:08:de:98:e5:d0:50:b9:26:a1:98:03:5d:61:5b:35:f9: f9:1d:6f:44:7d:c3:2d:07:1f:58:bb:1d:d6:42:97:ee:b1:47: 27:02:23:a6 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt57N/otN0iULegCQVymbPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTM0MTU1OGRiYTBiNmRiOTRjNTVjZTA2ZTMwNmZmNjUxOWQ2ZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt89CKS5Y4GF72mJ+FYNdJTnOASyv LWmPYpe9t0OU2YG8szLYgX2/tidVljehP58LK9ZaKqa9KDFToP4nquId/R2JrYme TtKRT8HZmPks/lW2HiX6Gt8mUwWzkP/kZjOUeU+p+Jvurp48lHDB/w7KGA7NmHEz OB/+Vab2Ha+CU1XptR+vcjRSPU7IvWpa1nG1oYeUyipAxcrjymbwEog7Pc7EwGPe 3bs+fiSa3nplvlxJoaGE/TqJ8RsX4Wnn/AZRIWj78Fw/jlkKxg53oWsn0ysWMWOK bL/TimMLoxuJStunW/zMWrJIdUIxmBtFfakvJ19O6i3T9k2BlxeI22ZoNwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFEo0FVjboLbblMVc4G4wb/ZRnW7xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzU1MjZk NC1hZmMxLTQwMWYtYTA5Zi0wYjY5N2EzYjc2MmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNTUyNmQ0 LWFmYzEtNDAxZi1hMDlmLTBiNjk3YTNiNzYyYS8xL1NqUVZXTnVndHR1VXhWemdi akJ2OWxHZGJ2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBGUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDCgDANBgkqhkiG9w0BAQsFAAOCAQEAdO9gd5+/SYk0GvgRxMzGy7d23bLf a809N1glE5tLtJbSWxRMstm3aTJo476Q5JqgVp2TwnCTEJRZVTheIroWrNWxP02P menlqXBC3cRLmQ0GsJ/I2PNe8i83TkDykxVKGe9mn1uUgJ0p9uEvhXeHUWnt8cle lIW/bG2QOEKxrT2vXZBgIV4THnjEufqUnE7TbUDkbnhklzUUHkcfU+29L/s738W7 KW0Dg7YUpH45LUdAOUBfld/8n6qKlBEVNyQ4Z6/PaWM5GaQpvIwJJEck2yv+ijc7 gAQl0ykI3pjl0FC5JqGYA11hWzX5+R1vRH3DLQcfWLsd1kKX7rFHJwIjpg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:14 2026 by rpki-client