This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer File: SmN2zpIIfkx85TZoZTd2nizDQFk.cer (raw, json) Hash identifier: cuBrlsoURbSvjOdvrrwa8yvgEA20Mf9sMFJ4kpeAIrg= Subject key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F157483250944DB7DCD06BAB541E051 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:490::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:74:83:25:09:44:db:7d:cd:06:ba:b5:41:e0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a6376ce92087e4c7ce536686537769e2cc34059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:d8:28:de:1b:da:cf:d6:0b:a7:d2:a2:ce: 80:ed:04:02:a4:dc:98:8e:88:83:f0:24:76:02:96: 12:e0:3a:4f:73:8b:20:bf:78:e1:9a:0e:34:b6:38: 9f:61:a6:b9:44:10:c0:d2:83:79:23:c7:be:24:43: 22:27:0a:f8:38:5f:cb:9e:d4:e0:93:f6:5d:88:fa: 3a:82:d8:e2:3f:2b:56:77:2e:1b:36:55:75:ff:ee: 63:7d:75:12:e6:39:79:56:ea:56:ed:39:4f:a4:ae: 29:31:82:0c:19:81:91:90:ea:4d:73:bb:72:51:b5: c3:50:28:4f:91:77:6e:85:31:b5:0c:d3:bf:5b:3d: 8a:3b:c6:52:37:75:5b:51:5c:84:fa:ac:03:dc:2e: 15:e9:7f:c3:f1:81:06:3c:b4:c2:70:05:35:a6:77: 01:a1:77:8e:ec:fa:45:de:75:0b:c2:4e:b4:43:14: b9:5b:37:24:9f:f7:6c:cd:9f:80:14:8a:cc:f8:f9: f3:56:f8:de:70:4e:52:3c:8e:73:c6:a7:39:97:8d: 00:68:45:6f:54:ee:d3:fa:a9:5b:a4:f8:41:39:90: 14:d5:dc:f7:cf:a9:f2:7f:f3:00:d8:36:0e:90:e8: e8:0e:d4:bb:5e:5e:58:e4:bb:39:91:46:3b:b3:92: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:490::/48 Signature Algorithm: sha256WithRSAEncryption 13:2c:15:61:7b:39:92:37:cf:74:0b:cd:e2:cf:09:fc:f1:fa: ac:1f:17:cb:a6:d7:db:7d:e7:2b:93:80:98:90:57:1a:31:80: 3e:49:5b:3f:85:34:66:5b:ac:06:f1:f4:bb:b2:0b:80:e9:77: 71:1f:3d:41:9a:e1:32:fe:99:0b:23:0f:72:cb:6e:84:b5:4c: 79:1b:68:91:8f:81:58:b1:87:2d:4e:bc:fb:03:ba:f3:15:89: db:2e:8c:57:db:7c:df:30:f5:56:a4:5e:a3:46:f3:cf:0f:85: a6:0a:b7:a2:6a:ac:bb:6d:d0:7d:03:b8:88:d2:51:c9:17:3d: 15:a4:c2:0b:85:ae:d3:a1:fb:15:7e:a9:77:2c:65:cf:8d:66: f2:7f:74:70:5a:c6:32:8f:f2:ee:f2:e5:03:29:32:de:bc:1b: 22:15:ca:a8:5a:8c:c1:2e:25:65:30:0d:ab:ce:eb:13:fb:4a: 25:80:2a:95:b4:4f:d9:8b:82:09:e9:b2:06:a4:32:75:7f:fb: 4d:4b:5f:a7:19:a7:74:20:72:d4:c1:68:b0:f9:64:85:08:15: e4:9b:d2:bb:e4:94:cb:7d:7b:8c:b1:57:11:df:b9:81:83:4b: 37:ba:9f:56:f8:30:17:e0:bb:c0:2e:46:d6:0a:38:ae:1f:89: ed:f8:1b:38 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt/FXSDJQlE233NBrq1QeBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTYzNzZjZTkyMDg3ZTRjN2NlNTM2Njg2NTM3NzY5ZTJjYzM0MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvfYKN4b2s/WC6fSos6A7QQCpNyY joiD8CR2ApYS4DpPc4sgv3jhmg40tjifYaa5RBDA0oN5I8e+JEMiJwr4OF/LntTg k/ZdiPo6gtjiPytWdy4bNlV1/+5jfXUS5jl5VupW7TlPpK4pMYIMGYGRkOpNc7ty UbXDUChPkXduhTG1DNO/Wz2KO8ZSN3VbUVyE+qwD3C4V6X/D8YEGPLTCcAU1pncB oXeO7PpF3nULwk60QxS5Wzckn/dszZ+AFIrM+PnzVvjecE5SPI5zxqc5l40AaEVv VO7T+qlbpPhBOZAU1dz3z6nyf/MA2DYOkOjoDtS7Xl5Y5Ls5kUY7s5KgjwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFEpjds6SCH5MfOU2aGU3dp4sw0BZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzdjZjQy ZS0yYWU4LTRmMTMtYTBjNC00ZTFmYjc2Yzg0N2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvN2NmNDJl LTJhZTgtNGYxMy1hMGM0LTRlMWZiNzZjODQ3YS8xL1NtTjJ6cElJZmt4ODVUWm9a VGQybml6RFFGay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeASQMA0GCSqGSIb3DQEBCwUAA4IBAQAT LBVhezmSN890C83izwn88fqsHxfLptfbfecrk4CYkFcaMYA+SVs/hTRmW6wG8fS7 sguA6XdxHz1BmuEy/pkLIw9yy26EtUx5G2iRj4FYsYctTrz7A7rzFYnbLoxX23zf MPVWpF6jRvPPD4WmCreiaqy7bdB9A7iI0lHJFz0VpMILha7TofsVfql3LGXPjWby f3RwWsYyj/Lu8uUDKTLevBsiFcqoWozBLiVlMA2rzusT+0olgCqVtE/Zi4IJ6bIG pDJ1f/tNS1+nGad0IHLUwWiw+WSFCBXkm9K75JTLfXuMsVcR37mBg0s3up9W+DAX 4LvALkbWCjiuH4nt+Bs4 -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:40 2026 by rpki-client