This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer (raw, json) Hash identifier: JLgNsMVm0DeNqSmt3tdrnvWx5xkkxuWE2Bf+VRCIDSM= Subject key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775934D5A495412C1C34717215AAB29C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50477 IP: 5.149.200.0/21 IP: 46.19.112.0/21 IP: 109.236.208.0/20 IP: 134.19.144.0/20 IP: 185.34.244.0/22 IP: 2a04:6000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:34:d5:a4:95:41:2c:1c:34:71:72:15:aa:b2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:ad:9d:05:6e:3c:e7:cb:c2:90:23:13:6b: ab:ba:06:eb:45:41:30:da:6c:18:16:8b:78:c1:b4: ff:33:e7:87:fc:ca:fa:cc:92:1b:c2:ee:92:f7:7b: d3:60:cb:54:fc:bd:f7:6e:91:70:a3:96:53:b5:8c: d2:73:d3:90:2e:52:f5:a0:c7:31:75:4e:e1:c3:aa: 08:82:5a:bc:89:cc:88:0a:a0:07:e6:dd:e6:d2:1f: 91:01:62:3e:94:87:45:e8:93:7c:af:b0:ee:a0:e5: c9:ad:c9:40:42:51:90:5e:4c:f4:47:ab:c1:38:f2: 1b:a3:43:43:5a:da:6b:e0:48:f8:4e:53:f6:8b:e7: fe:0e:43:9e:24:de:9e:cd:77:a4:dd:56:19:58:63: 62:0d:1b:5e:b3:30:d5:81:8a:4f:f2:20:1f:87:f6: 94:b3:08:44:9b:99:ca:48:ed:9e:f9:73:cf:b9:d1: 1d:3d:87:73:9f:98:72:1e:93:71:56:6b:f3:2c:af: 37:be:fb:2a:ac:db:78:cf:93:7d:78:54:69:17:0d: e9:34:68:3b:b5:d2:54:9b:8c:76:e8:63:52:2c:b8: 8a:80:55:60:e5:93:e7:7a:5b:32:bd:60:e9:fd:7d: 25:c4:27:a8:66:03:70:b3:e6:0e:03:fd:1c:ee:66: 46:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.200.0/21 46.19.112.0/21 109.236.208.0/20 134.19.144.0/20 185.34.244.0/22 IPv6: 2a04:6000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50477 Signature Algorithm: sha256WithRSAEncryption 7f:9d:64:94:aa:67:87:8a:c6:1d:51:dc:c5:dc:ea:98:e3:c8: e4:16:e8:c4:a3:61:4c:b4:bb:5d:4e:fa:c3:31:97:bf:9d:e7: eb:75:3b:33:51:a9:94:66:cc:aa:13:92:66:a3:88:cd:28:75: b0:85:ed:81:b9:c7:87:78:5c:46:51:3a:fe:0b:bc:73:af:51: 98:3b:37:0e:1f:9c:dd:bd:ec:f8:0b:c5:2a:81:b1:ce:c8:8e: 3a:f4:51:d6:68:92:20:0b:55:bc:18:14:ab:c8:65:22:a6:f4: 16:67:18:50:25:4e:0d:ab:f4:5c:0e:d7:a8:14:05:0a:21:2e: 3a:c4:26:23:58:ec:f2:b6:0c:46:fb:65:ff:65:03:c1:35:83: f9:5a:9a:e5:f3:c8:71:79:99:48:66:02:89:88:be:11:05:32: 57:8e:54:5a:55:17:90:a0:fe:ca:86:e9:e7:19:62:7c:44:e0: 83:28:f9:d6:e6:40:10:95:54:20:2b:c3:42:80:bf:8a:82:3f: 78:83:60:f4:26:55:6b:0b:1c:ef:33:50:2a:ac:60:69:8a:4a: e0:ed:b5:6a:3b:fc:d9:44:58:6e:3f:e5:89:bb:6a:33:0a:48: 94:05:c5:51:03:20:fb:42:a8:4a:00:3d:4d:d4:b9:0a:54:9f: 5c:93:db:9c -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt3WTTVpJVBLBw0cXIVqrKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTdlOGM2MjJjODc1MzJmOGM0NDlmMzQ3NDMzZGFlNTJiNzczOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0StnQVuPOfLwpAjE2urugbrRUEw 2mwYFot4wbT/M+eH/Mr6zJIbwu6S93vTYMtU/L33bpFwo5ZTtYzSc9OQLlL1oMcx dU7hw6oIglq8icyICqAH5t3m0h+RAWI+lIdF6JN8r7DuoOXJrclAQlGQXkz0R6vB OPIbo0NDWtpr4Ej4TlP2i+f+DkOeJN6ezXek3VYZWGNiDRteszDVgYpP8iAfh/aU swhEm5nKSO2e+XPPudEdPYdzn5hyHpNxVmvzLK83vvsqrNt4z5N9eFRpFw3pNGg7 tdJUm4x26GNSLLiKgFVg5ZPnelsyvWDp/X0lxCeoZgNws+YOA/0c7mZGVwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFEp+jGIsh1MvjESfNHQz2uUrdzjwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzc0Nzgz Ni03ODIyLTRlZDctODI5MS1kYWMyNWIyNjZkOGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvNzQ3ODM2 LTc4MjItNGVkNy04MjkxLWRhYzI1YjI2NmQ4ZS8xL1NuNk1ZaXlIVXktTVJKODBk RFBhNVN0M09QQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDBZXIAwQDLhNwAwQEbezQAwQEhhOQAwQCuSL0 MA0EAgACMAcDBQMqBGAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFLTANBgkq hkiG9w0BAQsFAAOCAQEAf51klKpnh4rGHVHcxdzqmOPI5BboxKNhTLS7XU76wzGX v53n63U7M1GplGbMqhOSZqOIzSh1sIXtgbnHh3hcRlE6/gu8c69RmDs3Dh+c3b3s +AvFKoGxzsiOOvRR1miSIAtVvBgUq8hlIqb0FmcYUCVODav0XA7XqBQFCiEuOsQm I1js8rYMRvtl/2UDwTWD+Vqa5fPIcXmZSGYCiYi+EQUyV45UWlUXkKD+yobp5xli fETggyj51uZAEJVUICvDQoC/ioI/eINg9CZVawsc7zNQKqxgaYpK4O21ajv82URY bj/libtqMwpIlAXFUQMg+0KoSgA9TdS5ClSfXJPbnA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:15 2026 by rpki-client