This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer File: So5ocC711IxPKwctnLRz5iuHs-Q.cer (raw, json) Hash identifier: xHQFMH4SwyfZZM9lYlGvjjmYftHZCYo/fSD/3Tr385A= Subject key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7010E3CFA77A854D5318064983961 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214197 IP: 5.28.40.0/21 IP: 2a05:e980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:01:0e:3c:fa:77:a8:54:d5:31:80:64:98:39:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:f4:2b:be:56:79:36:7c:8b:58:61:69:38: 10:f4:ae:3f:f8:5e:d3:fd:78:be:aa:67:da:dc:46: 2a:4f:33:02:13:20:dd:b8:45:2e:1e:88:e0:0f:b5: 0f:25:ce:09:dc:89:1d:d2:86:64:86:cd:d6:9a:bf: 9e:28:f8:fa:94:3d:48:aa:7f:aa:a1:bc:d3:5c:6c: f8:10:e3:2c:c3:97:a8:0a:73:9f:2f:4e:32:11:3e: b3:f7:84:28:23:95:cb:ac:90:3c:66:19:93:d8:12: 7b:34:78:05:e7:cc:70:46:46:fc:54:b9:75:5b:8f: 72:e1:20:2e:c7:df:0f:3a:60:39:7b:e7:3d:54:9b: 40:09:fa:96:f1:1d:2c:08:33:7c:4d:9c:ec:3f:67: ee:1c:6d:c5:72:bf:3e:53:68:0f:c5:2a:e6:eb:e6: 28:63:b7:7f:d3:14:a8:fa:d8:77:64:cc:ec:ce:53: 84:79:77:54:55:16:ea:e4:a0:c5:d0:7d:5c:57:b7: 9b:a6:86:1b:e1:53:65:75:98:59:48:93:31:1e:88: f6:f5:36:fe:25:68:08:c4:39:29:75:0f:0a:0d:47: 54:a8:58:79:b3:68:00:88:84:26:13:64:32:81:3b: 0a:af:af:63:14:d0:53:f9:eb:84:3d:c5:5a:38:8a: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.28.40.0/21 IPv6: 2a05:e980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214197 Signature Algorithm: sha256WithRSAEncryption 5f:c6:ac:ef:30:75:a1:77:b3:6a:e0:ae:4a:f4:bf:a7:f3:99: d5:b2:08:d9:da:58:24:b2:7e:76:86:42:ee:fa:12:84:a9:47: 0a:f3:74:3b:10:29:d1:4b:81:3f:1a:2f:6c:6f:f7:ed:cf:0a: 11:5d:e5:0a:34:c9:e2:06:49:8c:91:21:58:40:c0:dc:2a:bc: 1d:dc:8d:6f:9a:1d:b1:2e:39:f4:61:e2:25:74:9e:52:a5:bb: b1:e5:02:e6:fa:d3:7e:33:96:fe:90:b3:d7:f8:d8:c1:51:fe: 3a:0a:a1:6d:cb:cf:be:73:d5:7e:3b:60:44:ea:f7:73:aa:c6: 55:09:33:4b:a3:20:ad:1c:f6:fb:65:56:44:65:cd:6b:8c:b4: 54:a1:9b:59:e8:5c:ee:ed:a0:60:2f:c8:28:bb:e9:a1:cf:b7: ad:26:38:87:93:d8:44:c6:51:be:26:56:a1:6c:14:4b:1d:37: 8e:e3:d5:b9:9c:f3:57:a1:eb:96:66:65:0d:40:8d:27:60:4c: e7:32:81:74:8d:db:b6:1b:50:f2:79:5b:9e:0d:8f:d9:58:10: 06:86:8f:8d:d6:c6:df:77:f0:16:3b:b3:55:55:50:33:87:50: a7:83:f1:e2:a1:05:12:87:67:89:b0:1c:81:e7:06:12:ef:9f: a3:30:8d:2b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pwEOPPp3qFTVMYBkmDlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YThlNjg3MDJlZjVkNDhjNGYyYjA3MmQ5Y2I0NzNlNjJiODdiM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUX0K75WeTZ8i1hhaTgQ9K4/+F7T /Xi+qmfa3EYqTzMCEyDduEUuHojgD7UPJc4J3Ikd0oZkhs3Wmr+eKPj6lD1Iqn+q obzTXGz4EOMsw5eoCnOfL04yET6z94QoI5XLrJA8ZhmT2BJ7NHgF58xwRkb8VLl1 W49y4SAux98POmA5e+c9VJtACfqW8R0sCDN8TZzsP2fuHG3Fcr8+U2gPxSrm6+Yo Y7d/0xSo+th3ZMzszlOEeXdUVRbq5KDF0H1cV7ebpoYb4VNldZhZSJMxHoj29Tb+ JWgIxDkpdQ8KDUdUqFh5s2gAiIQmE2QygTsKr69jFNBT+euEPcVaOIpPywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEqOaHAu9dSMTysHLZy0c+Yrh7PkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2QxOWZj Mi04OTQ5LTRmZTYtOTMxYi0xYzRiYjU4YWI3MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvZDE5ZmMy LTg5NDktNGZlNi05MzFiLTFjNGJiNThhYjcyMC8xL1NvNW9jQzcxMUl4UEt3Y3Ru TFJ6NWl1SHMtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDBRwoMA0EAgACMAcDBQMqBemAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNEtTANBgkqhkiG9w0BAQsFAAOCAQEAX8as7zB1oXez auCuSvS/p/OZ1bII2dpYJLJ+doZC7voShKlHCvN0OxAp0UuBPxovbG/37c8KEV3l CjTJ4gZJjJEhWEDA3Cq8HdyNb5odsS459GHiJXSeUqW7seUC5vrTfjOW/pCz1/jY wVH+OgqhbcvPvnPVfjtgROr3c6rGVQkzS6MgrRz2+2VWRGXNa4y0VKGbWehc7u2g YC/IKLvpoc+3rSY4h5PYRMZRviZWoWwUSx03juPVuZzzV6HrlmZlDUCNJ2BM5zKB dI3bthtQ8nlbng2P2VgQBoaPjdbG33fwFjuzVVVQM4dQp4Px4qEFEodnibAcgecG Eu+fozCNKw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:58 2026 by rpki-client