This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer File: SyOwbWDsPna0kgsrZBQfo69uX7s.cer (raw, json) Hash identifier: clc1HyAAuDX78eJXRj1vTDdYbmfbzrZ4bIi02wI8zw8= Subject key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C62E005D11396C8CF1B73238AB06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20983 AS: 21495 IP: 193.109.244.0/23 IP: 195.242.183.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c6:2e:00:5d:11:39:6c:8c:f1:b7:32:38:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:96:ba:91:75:59:5d:bb:49:d2:64:bf:09: f8:dc:d4:5b:36:34:d6:9a:6f:49:04:c8:8d:c4:bd: db:1c:dc:c5:68:07:7b:06:c4:86:28:54:d0:b1:3b: 9e:52:36:7d:f9:a5:20:98:13:3a:4a:5d:98:47:18: 3b:94:87:6b:72:e9:fc:b6:21:86:4a:d8:79:18:1c: bc:f3:38:e8:f0:8d:2b:e9:e9:18:0b:9e:c9:46:60: 1f:3c:a1:37:86:d2:75:2b:9b:1b:d7:75:b8:fa:3c: a7:d8:ed:58:a4:ff:c9:dc:21:dc:0e:b1:2a:3c:15: 00:47:9e:3a:72:cd:ce:da:58:b4:7b:91:ad:d6:7b: ef:e1:60:9b:31:28:7f:97:49:d7:2d:d8:b6:77:93: a6:45:4b:76:24:31:6c:7a:1b:00:72:51:8e:b5:5d: 50:06:99:8a:69:05:b3:c1:6c:20:06:b2:12:cb:1f: 78:22:d3:0f:7a:e0:6c:ea:23:7f:bc:56:fa:b5:36: c5:c4:10:34:ac:07:75:19:2b:07:1a:7a:96:4b:92: 53:c5:15:fe:70:3d:90:fd:6d:c5:cf:f9:c6:3e:58: 8f:6e:c8:d4:47:46:c0:0b:59:01:69:75:19:02:00: db:00:87:97:2a:74:7b:b7:5e:8d:b8:a4:41:6e:29: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.244.0/23 195.242.183.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20983 21495 Signature Algorithm: sha256WithRSAEncryption 40:74:20:68:25:5c:73:c6:e8:96:be:e0:92:5f:0a:d5:d8:b5: c3:d3:45:fc:03:e5:83:b6:48:9c:81:a3:ce:21:b1:e3:36:50: 97:c0:4a:71:71:59:9b:b0:42:05:5f:da:1d:bd:c3:da:7f:8d: b9:bf:29:39:7d:96:d6:0d:ed:f2:2a:28:ac:b7:82:26:97:cc: bc:42:fd:23:ff:d0:96:ea:a4:82:14:34:b8:e9:f0:65:fb:bf: dd:28:11:d6:ca:36:8d:23:a4:e3:c6:a7:3d:f5:4f:9f:1b:c7: 3c:bd:82:1e:10:3b:10:b7:8a:17:f2:23:d6:03:05:9c:bc:39: a8:58:f1:78:fb:59:2d:36:78:f8:4f:db:41:7b:79:1f:42:63: b7:63:9e:c7:cd:92:a8:be:63:70:8b:ff:6d:ef:63:1b:c9:6b: 5d:72:20:21:d3:df:89:98:0f:d5:22:30:a9:84:0f:88:f2:85: 59:9b:83:c9:c3:1c:39:77:bc:33:a5:58:fd:aa:6f:1f:e1:59: 41:bc:4c:5e:18:56:74:a4:34:e4:68:ce:8c:19:15:4c:87:90: fd:47:0a:17:67:24:e1:74:49:ba:ed:45:5b:42:64:80:df:2b: 04:15:fc:37:c0:90:0d:9a:a4:cb:49:03:18:d6:41:bd:6d:c2: 38:5d:22:ce -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgISAZt7NcYuAF0ROWyM8bcyOKsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjIzYjA2ZDYwZWMzZTc2YjQ5MjBiMmI2NDE0MWZhM2FmNmU1ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKCWupF1WV27SdJkvwn43NRbNjTW mm9JBMiNxL3bHNzFaAd7BsSGKFTQsTueUjZ9+aUgmBM6Sl2YRxg7lIdrcun8tiGG Sth5GBy88zjo8I0r6ekYC57JRmAfPKE3htJ1K5sb13W4+jyn2O1YpP/J3CHcDrEq PBUAR546cs3O2li0e5Gt1nvv4WCbMSh/l0nXLdi2d5OmRUt2JDFsehsAclGOtV1Q BpmKaQWzwWwgBrISyx94ItMPeuBs6iN/vFb6tTbFxBA0rAd1GSsHGnqWS5JTxRX+ cD2Q/W3Fz/nGPliPbsjUR0bAC1kBaXUZAgDbAIeXKnR7t16NuKRBbil5NwIDAQAB o4ICqTCCAqUwHQYDVR0OBBYEFEsjsG1g7D52tJILK2QUH6Ovbl+7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzVhYWNm My1iYmM5LTQzYzQtODZmMC01NGY2ZTUyZjU0N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNWFhY2Yz LWJiYzktNDNjNC04NmYwLTU0ZjZlNTJmNTQ3Yi8xL1N5T3diV0RzUG5hMGtnc3Ja QlFmbzY5dVg3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwW30AwQAw/K3MB0GCCsGAQUFBwEIAQH/BA4w DKAKMAgCAlH3AgJT9zANBgkqhkiG9w0BAQsFAAOCAQEAQHQgaCVcc8bolr7gkl8K 1di1w9NF/APlg7ZInIGjziGx4zZQl8BKcXFZm7BCBV/aHb3D2n+Nub8pOX2W1g3t 8ioorLeCJpfMvEL9I//QluqkghQ0uOnwZfu/3SgR1so2jSOk48anPfVPnxvHPL2C HhA7ELeKF/Ij1gMFnLw5qFjxePtZLTZ4+E/bQXt5H0Jjt2Oex82SqL5jcIv/be9j G8lrXXIgIdPfiZgP1SIwqYQPiPKFWZuDycMcOXe8M6VY/apvH+FZQbxMXhhWdKQ0 5GjOjBkVTIeQ/UcKF2ck4XRJuu1FW0JkgN8rBBX8N8CQDZqky0kDGNZBvW3COF0i zg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:59 2026 by rpki-client