This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer File: _S0VJ2B9EYjp24DPFkmKQTggDNw.cer (raw, json) Hash identifier: ijkcHLpaFcyc+DhzuTGc2NlWPWP2APY/GCXGSJDMljM= Subject key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8579DFFDB17E453C7048F7D2DF334B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197790 IP: 91.240.238.0/23 IP: 171.22.80.0/22 IP: 185.32.144.0/22 IP: 185.80.160.0/22 IP: 185.119.184.0/22 IP: 194.5.12.0/22 IP: 2a04:5680::/29 IP: 2a05:7f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:79:df:fd:b1:7e:45:3c:70:48:f7:d2:df:33:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd2d1527607d1188e9db80cf16498a4138200cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:ef:da:a2:c5:95:74:17:f5:f1:1d:85:bc: 67:96:16:af:11:55:96:79:bc:6f:31:34:b4:77:b5: 65:9e:61:20:76:f4:86:0a:69:95:27:fc:a5:0e:68: fa:99:bb:5f:0e:86:c9:33:02:0d:b7:4c:fd:d8:ef: af:7c:5a:62:87:82:d7:b9:0d:c4:4b:a1:ea:4d:91: a7:39:f1:c3:5f:5c:46:27:86:9f:66:a7:23:50:b8: 45:5c:41:65:fe:12:44:10:e7:6c:18:21:eb:55:e2: e9:a8:a2:fe:d3:a6:1d:57:fb:de:cb:ec:05:d5:8a: 94:30:7a:ed:6d:f1:b4:06:90:fc:60:c7:18:9a:9d: 7a:70:65:3d:4d:e0:a6:38:00:ff:fb:1c:54:49:81: a2:f2:58:bc:ee:11:d7:33:0a:cf:34:a9:93:35:a7: 81:55:ff:1c:c0:0f:99:a9:75:5b:47:50:a9:56:d6: 34:77:95:20:3b:2e:fc:cd:d7:a5:c6:66:f6:01:0d: 73:43:2c:3d:9d:81:4c:06:99:eb:ec:45:4b:69:84: 86:9f:de:7a:2f:7a:4b:a4:d0:f0:0a:06:23:5f:3c: 60:87:d1:70:ed:61:b3:ca:a0:3a:d6:17:68:c1:bf: 9f:fb:b9:a4:63:c8:7f:ab:58:12:21:ee:7c:e3:bf: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.238.0/23 171.22.80.0/22 185.32.144.0/22 185.80.160.0/22 185.119.184.0/22 194.5.12.0/22 IPv6: 2a04:5680::/29 2a05:7f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197790 Signature Algorithm: sha256WithRSAEncryption 4d:f6:fe:0f:47:cd:7b:eb:40:c8:87:63:0b:20:51:e9:ab:6c: 58:73:10:fb:ba:74:ce:37:6b:8d:a7:fc:11:21:f4:3f:f6:8c: 62:37:76:3e:b9:43:01:f4:48:c9:b3:6c:bd:b7:bb:13:0c:da: 8e:8e:8c:59:42:50:c2:02:d0:8f:f3:7c:62:3b:99:54:ae:1f: fb:a9:38:1a:ba:aa:a7:47:aa:8d:b2:39:9a:b8:b1:38:ca:61: 5d:d9:51:57:73:ee:4c:fd:25:b9:5d:3c:ef:4e:2c:b3:d7:0b: 49:14:7c:11:9a:be:b1:85:0f:21:c4:9b:8a:c2:c6:37:13:40: 2e:5e:5e:cd:ed:cd:29:83:b6:da:17:fa:de:5d:24:22:1b:98: 84:0b:2b:99:37:0a:f2:aa:83:be:45:b1:5c:53:21:ed:f0:ed: b4:bd:8f:4d:f3:3f:08:77:06:99:a4:c1:2c:80:7e:7a:f6:a4: 11:84:44:4d:ae:4c:e8:79:c1:c6:a7:d1:51:20:c4:93:d6:f2: 49:3f:35:00:37:26:af:d6:c1:38:86:35:89:fb:bb:61:0e:0e: 5c:84:70:ff:54:16:64:e0:59:6f:b3:76:6e:7c:df:97:e8:eb: 03:5b:22:17:64:6b:82:a7:2e:5b:03:16:62:7c:81:71:10:dc: 2f:46:a4:50 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt/hXnf/bF+RTxwSPfS3zNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDJkMTUyNzYwN2QxMTg4ZTlkYjgwY2YxNjQ5OGE0MTM4MjAwY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GLv2qLFlXQX9fEdhbxnlhavEVWW ebxvMTS0d7VlnmEgdvSGCmmVJ/ylDmj6mbtfDobJMwINt0z92O+vfFpih4LXuQ3E S6HqTZGnOfHDX1xGJ4afZqcjULhFXEFl/hJEEOdsGCHrVeLpqKL+06YdV/vey+wF 1YqUMHrtbfG0BpD8YMcYmp16cGU9TeCmOAD/+xxUSYGi8li87hHXMwrPNKmTNaeB Vf8cwA+ZqXVbR1CpVtY0d5UgOy78zdelxmb2AQ1zQyw9nYFMBpnr7EVLaYSGn956 L3pLpNDwCgYjXzxgh9Fw7WGzyqA61hdowb+f+7mkY8h/q1gSIe5847/kswIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFP0tFSdgfRGI6duAzxZJikE4IAzcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzk5OTdh MC1mMmQ1LTQwYzItOGRjNy1kYzFhYmVjMTY2NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvOTk5N2Ew LWYyZDUtNDBjMi04ZGM3LWRjMWFiZWMxNjY2Yy8xL19TMFZKMkI5RVlqcDI0RFBG a21LUVRnZ0ROdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQBW/DuAwQCqxZQAwQCuSCQAwQCuVCgAwQCuXe4 AwQCwgUMMBQEAgACMA4DBQMqBFaAAwUDKgV/QDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDBJ4wDQYJKoZIhvcNAQELBQADggEBAE32/g9HzXvrQMiHYwsgUemrbFhz EPu6dM43a42n/BEh9D/2jGI3dj65QwH0SMmzbL23uxMM2o6OjFlCUMIC0I/zfGI7 mVSuH/upOBq6qqdHqo2yOZq4sTjKYV3ZUVdz7kz9JbldPO9OLLPXC0kUfBGavrGF DyHEm4rCxjcTQC5eXs3tzSmDttoX+t5dJCIbmIQLK5k3CvKqg75FsVxTIe3w7bS9 j03zPwh3BpmkwSyAfnr2pBGERE2uTOh5wcan0VEgxJPW8kk/NQA3Jq/WwTiGNYn7 u2EODlyEcP9UFmTgWW+zdm5835fo6wNbIhdka4KnLlsDFmJ8gXEQ3C9GpFA= -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:48 2026 by rpki-client