This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer File: b2Wy-ou61lAcfSHvR13ERUE_sos.cer (raw, json) Hash identifier: QzYrPnvXP65j/GKcuSESZHvpo+Ptk7EWnauhDRiky/8= Subject key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F7241BD27F87D3A935740BCEB3D3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62141 IP: 185.38.92.0/22 IP: 2a04:74c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:72:41:bd:27:f8:7d:3a:93:57:40:bc:eb:3d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:56:62:06:0f:1d:6c:d8:fd:29:68:1e:a8: 1e:74:f0:bb:58:82:5b:00:6f:da:37:2b:cc:8e:50: 71:88:76:b0:cc:40:d4:e1:89:6c:5d:cb:e9:f1:7e: a8:4a:1e:5b:9d:42:8c:8d:a1:7e:36:86:f3:5b:67: fe:d3:24:8b:7b:a7:45:f9:48:22:4b:67:e9:7a:35: 26:6b:7a:3c:b3:f7:3c:35:55:bf:6f:90:86:32:89: 33:1c:0d:90:f7:1d:03:91:69:84:64:e9:a0:15:a7: 99:e6:e6:01:49:bd:57:d3:d3:33:5d:19:1f:51:28: 68:17:97:6c:99:35:cc:83:0b:49:b2:b8:6d:ad:63: 7c:88:80:d2:46:d3:51:30:40:1f:c1:ae:8d:70:82: 8c:12:e3:de:f8:c6:8e:ac:6d:a9:de:86:87:c9:b7: ca:39:60:75:b5:1d:87:cd:8d:cb:fd:bf:41:54:ed: 3c:98:58:6b:43:05:09:17:98:a8:60:50:1d:50:4a: ad:2d:27:fb:9f:2b:d4:3f:56:d4:f1:5c:67:c4:52: 1b:42:99:1c:3e:e6:a5:b1:15:f1:a3:e6:67:29:70: 58:fa:37:9e:bd:65:c5:88:e4:d7:a5:68:57:16:c8: a9:41:57:ba:89:f7:1e:d3:db:83:b2:85:b8:b8:53: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.92.0/22 IPv6: 2a04:74c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62141 Signature Algorithm: sha256WithRSAEncryption 0a:a0:1e:b4:76:e4:35:06:52:31:4a:41:7c:e7:be:42:aa:48: d3:30:73:ed:cb:82:cc:9d:c5:21:bf:6a:b6:e0:37:e8:26:ca: dc:31:3f:e0:3d:d7:61:5c:3c:ad:1e:c2:e3:e9:f3:66:a9:b3: 6c:dd:a7:66:03:03:fd:70:4b:fb:c7:ff:ba:4e:61:7b:cd:0e: 9f:a0:ef:c0:0b:73:23:f1:f0:8d:ba:1c:aa:3f:91:c9:9b:53: ea:fd:d8:2c:2d:86:e7:07:68:7c:62:5f:87:78:bd:e2:34:34: fa:1e:46:5c:42:f2:07:ca:99:19:ee:36:4c:ba:67:1a:bb:85: 4e:50:ca:d4:de:3c:75:5a:6f:00:55:b7:a5:0d:ec:d5:47:a4: cc:6e:01:6f:c4:ee:b4:74:d2:b0:40:2c:cc:fd:59:a1:8e:e9: ee:61:64:b9:f4:04:45:d8:3b:6d:16:2e:79:00:f7:c8:e0:67: c5:c5:ef:ef:5e:2a:c7:98:1f:66:7c:4a:a5:e4:6e:65:5e:32: d2:fc:56:25:43:36:20:77:7e:ca:a2:b6:e0:83:e9:d9:09:de: 0a:ca:b6:72:ca:39:0c:c4:8b:d1:3a:2f:7f:4b:63:ba:b6:b5: 8f:68:9d:a5:c1:b9:16:49:0f:e9:83:67:24:4c:e0:4f:09:01: cd:8f:80:f2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f3JBvSf4fTqTV0C86z08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjY1YjJmYThiYmFkNjUwMWM3ZDIxZWY0NzVkYzQ0NTQxM2ZiMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdVWYgYPHWzY/SloHqgedPC7WIJb AG/aNyvMjlBxiHawzEDU4YlsXcvp8X6oSh5bnUKMjaF+NobzW2f+0ySLe6dF+Ugi S2fpejUma3o8s/c8NVW/b5CGMokzHA2Q9x0DkWmEZOmgFaeZ5uYBSb1X09MzXRkf UShoF5dsmTXMgwtJsrhtrWN8iIDSRtNRMEAfwa6NcIKMEuPe+MaOrG2p3oaHybfK OWB1tR2HzY3L/b9BVO08mFhrQwUJF5ioYFAdUEqtLSf7nyvUP1bU8VxnxFIbQpkc PualsRXxo+ZnKXBY+jeevWXFiOTXpWhXFsipQVe6ifce09uDsoW4uFOqOwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG9lsvqLutZQHH0h70ddxEVBP7KLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzA2ODFi Yy1lMjc4LTQ2YzUtYjFlMy03ZjY3NDQyZjlmMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMDY4MWJj LWUyNzgtNDZjNS1iMWUzLTdmNjc0NDJmOWYzMi8xL2IyV3ktb3U2MWxBY2ZTSHZS MTNFUlVFX3Nvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSZcMA0EAgACMAcDBQMqBHTAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDyvTANBgkqhkiG9w0BAQsFAAOCAQEACqAetHbkNQZS MUpBfOe+QqpI0zBz7cuCzJ3FIb9qtuA36CbK3DE/4D3XYVw8rR7C4+nzZqmzbN2n ZgMD/XBL+8f/uk5he80On6DvwAtzI/Hwjbocqj+RyZtT6v3YLC2G5wdofGJfh3i9 4jQ0+h5GXELyB8qZGe42TLpnGruFTlDK1N48dVpvAFW3pQ3s1UekzG4Bb8TutHTS sEAszP1ZoY7p7mFkufQERdg7bRYueQD3yOBnxcXv714qx5gfZnxKpeRuZV4y0vxW JUM2IHd+yqK24IPp2QneCsq2cso5DMSL0Tovf0tjura1j2idpcG5FkkP6YNnJEzg TwkBzY+A8g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:40 2026 by rpki-client