This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer File: d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer (raw, json) Hash identifier: 30zK5vTHNOzT7a2cjDkJ6GKpr+r9pZwghr2BuT8y0pY= Subject key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591E1A4C41D9F6054B0F79AD7146F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213141 IP: 193.254.64.0/18 IP: 212.0.0.0/18 IP: 2a02:adc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1e:1a:4c:41:d9:f6:05:4b:0f:79:ad:71:46:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:b0:4d:1a:27:49:12:d1:74:de:34:b0:9c: 4e:de:58:71:f7:02:a5:94:69:70:b5:f5:5d:5f:4f: af:15:b7:f2:ab:ee:dc:07:38:df:67:29:e4:de:f9: d9:63:a7:e4:2b:7f:44:73:1d:2f:26:11:62:ba:91: cb:0d:9e:c7:a8:00:da:48:04:6d:79:a3:78:c9:05: 3e:59:75:ae:58:27:a9:73:c7:ab:88:2a:1e:8a:e7: 20:a1:e4:e4:9b:9d:ef:cd:82:34:b0:8e:82:fa:e1: 9f:62:61:21:5c:89:b8:2a:0c:23:00:e2:8a:60:40: a1:ea:16:2c:c4:42:67:59:5e:c4:a8:51:ab:44:44: aa:97:cb:38:13:6a:6c:9f:a5:7c:c4:1c:e4:18:ff: 0b:38:6a:2c:40:91:1a:7e:28:3d:39:8c:68:3f:65: fc:87:90:51:b0:dc:23:6e:9a:2d:76:65:89:e2:bd: 41:22:6f:b5:5f:9b:1a:61:fc:80:6e:44:77:c5:27: dc:42:8a:dd:48:03:76:b5:e5:c3:16:48:14:30:ce: 5e:94:c0:81:32:04:4f:91:fd:de:d9:25:84:52:eb: 27:e0:ab:17:19:cb:ef:08:7d:7d:9b:c5:93:14:02: 9f:96:50:73:b2:2f:a9:19:0b:6c:5b:b1:ea:30:f2: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.254.64.0/18 212.0.0.0/18 IPv6: 2a02:adc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213141 Signature Algorithm: sha256WithRSAEncryption 02:13:fa:6c:b9:a7:b4:90:dc:c9:88:e2:23:ae:c5:60:72:a6: 50:46:59:59:69:c2:10:bc:4a:df:0b:34:be:cf:e3:73:2d:bc: e0:3e:f7:66:7f:d7:88:a3:75:b7:27:67:d8:48:40:6d:0f:d7: 13:a8:1e:3c:44:d7:9d:fc:ab:d6:9f:79:e5:95:c9:2b:cc:e9: 8f:ea:f0:a4:8b:87:4e:e1:97:27:43:aa:63:b7:cc:d0:39:2e: b7:8c:f9:ab:d7:99:ea:d3:14:8f:7a:b1:fc:3b:cc:11:c8:45: 94:53:b2:6d:07:3f:34:79:e6:66:4c:3f:a7:02:58:fa:35:30: e3:f6:db:34:f5:a6:2f:7e:26:6f:cc:96:38:45:43:d7:de:b7: f1:d7:14:12:ae:f6:88:e0:91:cc:84:32:15:7e:ec:47:a5:6f: 1d:ea:b2:c5:e7:55:0f:89:54:f5:b4:05:6c:72:11:c1:62:92: c9:69:f4:ac:01:10:de:4b:8f:35:b6:dd:f8:03:42:5c:89:11: 92:68:2b:83:bd:c7:ca:b6:aa:2b:73:c2:41:08:e3:08:6f:7f: 74:75:28:a4:97:98:ea:41:fa:03:95:2b:a9:6e:83:ff:36:00: 3d:ba:fa:e6:0d:fa:ab:04:60:57:6e:f9:f8:fd:ed:19:c6:ea: 20:4d:e2:0f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WR4aTEHZ9gVLD3mtcUb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2Y0OWFmODRjMGI4YTA5YTdiM2I0ZjFmMjcxNDRlYjI1OTEwZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFOwTRonSRLRdN40sJxO3lhx9wKl lGlwtfVdX0+vFbfyq+7cBzjfZynk3vnZY6fkK39Ecx0vJhFiupHLDZ7HqADaSARt eaN4yQU+WXWuWCepc8eriCoeiucgoeTkm53vzYI0sI6C+uGfYmEhXIm4KgwjAOKK YECh6hYsxEJnWV7EqFGrRESql8s4E2psn6V8xBzkGP8LOGosQJEafig9OYxoP2X8 h5BRsNwjbpotdmWJ4r1BIm+1X5saYfyAbkR3xSfcQordSAN2teXDFkgUMM5elMCB MgRPkf3e2SWEUusn4KsXGcvvCH19m8WTFAKfllBzsi+pGQtsW7HqMPLqbQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHf0mvhMC4oJp7O08fJxROslkQ+1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzI2NDRh MC0zZDhmLTRlYmQtODU4OC0zNTZjNDExYjQzMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvMjY0NGEw LTNkOGYtNGViZC04NTg4LTM1NmM0MTFiNDMwZS8xL2RfU2EtRXdMaWdtbnM3VHg4 bkZFNnlXUkQ3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGwf5AAwQG1AAAMA0EAgACMAcDBQMqAq3AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNAlTANBgkqhkiG9w0BAQsFAAOCAQEAAhP6 bLmntJDcyYjiI67FYHKmUEZZWWnCELxK3ws0vs/jcy284D73Zn/XiKN1tydn2EhA bQ/XE6gePETXnfyr1p955ZXJK8zpj+rwpIuHTuGXJ0OqY7fM0Dkut4z5q9eZ6tMU j3qx/DvMEchFlFOybQc/NHnmZkw/pwJY+jUw4/bbNPWmL34mb8yWOEVD19638dcU Eq72iOCRzIQyFX7sR6VvHeqyxedVD4lU9bQFbHIRwWKSyWn0rAEQ3kuPNbbd+ANC XIkRkmgrg73HyraqK3PCQQjjCG9/dHUopJeY6kH6A5UrqW6D/zYAPbr65g36qwRg V275+P3tGcbqIE3iDw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:29 2026 by rpki-client