This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer File: idSzdf1Mr9XfusQG3SWmHSLdNso.cer (raw, json) Hash identifier: C1z7M1Gct2EjzqQadGUaOJt7atcGImT12iPpkcLlm3o= Subject key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE38D518533C7A6E55FE722A79D128 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.255.139.0/24 IP: 2a10:bfc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:38:d5:18:53:3c:7a:6e:55:fe:72:2a:79:d1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:be:9a:ba:aa:7f:a0:fc:75:b3:d8:d5:da: 59:53:27:87:54:dc:e3:4d:88:66:86:83:fd:5e:a6: ca:a3:74:54:c6:95:5b:4d:4f:69:80:43:56:de:a1: 96:66:be:67:ce:6c:0b:92:49:da:98:08:8f:c6:c1: e3:81:41:13:1e:48:ad:72:9e:8e:6c:6f:07:c7:50: 2d:66:5a:11:c5:b3:f5:a3:71:54:2e:fa:e1:c2:68: 68:67:7e:8b:d5:5b:23:c2:c0:64:86:0c:9a:cf:dd: e5:84:3c:e3:42:96:14:bb:bc:d0:c7:1c:1a:6d:a3: 27:aa:6d:1a:45:02:78:52:00:c0:a5:15:00:df:14: ce:f9:a3:1e:1e:2b:44:7d:dd:99:ac:f3:bb:45:41: 58:c9:b6:58:0b:5a:29:6f:f1:e5:05:fa:b2:c7:65: 87:5f:db:b7:08:1b:42:27:43:5b:93:53:39:03:da: e6:ac:7d:0d:9d:b7:d9:66:ed:47:f9:77:19:c7:fb: 3c:7b:f8:be:1a:ec:58:d6:14:59:1f:1b:db:22:19: ac:f1:89:bf:f2:d9:b7:73:53:28:21:44:89:d8:20: 19:56:83:fb:13:11:42:30:57:fd:41:3a:a8:8d:8f: 02:ad:9a:23:b2:5c:6e:69:7a:d3:cb:0b:59:e6:01: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.139.0/24 IPv6: 2a10:bfc0::/29 Signature Algorithm: sha256WithRSAEncryption 16:72:07:a0:32:65:4f:08:ff:ec:61:dd:e7:25:88:43:25:91: b5:27:1a:98:35:bb:9a:2b:c6:0a:34:fc:23:ed:6f:f7:08:8b: 99:53:0f:b1:28:6c:f3:89:44:7d:96:10:56:ae:ac:8d:7f:84: c4:9a:2e:04:cb:b3:a7:92:a9:14:2e:db:b6:92:ea:c5:a7:d1: eb:5e:c6:fb:4f:20:a8:47:16:16:c3:d5:63:bc:13:60:71:c7: ee:ae:2c:9c:5c:cd:c9:1e:0a:cb:f6:3f:c1:34:bb:57:fd:ec: 65:c3:3e:81:26:f3:60:0e:24:96:62:1b:b2:89:1d:c2:2e:02: f6:6d:16:f7:78:56:9c:f6:09:b4:44:34:80:d2:0d:9a:87:de: 3f:36:6f:a6:db:a6:3f:4b:49:0d:8a:18:0f:b9:9d:5a:b1:76: 15:58:57:a6:9a:2d:d3:99:36:a8:d9:da:f4:f0:72:f1:df:98: f1:19:3a:06:33:a2:f0:eb:38:8d:fe:3e:3b:8d:e9:54:4b:d4: 4a:92:15:9c:13:d9:0e:7c:f7:f4:fa:76:94:c1:de:bf:90:0d: 8c:10:21:a9:8c:98:2f:76:12:c2:c3:b3:6f:6f:dc:91:5f:da: 59:b1:89:68:26:70:3f:0d:44:a0:40:4e:65:a8:69:8e:ba:e1: d1:25:5c:8b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87jjVGFM8em5V/nIqedEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWQ0YjM3NWZkNGNhZmQ1ZGZiYWM0MDZkZDI1YTYxZDIyZGQzNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoi+mrqqf6D8dbPY1dpZUyeHVNzj TYhmhoP9XqbKo3RUxpVbTU9pgENW3qGWZr5nzmwLkknamAiPxsHjgUETHkitcp6O bG8Hx1AtZloRxbP1o3FULvrhwmhoZ36L1VsjwsBkhgyaz93lhDzjQpYUu7zQxxwa baMnqm0aRQJ4UgDApRUA3xTO+aMeHitEfd2ZrPO7RUFYybZYC1opb/HlBfqyx2WH X9u3CBtCJ0Nbk1M5A9rmrH0NnbfZZu1H+XcZx/s8e/i+GuxY1hRZHxvbIhms8Ym/ 8tm3c1MoIUSJ2CAZVoP7ExFCMFf9QTqojY8CrZojslxuaXrTywtZ5gEpmQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFInUs3X9TK/V37rEBt0lph0i3TbKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2JjYWQ4 ZC04ZTU1LTRhODEtYjM5My0yNzQyNTEyNTIwNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvYmNhZDhk LThlNTUtNGE4MS1iMzkzLTI3NDI1MTI1MjA3Ny8xL2lkU3pkZjFNcjlYZnVzUUcz U1dtSFNMZE5zby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuf+LMA0EAgACMAcDBQMqEL/AMA0GCSqGSIb3 DQEBCwUAA4IBAQAWcgegMmVPCP/sYd3nJYhDJZG1JxqYNbuaK8YKNPwj7W/3CIuZ Uw+xKGzziUR9lhBWrqyNf4TEmi4Ey7OnkqkULtu2kurFp9HrXsb7TyCoRxYWw9Vj vBNgccfuriycXM3JHgrL9j/BNLtX/exlwz6BJvNgDiSWYhuyiR3CLgL2bRb3eFac 9gm0RDSA0g2ah94/Nm+m26Y/S0kNihgPuZ1asXYVWFemmi3TmTao2dr08HLx35jx GToGM6Lw6ziN/j47jelUS9RKkhWcE9kOfPf0+naUwd6/kA2MECGpjJgvdhLCw7Nv b9yRX9pZsYloJnA/DUSgQE5lqGmOuuHRJVyL -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:05 2026 by rpki-client