This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer (raw, json) Hash identifier: q69mbFQqdvigtsmq6MVk7MNCvtSKcaU0iWkR0X+2Flc= Subject key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAF597A54B11956FEB8E7C85D5625C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51266 IP: 91.216.242.0/24 IP: 193.160.98.0/23 IP: 194.147.171.0/24 IP: 2001:67c:264::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f5:97:a5:4b:11:95:6f:eb:8e:7c:85:d5:62:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acb8385d0857080cfc013aa521bde6a3a93e4812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:f3:dd:99:b2:e5:5c:d9:81:a3:67:39:41: 6b:8a:a9:a3:75:d0:1d:2b:c9:0c:a2:c5:43:1e:c7: 20:f7:e6:2a:4e:c7:4f:66:39:7f:89:e2:ff:41:70: 04:3f:9c:22:60:c5:e8:81:0e:48:32:ed:ef:c7:03: 98:de:aa:20:f4:2e:3c:c5:af:36:3b:a9:5d:4c:30: f9:fa:1b:44:69:b4:e8:71:93:5c:97:8d:1b:6b:a4: 2a:51:4c:67:76:6d:4f:fd:89:e7:81:21:94:84:0f: 50:cf:6b:99:00:6a:a3:73:90:d5:59:39:1c:93:f9: b9:c6:50:46:dc:ed:a8:59:fb:11:35:c3:5d:d4:ae: 90:4f:45:ea:99:97:25:bc:50:18:a3:e6:b9:ec:c4: c6:d6:b1:2d:15:d3:21:15:97:47:9c:c5:be:cd:ee: 32:89:a7:98:f8:56:ec:f8:76:7f:73:c5:5d:ef:e1: 6c:b7:7b:10:8e:65:61:35:90:91:68:16:ec:7b:58: 11:2e:45:11:05:71:1c:40:6f:24:a6:56:44:1b:5e: 32:05:46:c8:85:4b:cf:76:45:30:e5:43:42:80:85: 72:16:7e:e6:42:ce:90:ee:a7:e4:86:a8:42:41:aa: 8e:81:fe:fb:8f:25:37:c3:b8:99:33:5d:f5:05:b2: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.242.0/24 193.160.98.0/23 194.147.171.0/24 IPv6: 2001:67c:264::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51266 Signature Algorithm: sha256WithRSAEncryption 54:34:2d:d0:fb:03:ea:5d:b8:e7:5c:1f:5d:61:02:9b:d6:ac: 1f:1a:8d:ae:63:a1:b5:01:46:41:87:a6:16:bf:7b:b5:41:02: c3:fb:1a:ae:93:d7:76:69:f7:3c:53:55:2a:31:bb:95:fd:8e: ba:8e:81:2d:ff:a3:48:8c:70:fe:a2:9c:85:b5:c9:94:d9:82: 60:65:64:d7:54:e7:b8:05:6f:e5:98:e1:67:f1:a4:d2:c4:91: 4e:2d:9a:7f:08:29:af:8b:a0:1a:44:f7:3c:ee:d9:a2:ae:35: 66:76:b5:5e:1a:48:92:22:7c:2a:1d:00:bd:16:47:30:64:e2: e2:dc:08:b2:b5:c7:9e:57:d1:ba:a2:7b:7e:78:0d:59:f4:80: fe:2a:0d:80:c4:8d:94:18:4b:e4:6c:35:2b:e9:b7:8d:4a:ac: 73:61:62:1f:d3:3b:36:f1:e2:50:cb:0f:59:b5:97:9d:c3:71: 54:ba:88:a5:26:fb:b2:87:1a:27:d2:dc:8e:29:bc:9b:55:6f: b6:40:24:14:19:f4:a5:56:c5:d3:41:70:b3:10:c4:dc:19:ea: 70:79:90:e1:64:0f:2f:81:9f:15:65:28:5b:e6:27:72:ab:ac: fa:3a:02:3c:b2:7e:86:0d:a6:f4:ad:38:2c:68:21:d3:74:a6: 58:4e:a0:2b -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt9yvWXpUsRlW/rjnyF1WJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2I4Mzg1ZDA4NTcwODBjZmMwMTNhYTUyMWJkZTZhM2E5M2U0ODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7nz3Zmy5VzZgaNnOUFriqmjddAd K8kMosVDHscg9+YqTsdPZjl/ieL/QXAEP5wiYMXogQ5IMu3vxwOY3qog9C48xa82 O6ldTDD5+htEabTocZNcl40ba6QqUUxndm1P/YnngSGUhA9Qz2uZAGqjc5DVWTkc k/m5xlBG3O2oWfsRNcNd1K6QT0XqmZclvFAYo+a57MTG1rEtFdMhFZdHnMW+ze4y iaeY+Fbs+HZ/c8Vd7+Fst3sQjmVhNZCRaBbse1gRLkURBXEcQG8kplZEG14yBUbI hUvPdkUw5UNCgIVyFn7mQs6Q7qfkhqhCQaqOgf77jyU3w7iZM131BbI93wIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFKy4OF0IVwgM/AE6pSG95qOpPkgSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzJhYTQ0 ZC0zYmYzLTQyMGItYWUzZS1lOGE2YTE0NDE5ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMmFhNDRk LTNiZjMtNDIwYi1hZTNlLWU4YTZhMTQ0MTlkOS8xL3JMZzRYUWhYQ0F6OEFUcWxJ YjNtbzZrLVNCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQAW9jyAwQBwaBiAwQAwpOrMA8EAgACMAkDBwAg AQZ8AmQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMhCMA0GCSqGSIb3DQEBCwUA A4IBAQBUNC3Q+wPqXbjnXB9dYQKb1qwfGo2uY6G1AUZBh6YWv3u1QQLD+xquk9d2 afc8U1UqMbuV/Y66joEt/6NIjHD+opyFtcmU2YJgZWTXVOe4BW/lmOFn8aTSxJFO LZp/CCmvi6AaRPc87tmirjVmdrVeGkiSInwqHQC9FkcwZOLi3AiytceeV9G6ont+ eA1Z9ID+Kg2AxI2UGEvkbDUr6beNSqxzYWIf0zs28eJQyw9ZtZedw3FUuoilJvuy hxon0tyOKbybVW+2QCQUGfSlVsXTQXCzEMTcGepweZDhZA8vgZ8VZShb5idyq6z6 OgI8sn6GDab0rTgsaCHTdKZYTqAr -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:45 2026 by rpki-client