This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer (raw, json) Hash identifier: 7idzpoch6s/rE1GgN5/WaB7bvgJ4mA0z2CrV1naDMnY= Subject key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B51B165334627D586214E26204B09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210558 IP: 2.58.56.0/24 IP: 194.26.192.0/24 IP: 2a12:a800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:51:b1:65:33:46:27:d5:86:21:4e:26:20:4b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:df:b6:67:87:0a:31:89:48:8a:06:51:c5: e6:31:94:69:94:ff:65:fa:f7:b2:e2:08:af:5a:c6: 71:10:61:fd:d6:35:4b:5d:ab:a1:96:d3:93:16:52: 80:52:9f:ee:40:cc:67:ac:e3:22:80:d1:9b:8a:01: b6:1d:da:fa:c5:d4:e5:13:c0:9a:b4:55:f2:6c:18: d7:6d:12:b9:a6:a1:95:a0:60:25:e0:55:be:cc:7a: 5b:fa:65:fd:aa:3f:fa:b3:99:ba:d1:b5:2c:b0:8e: e7:1b:fb:2c:7d:ad:a8:14:b0:4c:19:f4:c6:5f:f3: 3a:86:dc:d5:04:dc:48:3e:e0:5f:0e:c8:06:dd:f2: 08:3e:90:7b:8c:88:39:88:e2:d3:5a:e1:5c:50:35: a7:22:ce:13:39:fa:8a:33:54:7b:4b:f4:95:03:65: 6d:62:7e:8a:bb:71:77:a4:ab:3c:96:ef:29:3d:f0: 95:2d:75:9f:f4:ae:c1:4f:08:d9:9b:50:89:86:de: 97:13:61:26:99:7d:ae:67:d3:97:41:39:c2:c9:37: 97:68:8c:f0:42:56:df:dd:d6:9c:f2:3c:1c:17:71: 96:26:df:0f:d8:33:b3:1b:65:85:94:b5:6b:1a:12: 21:a4:3c:7f:31:6e:d7:bb:32:8c:8c:b7:4b:03:d7: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.56.0/24 194.26.192.0/24 IPv6: 2a12:a800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210558 Signature Algorithm: sha256WithRSAEncryption 65:42:cc:3e:5f:19:4d:59:3e:c8:c3:ce:05:1c:43:18:3a:ac: b2:97:46:a4:28:2b:b3:d9:c5:e5:0c:3a:ef:3d:51:05:01:cd: b7:b2:84:2e:60:dd:76:9b:b0:54:95:e9:72:b5:5c:a2:c5:8a: 55:ac:88:5c:cc:c8:36:6d:84:ae:e2:2e:83:dc:c2:a5:3e:ee: 03:f4:e7:50:c4:d8:7e:d3:3e:6b:e3:df:f4:ff:2c:40:e3:b2: de:9c:c9:eb:65:1d:b3:62:3c:dd:93:a4:61:6a:c7:3f:77:97: df:33:9e:68:f3:f5:92:01:fe:24:54:2f:c9:c1:1f:d9:da:f5: 2c:42:a5:f2:f8:14:64:23:d8:89:a4:f4:29:f1:1e:70:33:c9: 36:f6:76:ac:13:1d:d4:21:37:12:5e:34:b9:53:21:68:dd:a8: fb:d1:1e:33:92:eb:e9:25:a4:2e:b6:ce:0f:74:31:4b:f1:33: 2b:76:77:f6:90:6a:9e:7b:5b:96:07:02:bd:c5:e4:88:a3:d4: b2:fc:8c:90:6a:89:48:49:d1:85:51:95:39:0c:f9:69:84:0f: 8c:cf:11:81:da:08:db:9f:d6:06:3e:91:49:ea:8c:e3:50:13: b9:ad:0e:a6:ff:fa:17:b0:b9:bd:94:19:b3:56:56:25:34:73: 23:85:1d:9d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W1GxZTNGJ9WGIU4mIEsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzVhMjBhODY5MzljOGRlOGFlZGMzMDUyNDNiMGZkNGFkODY1NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bjftmeHCjGJSIoGUcXmMZRplP9l +vey4givWsZxEGH91jVLXauhltOTFlKAUp/uQMxnrOMigNGbigG2Hdr6xdTlE8Ca tFXybBjXbRK5pqGVoGAl4FW+zHpb+mX9qj/6s5m60bUssI7nG/ssfa2oFLBMGfTG X/M6htzVBNxIPuBfDsgG3fIIPpB7jIg5iOLTWuFcUDWnIs4TOfqKM1R7S/SVA2Vt Yn6Ku3F3pKs8lu8pPfCVLXWf9K7BTwjZm1CJht6XE2EmmX2uZ9OXQTnCyTeXaIzw Qlbf3dac8jwcF3GWJt8P2DOzG2WFlLVrGhIhpDx/MW7XuzKMjLdLA9enHwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLNaIKhpOcjeiu3DBSQ7D9SthlTQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzE2MjE4 Ni01MGQxLTQ3NjEtYWFmMC1hNTQyNTg5Nzk5YmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMTYyMTg2 LTUwZDEtNDc2MS1hYWYwLWE1NDI1ODk3OTliYy8xL3Mxb2dxR2s1eU42SzdjTUZK RHNQMUsyR1ZOQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAAjo4AwQAwhrAMA0EAgACMAcDBQMqEqgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2fjANBgkqhkiG9w0BAQsFAAOCAQEAZULM Pl8ZTVk+yMPOBRxDGDqsspdGpCgrs9nF5Qw67z1RBQHNt7KELmDddpuwVJXpcrVc osWKVayIXMzINm2EruIug9zCpT7uA/TnUMTYftM+a+Pf9P8sQOOy3pzJ62Uds2I8 3ZOkYWrHP3eX3zOeaPP1kgH+JFQvycEf2dr1LEKl8vgUZCPYiaT0KfEecDPJNvZ2 rBMd1CE3El40uVMhaN2o+9EeM5Lr6SWkLrbOD3QxS/EzK3Z39pBqnntblgcCvcXk iKPUsvyMkGqJSEnRhVGVOQz5aYQPjM8RgdoI25/WBj6RSeqM41ATua0Opv/6F7C5 vZQZs1ZWJTRzI4UdnQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:28:36 2026 by rpki-client