This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer File: s4slrXyWWJ5KjKpfpIksxN_Me1M.cer (raw, json) Hash identifier: DddMgJPJVlht+1V3UsdgT7bpJ8ZuKWu/IxToVxyDnww= Subject key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15488D4D9FE7CB734AF5492ADB1994 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39053 IP: 193.176.68.0/22 IP: 2a0d:edc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:48:8d:4d:9f:e7:cb:73:4a:f5:49:2a:db:19:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:f1:c9:82:1a:2f:59:37:aa:52:a2:34:b2: e7:f2:8c:d1:f4:12:7c:61:76:4c:38:c0:a1:3e:a0: f9:7b:0c:72:3b:26:92:1f:d6:81:dd:3f:a5:de:38: 7a:b3:8a:c8:74:80:6a:4f:fd:07:7b:09:27:94:d2: bd:57:19:af:c0:e8:e5:95:b5:a1:6e:3c:6c:eb:50: 0a:de:51:bc:1d:82:81:af:e7:f6:bb:d2:5e:c3:45: 51:c3:fa:4b:30:2e:a2:08:87:20:61:6c:70:b9:3c: 6f:d4:23:13:0f:98:db:e0:a9:8d:4d:bd:00:2d:fa: b4:e5:65:55:6d:3b:1e:a5:7f:2d:a9:22:10:c2:6e: 18:dc:1f:01:26:3d:72:68:b1:ec:54:cc:75:50:0a: e4:10:01:0a:89:82:5d:52:d4:39:88:8f:3f:d3:c4: e0:3b:e6:04:2d:57:b6:47:f0:6b:87:3f:7e:80:96: d2:ec:9b:db:4e:65:47:33:50:63:fa:04:ed:a3:dd: 16:87:b3:ce:5a:18:7f:8b:01:53:8c:9f:f2:30:3c: 75:da:4e:cd:5e:68:78:b1:96:53:ef:b6:75:34:53: 0b:14:f1:f9:52:6c:9d:82:c4:35:2c:8f:fc:ee:40: ea:f4:d2:85:b0:c6:f0:fd:3f:c2:15:26:ca:76:d3: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.68.0/22 IPv6: 2a0d:edc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39053 Signature Algorithm: sha256WithRSAEncryption 58:0f:e3:4b:b3:77:0a:60:de:32:25:b3:bc:77:99:5f:76:b6: 75:f9:43:20:0c:8d:67:f6:28:0d:bf:14:68:11:b9:a3:07:7b: 34:27:1e:d6:ae:2c:d1:09:b3:de:07:e5:c1:26:de:04:ab:ed: b9:6d:9a:54:93:92:0f:ae:e7:ef:87:21:44:b6:71:b5:40:e1: 50:a4:2e:b0:2f:1b:ad:46:68:52:9e:f9:16:19:04:3a:85:dc: 6e:45:09:76:bb:06:06:c2:2b:94:e4:8c:aa:f6:ef:f9:54:0c: c6:c3:8e:7f:a1:bd:47:37:18:15:45:ce:60:1e:4b:1c:26:a2: 8f:8b:11:13:fd:60:93:fb:70:fd:9b:80:1d:f0:3e:c8:19:c4: e4:30:a6:c5:d5:88:ae:da:b9:f7:6c:fc:17:0e:7a:7a:02:74: a1:02:78:b6:1a:fe:14:06:50:0e:8d:2f:35:09:de:33:bc:2c: f9:aa:86:83:14:fc:cd:1a:05:5c:a4:46:e6:e0:34:53:2d:92: 46:54:02:e0:21:ed:df:03:94:7d:bc:95:08:0b:f5:66:88:59: 4e:32:9e:fd:01:f5:3c:01:c4:82:cd:a3:72:2c:db:c3:57:7e: 81:c0:4e:bf:dd:e3:bb:b6:06:d5:27:eb:56:c6:01:76:45:b5: 55:24:cd:30 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FUiNTZ/ny3NK9Ukq2xmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhiMjVhZDdjOTY1ODllNGE4Y2FhNWZhNDg5MmNjNGRmY2M3YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV7xyYIaL1k3qlKiNLLn8ozR9BJ8 YXZMOMChPqD5ewxyOyaSH9aB3T+l3jh6s4rIdIBqT/0HewknlNK9VxmvwOjllbWh bjxs61AK3lG8HYKBr+f2u9Jew0VRw/pLMC6iCIcgYWxwuTxv1CMTD5jb4KmNTb0A Lfq05WVVbTsepX8tqSIQwm4Y3B8BJj1yaLHsVMx1UArkEAEKiYJdUtQ5iI8/08Tg O+YELVe2R/Brhz9+gJbS7JvbTmVHM1Bj+gTto90Wh7POWhh/iwFTjJ/yMDx12k7N Xmh4sZZT77Z1NFMLFPH5UmydgsQ1LI/87kDq9NKFsMbw/T/CFSbKdtPJiQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLOLJa18llieSoyqX6SJLMTfzHtTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzQyOTFh Mi0wM2E5LTQxOTUtYjFhNy0zZjQwNTQ3ZTUyZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNDI5MWEy LTAzYTktNDE5NS1iMWE3LTNmNDA1NDdlNTJkMS8xL3M0c2xyWHlXV0o1S2pLcGZw SWtzeE5fTWUxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwbBEMA0EAgACMAcDBQMqDe3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCYjTANBgkqhkiG9w0BAQsFAAOCAQEAWA/jS7N3CmDe MiWzvHeZX3a2dflDIAyNZ/YoDb8UaBG5owd7NCce1q4s0Qmz3gflwSbeBKvtuW2a VJOSD67n74chRLZxtUDhUKQusC8brUZoUp75FhkEOoXcbkUJdrsGBsIrlOSMqvbv +VQMxsOOf6G9RzcYFUXOYB5LHCaij4sRE/1gk/tw/ZuAHfA+yBnE5DCmxdWIrtq5 92z8Fw56egJ0oQJ4thr+FAZQDo0vNQneM7ws+aqGgxT8zRoFXKRG5uA0Uy2SRlQC 4CHt3wOUfbyVCAv1ZohZTjKe/QH1PAHEgs2jcizbw1d+gcBOv93ju7YG1SfrVsYB dkW1VSTNMA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:06 2026 by rpki-client