This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer (raw, json) Hash identifier: Qziqew9p0qKL2dyILVrNRbb7hv6CpbVgkV0XG3rUIII= Subject key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5ADF0DB2EBFFC656C8B820F9AA0679 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200209 IP: 5.63.20.0/24 IP: 185.23.109.0/24 IP: 2a13:a000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:df:0d:b2:eb:ff:c6:56:c8:b8:20:f9:aa:06:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0095ed011c94358245c32757d46bed860df4c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:3a:7e:19:78:34:66:27:b6:f3:e1:a1:fe: e7:34:e4:f0:70:41:ad:75:c6:c0:d5:24:54:d6:57: 8d:da:43:63:1a:af:26:74:d7:e3:28:5d:5f:22:cc: d1:c1:c0:82:f5:d1:de:d0:cb:3d:a0:9f:01:0a:b2: 51:4e:bb:0d:de:8a:34:93:25:10:93:cc:15:fa:bd: cf:e8:38:62:12:a8:39:15:02:06:90:ce:5f:09:4b: 74:7f:d8:ae:a7:4f:86:16:b7:44:74:e9:af:98:b8: 57:12:a1:49:4a:84:43:09:e1:db:9e:4f:68:c0:2e: de:0a:13:d5:90:54:e0:b8:37:33:14:0a:75:0b:df: 48:55:a6:b2:8c:8b:6c:d3:41:01:26:6a:d1:39:ee: 45:1c:37:89:27:07:d0:34:4d:14:97:31:c6:c1:83: f0:ba:6b:7d:c2:05:48:96:1e:7a:52:2d:68:48:b5: 57:e4:66:e4:e1:89:1e:ac:4b:38:9b:19:af:6f:69: 38:25:15:8d:ab:de:cd:b0:45:3a:1c:58:d3:23:3e: 5b:88:c4:9d:b5:70:a0:3b:89:39:a5:18:4d:ff:78: d3:74:52:1a:a8:1b:0d:70:ee:13:d7:33:ad:d9:a9: ab:3e:1b:cc:e0:ad:6a:01:0b:0f:70:31:5d:96:fa: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.20.0/24 185.23.109.0/24 IPv6: 2a13:a000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200209 Signature Algorithm: sha256WithRSAEncryption 46:02:6d:a4:1d:d3:54:3d:f1:8b:1c:29:b5:09:a3:10:dd:bc: 62:f8:46:00:32:65:98:28:38:cb:11:a0:dd:d8:33:79:22:e1: 8c:08:79:79:88:72:ad:23:e7:e7:ce:e8:f7:9f:3d:49:7b:eb: d8:d0:62:10:15:ea:da:b5:c6:47:d9:30:93:f3:4f:d9:a3:2a: 24:b5:c5:67:73:de:f7:cc:6b:eb:9b:95:21:24:00:8f:f2:1f: bc:15:7f:fa:24:a8:36:bd:9b:5c:87:81:ea:de:db:10:bf:4b: 19:85:db:48:3c:eb:06:12:cb:54:05:34:3b:b3:a8:6c:15:cd: ea:1c:be:9b:39:08:2f:82:4b:a6:6e:4a:db:97:93:4b:f1:3c: 79:4a:eb:fc:d8:76:d3:e7:48:93:be:01:0a:f8:36:94:f1:50: 4c:cc:69:64:5a:2a:90:e8:b5:b7:15:01:c4:44:0f:3e:49:25: 9d:f9:0e:9f:e3:96:ca:2f:75:2e:a8:02:23:1f:bf:8f:ee:54: 23:21:4c:d5:24:44:40:89:0e:c9:6a:c9:20:b7:d0:3c:78:16: e7:85:6d:f2:a7:fd:e2:eb:8b:de:24:21:0c:6c:a3:39:f8:fb: 25:16:12:11:59:54:3a:66:a4:a7:e6:4a:31:31:e5:00:fc:de: 88:66:4c:ba -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9Wt8Nsuv/xlbIuCD5qgZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDA5NWVkMDExYzk0MzU4MjQ1YzMyNzU3ZDQ2YmVkODYwZGY0YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhs6fhl4NGYntvPhof7nNOTwcEGt dcbA1SRU1leN2kNjGq8mdNfjKF1fIszRwcCC9dHe0Ms9oJ8BCrJRTrsN3oo0kyUQ k8wV+r3P6DhiEqg5FQIGkM5fCUt0f9iup0+GFrdEdOmvmLhXEqFJSoRDCeHbnk9o wC7eChPVkFTguDczFAp1C99IVaayjIts00EBJmrROe5FHDeJJwfQNE0UlzHGwYPw umt9wgVIlh56Ui1oSLVX5Gbk4YkerEs4mxmvb2k4JRWNq97NsEU6HFjTIz5biMSd tXCgO4k5pRhN/3jTdFIaqBsNcO4T1zOt2amrPhvM4K1qAQsPcDFdlvqe+QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLAJXtARyUNYJFwydX1Gvthg30wZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzQ5Y2Rl Yy02OWYwLTQ1NDAtODliYS1lYTQ1OTY5OTUwY2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvNDljZGVj LTY5ZjAtNDU0MC04OWJhLWVhNDU5Njk5NTBjYy8xL3NBbGUwQkhKUTFna1hESjFm VWEtMkdEZlRCay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQABT8UAwQAuRdtMA0EAgACMAcDBQAqE6AAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMOETANBgkqhkiG9w0BAQsFAAOCAQEARgJt pB3TVD3xixwptQmjEN28YvhGADJlmCg4yxGg3dgzeSLhjAh5eYhyrSPn587o9589 SXvr2NBiEBXq2rXGR9kwk/NP2aMqJLXFZ3Pe98xr65uVISQAj/IfvBV/+iSoNr2b XIeB6t7bEL9LGYXbSDzrBhLLVAU0O7OobBXN6hy+mzkIL4JLpm5K25eTS/E8eUrr /Nh20+dIk74BCvg2lPFQTMxpZFoqkOi1txUBxEQPPkklnfkOn+OWyi91LqgCIx+/ j+5UIyFM1SREQIkOyWrJILfQPHgW54Vt8qf94uuL3iQhDGyjOfj7JRYSEVlUOmak p+ZKMTHlAPzeiGZMug== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:34 2026 by rpki-client