This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer File: sBTC9eALxnh9MoMbieoSTfYonkU.cer (raw, json) Hash identifier: y1B49YF5rSEjH465d47nFnulg6GBp29s1HpjiQpkz4g= Subject key identifier: B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD82F8998901776F1723485322540 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209152 IP: 2a02:f580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d8:2f:89:98:90:17:76:f1:72:34:85:32:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b014c2f5e00bc6787d32831b89ea124df6289e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:2c:ee:cb:70:0f:89:4e:2d:6d:15:6e:af: 35:18:3b:64:4f:1e:34:43:a9:a8:f7:eb:c4:cf:93: c1:11:8c:74:b3:a9:31:1b:8c:81:6e:44:88:77:f4: d9:54:42:c6:93:e4:7d:94:e5:55:9e:21:b4:19:19: c8:f8:a0:15:eb:f6:5c:7f:d6:fd:ad:d8:fa:56:a3: 93:89:9e:ce:f3:4e:88:b7:03:d5:a1:3f:d8:c1:fb: 6a:5b:6f:33:50:3b:95:98:f4:0a:fa:b9:9b:bc:cb: 9c:f2:8d:4f:44:bb:dc:0e:98:68:4f:dd:14:a5:96: 17:cd:28:00:26:05:33:4f:59:6e:d6:ca:e0:1a:2f: df:3c:73:ca:e6:ed:6b:8b:dd:c5:40:6d:21:0d:d5: bb:57:5f:8c:58:e0:dd:ec:9b:76:8b:21:7c:1c:df: 5b:4d:c5:c2:5f:00:6b:72:01:70:ab:a4:cf:4c:b2: 9c:92:72:bb:3a:c1:84:b2:24:d3:4b:95:54:d3:6e: 91:84:8b:46:6f:74:0c:12:7c:13:20:67:ba:9a:73: ef:91:43:8d:db:7d:ec:f2:a8:4e:91:32:3a:65:a5: 2f:ee:ef:f2:8f:a6:58:e4:74:22:00:bd:32:5e:f6: 41:48:93:b4:b0:ed:68:e8:fd:23:88:af:a9:92:3f: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:f580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209152 Signature Algorithm: sha256WithRSAEncryption 51:a6:1a:06:9f:63:76:29:12:5a:84:e0:b1:6f:8b:3c:36:59: a1:29:87:82:14:8b:ff:7b:b4:68:4e:47:0e:38:fa:e2:e4:41: 9d:1d:9f:e9:f3:1b:d4:a8:68:fb:34:1c:cd:98:7f:bb:75:c8: f4:52:05:f5:46:c1:e8:35:ca:bf:d3:2a:70:6b:5a:52:1c:43: b3:38:0f:aa:ad:6c:d8:1c:19:fe:43:cd:37:ad:e9:22:47:a2: d4:59:3c:32:5d:20:0b:3d:e2:18:d1:1e:46:9e:47:07:69:33: b6:31:54:8c:7e:26:6f:0c:38:e8:7d:89:12:f5:16:66:4b:5a: 9d:ba:2c:48:c1:17:65:0b:f1:4b:e8:74:08:c6:55:2a:e9:74: 92:41:3b:10:65:3c:96:66:bc:28:3d:f6:80:96:b3:4d:a2:e8: 2c:dd:19:75:df:e3:6f:42:10:5a:c3:65:5d:6e:46:12:c5:c3: d4:42:0a:ca:32:b8:87:b2:65:91:f1:89:cf:ca:5e:34:ff:73: 0f:58:40:91:08:96:d4:d4:40:e4:a4:77:0f:ff:d0:0d:9b:cf: c2:7d:9f:fc:3d:73:1f:0a:b8:12:eb:06:ea:78:d5:70:b4:e6: 48:d0:50:1d:0e:12:33:5b:5e:ba:bd:1c:37:60:5c:c8:45:15: b8:d4:83:64 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt87dgviZiQF3bxcjSFMiVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDE0YzJmNWUwMGJjNjc4N2QzMjgzMWI4OWVhMTI0ZGY2Mjg5ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO4s7stwD4lOLW0Vbq81GDtkTx40 Q6mo9+vEz5PBEYx0s6kxG4yBbkSId/TZVELGk+R9lOVVniG0GRnI+KAV6/Zcf9b9 rdj6VqOTiZ7O806ItwPVoT/YwftqW28zUDuVmPQK+rmbvMuc8o1PRLvcDphoT90U pZYXzSgAJgUzT1lu1srgGi/fPHPK5u1ri93FQG0hDdW7V1+MWODd7Jt2iyF8HN9b TcXCXwBrcgFwq6TPTLKcknK7OsGEsiTTS5VU026RhItGb3QMEnwTIGe6mnPvkUON 233s8qhOkTI6ZaUv7u/yj6ZY5HQiAL0yXvZBSJO0sO1o6P0jiK+pkj+3RwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFLAUwvXgC8Z4fTKDG4nqEk32KJ5FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2QwYjZh My02MTllLTRiMTAtYTczYS0zMDM1NmFjZWUwMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZDBiNmEz LTYxOWUtNGIxMC1hNzNhLTMwMzU2YWNlZTAzMS8xL3NCVEM5ZUFMeG5oOU1vTWJp ZW9TVGZZb25rVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgL1gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDMQAwDQYJKoZIhvcNAQELBQADggEBAFGmGgafY3YpElqE4LFvizw2WaEph4IU i/97tGhORw44+uLkQZ0dn+nzG9SoaPs0HM2Yf7t1yPRSBfVGweg1yr/TKnBrWlIc Q7M4D6qtbNgcGf5DzTet6SJHotRZPDJdIAs94hjRHkaeRwdpM7YxVIx+Jm8MOOh9 iRL1FmZLWp26LEjBF2UL8UvodAjGVSrpdJJBOxBlPJZmvCg99oCWs02i6CzdGXXf 429CEFrDZV1uRhLFw9RCCsoyuIeyZZHxic/KXjT/cw9YQJEIltTUQOSkdw//0A2b z8J9n/w9cx8KuBLrBup41XC05kjQUB0OEjNbXrq9HDdgXMhFFbjUg2Q= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:40 2026 by rpki-client