This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer File: sCJf0DWnzmSnyIveca61YPNIOXQ.cer (raw, json) Hash identifier: iHR/+gBuJF8SRjRe21Lc7xJ7Y6epXeSK0ftNYxnS87Q= Subject key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C23727A6C4BAF075BCFDBF8B37045D4C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 03 Feb 2026 12:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210528 AS: 210919 IP: 45.151.180.0/22 IP: 85.208.212.0/22 IP: 185.227.152.0/22 IP: 2a0f:3ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:72:7a:6c:4b:af:07:5b:cf:db:f8:b3:70:45:d4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 3 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:57:f6:f5:c3:df:06:15:24:93:0d:17:11: 53:8a:42:be:44:43:17:a0:cc:cd:51:80:48:16:ca: fc:31:f8:3d:29:06:8e:86:a7:a3:02:bd:a3:b8:cd: a7:28:a4:40:94:0d:40:61:69:d6:47:d2:c2:30:6f: ec:6d:a7:a3:67:85:39:48:df:78:95:0c:c6:08:c4: 09:20:61:6b:d0:14:3e:9c:26:cd:c9:e0:07:89:8a: a2:41:fd:18:1a:90:6c:6b:78:d9:8b:0f:9c:5d:db: f6:24:49:bc:80:6a:77:ff:4f:37:3c:41:e0:9d:3d: f5:cc:fc:d1:df:62:6f:99:6b:a4:d7:01:55:fb:48: b9:e2:14:51:1d:34:08:dc:37:7d:bd:70:79:da:58: ab:3e:9e:77:c4:d9:cb:80:50:4b:a1:cc:b7:ac:87: f0:6c:79:ef:d7:4b:52:f6:e0:69:c1:03:71:ef:cf: 9d:9c:b0:4a:41:27:49:e5:e8:f9:54:82:66:34:1d: b4:92:85:1f:de:13:b0:dd:eb:0a:d6:7f:03:5c:04: c3:1d:b1:10:9b:05:ed:25:51:46:f7:cf:34:46:48: e5:ba:65:d1:33:68:14:d3:7b:49:34:5f:43:84:59: 75:bf:af:00:f0:30:c9:93:e4:3e:9d:3e:90:39:a9: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.180.0/22 85.208.212.0/22 185.227.152.0/22 IPv6: 2a0f:3ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210528 210919 Signature Algorithm: sha256WithRSAEncryption 01:c0:87:2d:f2:f0:10:e9:a2:20:53:79:7d:31:bc:14:3e:e1: 4b:6e:e1:7b:83:a4:5f:5f:7b:a6:df:d2:f2:96:3a:62:54:6c: c5:e5:3a:c9:8d:6f:ae:e4:37:a1:c8:fe:f7:67:11:c0:a0:fc: 3f:79:e8:87:a0:e8:18:ca:cc:59:2c:e2:36:88:d3:ad:62:3e: ee:5f:d7:ff:11:fa:9c:ae:87:c1:1a:1a:bc:0e:21:25:ce:aa: 55:69:52:2a:75:7d:ed:7f:3f:5a:3f:c9:c1:ed:d0:37:1d:45: 6f:7e:8f:f8:43:57:24:c2:d4:92:ea:40:0e:2e:52:e7:3a:e3: ff:1c:90:5f:5f:1c:e4:e1:a4:87:90:53:20:c1:91:57:cc:89: 41:04:8a:56:d5:ba:67:10:db:d9:6c:00:9f:1f:db:34:53:4c: c0:65:77:d5:98:b8:e9:30:29:37:66:04:a2:e9:31:3a:45:4e: 50:07:ed:c5:8f:52:75:88:ba:fe:5a:fd:d2:cf:d8:2f:84:fe: d6:e7:6d:de:ae:de:cc:8d:43:77:b8:8b:a4:8e:53:5c:59:52: f6:35:82:ba:cd:d1:04:da:b4:2f:de:4f:cb:29:18:f0:51:11: 10:b0:cf:61:e0:81:64:79:0b:f9:fe:2b:ae:42:37:54:4f:d1: 21:a5:0f:36 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZwjcnpsS68HW8/b+LNwRdTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAzMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDIyNWZkMDM1YTdjZTY0YTdjODhiZGU3MWFlYjU2MGYzNDgzOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gFX9vXD3wYVJJMNFxFTikK+REMX oMzNUYBIFsr8Mfg9KQaOhqejAr2juM2nKKRAlA1AYWnWR9LCMG/sbaejZ4U5SN94 lQzGCMQJIGFr0BQ+nCbNyeAHiYqiQf0YGpBsa3jZiw+cXdv2JEm8gGp3/083PEHg nT31zPzR32JvmWuk1wFV+0i54hRRHTQI3Dd9vXB52lirPp53xNnLgFBLocy3rIfw bHnv10tS9uBpwQNx78+dnLBKQSdJ5ej5VIJmNB20koUf3hOw3esK1n8DXATDHbEQ mwXtJVFG9880RkjlumXRM2gU03tJNF9DhFl1v68A8DDJk+Q+nT6QOan+3QIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLAiX9A1p85kp8iL3nGutWDzSDl0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2M0NjI3 OC1lMWQwLTRkYzctOThjNy00NDNlNGJhYjdkZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvYzQ2Mjc4 LWUxZDAtNGRjNy05OGM3LTQ0M2U0YmFiN2RlNi8xL3NDSmYwRFduem1TbnlJdmVj YTYxWVBOSU9YUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLZe0AwQCVdDUAwQCueOYMA0EAgACMAcDBQMq Dz7AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwM2YAIDAzfnMA0GCSqGSIb3DQEB CwUAA4IBAQABwIct8vAQ6aIgU3l9MbwUPuFLbuF7g6RfX3um39LyljpiVGzF5TrJ jW+u5DehyP73ZxHAoPw/eeiHoOgYysxZLOI2iNOtYj7uX9f/EfqcrofBGhq8DiEl zqpVaVIqdX3tfz9aP8nB7dA3HUVvfo/4Q1ckwtSS6kAOLlLnOuP/HJBfXxzk4aSH kFMgwZFXzIlBBIpW1bpnENvZbACfH9s0U0zAZXfVmLjpMCk3ZgSi6TE6RU5QB+3F j1J1iLr+Wv3Sz9gvhP7W523ert7MjUN3uIukjlNcWVL2NYK6zdEE2rQv3k/LKRjw UREQsM9h4IFkeQv5/iuuQjdUT9EhpQ82 -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:12 2026 by rpki-client