This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer File: sCQrfkMFPJE9Yr9duxaC_-a43-I.cer (raw, json) Hash identifier: LR8DqOrtM9ISSqMwrs0FZwvZdwbtnEzZM7gyZRvW79g= Subject key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AEAE010EC751560319B8B9ECB8C52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.214.192.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ea:e0:10:ec:75:15:60:31:9b:8b:9e:cb:8c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:37:f6:dd:8d:18:06:3f:15:32:37:f5:b9: ef:22:b9:56:16:ea:1f:e1:6b:a9:38:c4:f4:b0:a2: 87:b3:03:b9:bf:32:6d:38:4f:7f:b4:2b:79:bc:40: ba:be:9d:44:71:86:75:e3:d1:b0:f0:f0:28:7b:36: c8:a7:b8:da:1c:33:6c:4d:f7:6d:74:77:99:e3:ba: 19:28:94:e3:e7:a3:cd:d8:6b:d5:80:1a:f6:80:e8: 7d:6b:27:94:32:5b:3c:1a:bd:ea:81:e6:b2:6c:5d: d1:3f:b6:4d:29:9e:13:5e:e4:4f:2e:4e:9c:97:a2: ef:2b:99:d0:85:56:00:37:fc:48:1c:09:53:ab:5f: a1:ac:a2:be:11:1b:08:99:49:fe:43:07:b1:38:f2: 0c:97:74:71:a5:92:a3:e9:5a:ad:04:fe:ea:80:f1: 29:3e:ef:b1:7f:df:51:fc:a3:9d:37:f4:44:9a:11: 2f:ba:76:b7:69:95:02:ef:e7:6e:68:af:ae:41:86: 31:68:e3:b3:89:a0:10:4a:ed:e7:45:6f:8d:67:fc: d4:15:f9:b8:58:fc:1f:66:c1:82:9f:04:58:55:93: 6b:a5:ed:54:37:e6:28:d0:16:43:76:d7:62:56:44: 94:97:2c:ad:f7:7b:ff:eb:e5:f2:98:2e:7e:35:99: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.192.0/22 Signature Algorithm: sha256WithRSAEncryption 99:fc:f7:83:cb:ae:99:58:6f:a9:95:1c:ec:fe:1e:8e:4c:19: c3:c0:7b:04:3e:b1:0c:a6:f6:03:06:ed:7b:91:0d:4a:42:dd: 72:f5:fc:1f:5c:40:5c:60:36:0e:1b:03:24:8d:7c:c0:f3:f2: 42:05:c2:d6:fd:94:dc:6a:dc:40:e6:ee:c2:65:0e:24:bb:3d: 06:7a:9e:78:cc:58:48:43:4a:bb:79:44:97:1a:6d:e6:5d:d2: 0c:dd:c4:c9:fa:2b:87:c4:23:4d:1f:2f:e2:6e:65:d6:1b:40: 19:f2:cd:71:7a:c5:34:f4:ed:f7:59:e2:21:1b:27:08:26:e9: 18:69:2e:65:a5:b0:ff:6a:81:8b:f3:d4:b7:13:42:cc:71:0e: 61:bf:19:f8:fb:51:12:2e:ba:69:96:7c:5b:8a:42:71:e3:4e: 4b:83:23:d3:90:2d:dd:a2:b5:55:d1:bf:c0:ae:80:45:30:5e: 79:bc:d8:e5:33:77:ee:22:15:d3:fe:d8:15:67:9e:50:aa:79: 20:d7:f4:85:d8:d1:8f:a6:81:5b:08:e6:50:a6:06:5c:4d:f8: 13:fc:9c:0d:47:37:8b:79:f9:78:4c:82:69:34:f3:3b:cb:b5: 89:c4:55:f0:8e:3d:d5:a3:95:b0:2b:6f:da:a9:9d:02:a9:20: 61:f0:38:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9WurgEOx1FWAxm4uey4xSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDI0MmI3ZTQzMDUzYzkxM2Q2MmJmNWRiYjE2ODJmZmU2YjhkZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eE39t2NGAY/FTI39bnvIrlWFuof 4WupOMT0sKKHswO5vzJtOE9/tCt5vEC6vp1EcYZ149Gw8PAoezbIp7jaHDNsTfdt dHeZ47oZKJTj56PN2GvVgBr2gOh9ayeUMls8Gr3qgeaybF3RP7ZNKZ4TXuRPLk6c l6LvK5nQhVYAN/xIHAlTq1+hrKK+ERsImUn+QwexOPIMl3RxpZKj6VqtBP7qgPEp Pu+xf99R/KOdN/REmhEvuna3aZUC7+duaK+uQYYxaOOziaAQSu3nRW+NZ/zUFfm4 WPwfZsGCnwRYVZNrpe1UN+Yo0BZDdtdiVkSUlyyt93v/6+XymC5+NZlJxwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLAkK35DBTyRPWK/XbsWgv/muN/iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzYzOGYy OC0wMGQ1LTQ2M2ItYjE2Yy1mODQ1YmZjNDJmNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNjM4ZjI4 LTAwZDUtNDYzYi1iMTZjLWY4NDViZmM0MmY2ZC8xL3NDUXJma01GUEpFOVlyOWR1 eGFDXy1hNDMtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9bAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ/PeD y66ZWG+plRzs/h6OTBnDwHsEPrEMpvYDBu17kQ1KQt1y9fwfXEBcYDYOGwMkjXzA 8/JCBcLW/ZTcatxA5u7CZQ4kuz0Gep54zFhIQ0q7eUSXGm3mXdIM3cTJ+iuHxCNN Hy/ibmXWG0AZ8s1xesU09O33WeIhGycIJukYaS5lpbD/aoGL89S3E0LMcQ5hvxn4 +1ESLrpplnxbikJx405LgyPTkC3dorVV0b/AroBFMF55vNjlM3fuIhXT/tgVZ55Q qnkg1/SF2NGPpoFbCOZQpgZcTfgT/JwNRzeLefl4TIJpNPM7y7WJxFXwjj3Vo5Ww K2/aqZ0CqSBh8Dj4 -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:21 2026 by rpki-client