This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer (raw, json) Hash identifier: Hb6hLJ6naqH+ojgbd7MPVPoxKbtRz0Yt0W5aV6ZhecU= Subject key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8EDDDA91A9F14E6299106327B75D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214169 IP: 185.132.68.0/22 IP: 185.214.0.0/22 IP: 2a0b:91c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ed:dd:a9:1a:9f:14:e6:29:91:06:32:7b:75:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b025bac132e479a28df33573dd1096a9b7b78d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:7c:77:2e:bd:82:e1:b5:35:83:24:2c:5c: df:30:03:7d:62:4c:1b:62:89:36:8e:6c:51:bc:60: 38:47:28:d7:29:14:ef:5e:54:d7:8e:fa:e8:b3:7d: 3b:b2:64:a1:05:1f:5a:fd:3d:77:8d:ec:15:23:7e: 39:88:7f:b1:5e:13:64:e2:f3:3c:bd:e2:44:8b:00: 07:37:a2:8f:47:d5:ef:5e:60:38:20:19:8f:c4:bf: 92:f2:a8:4b:75:cb:8c:8e:f7:74:34:bb:24:e1:01: 0a:06:6b:96:fb:7c:15:2e:3b:cd:df:c6:d1:e0:4c: 58:68:8b:6f:30:fd:32:fd:a8:fb:d7:10:b5:07:78: 6c:d7:83:d6:b2:68:10:ab:71:ce:bd:91:34:75:4a: 34:4c:45:91:cf:2d:20:c4:1c:8a:f1:26:02:9e:f7: 89:45:58:b9:6a:af:b6:82:4a:99:8a:e9:79:cc:1c: 10:a6:7f:fa:ee:1f:c7:fa:aa:e3:bc:f3:bf:2f:fd: 58:bc:ef:ba:31:55:6e:37:03:e9:9f:28:e6:3a:4f: e8:88:cc:92:93:e1:8c:ca:b6:75:81:a5:61:64:bf: ad:db:46:32:7b:c1:62:00:b1:7e:bd:fd:bf:a8:ae: 47:05:8c:26:75:9a:99:50:65:0f:5c:a9:6c:40:61: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.68.0/22 185.214.0.0/22 IPv6: 2a0b:91c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214169 Signature Algorithm: sha256WithRSAEncryption 66:c9:4d:77:21:1a:95:30:73:1a:6b:7d:c6:a9:88:24:f3:86: a8:85:ea:46:3e:1d:52:5e:a9:31:08:d0:35:65:25:cb:36:e8: 1a:42:1c:d7:f4:b4:ef:f3:ec:f9:68:17:cd:c9:cb:c3:89:8d: a0:f8:90:1e:91:eb:57:3c:90:99:78:4a:fa:5e:74:bb:83:e5: 22:75:bd:d8:d1:cd:b4:72:d9:97:d1:2e:ab:ce:03:24:de:17: 54:bd:1f:e2:c3:4f:cc:d8:ff:08:a9:05:c1:d2:18:ff:a6:b4: df:be:08:11:cc:47:c3:5b:bf:b6:5d:0a:cb:cd:9b:4c:4d:5f: be:aa:1b:26:8b:01:bd:52:76:0a:66:1d:02:ca:f1:6f:3d:dc: 0e:91:02:ef:9d:54:79:f3:b0:8b:86:f1:96:60:19:f2:1b:63: f1:d4:18:1b:2d:0a:d4:09:82:a5:3a:0f:a2:0f:5e:fe:8b:48: 75:b6:bf:52:4d:87:9d:68:71:f7:86:1c:4d:f6:55:6c:83:ca: e5:a2:db:e2:45:cb:80:19:3d:6e:57:5a:de:7f:88:26:81:24: 6b:18:c2:60:c6:35:e4:12:c0:98:5c:99:4f:14:b7:f3:95:63: 7c:15:42:a0:10:f3:5e:fc:c3:4e:01:2d:57:cb:d5:05:7e:f9: 5e:45:15:d8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yO3dqRqfFOYpkQYye3XWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDI1YmFjMTMyZTQ3OWEyOGRmMzM1NzNkZDEwOTZhOWI3Yjc4ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXx8dy69guG1NYMkLFzfMAN9Ykwb Yok2jmxRvGA4RyjXKRTvXlTXjvros307smShBR9a/T13jewVI345iH+xXhNk4vM8 veJEiwAHN6KPR9XvXmA4IBmPxL+S8qhLdcuMjvd0NLsk4QEKBmuW+3wVLjvN38bR 4ExYaItvMP0y/aj71xC1B3hs14PWsmgQq3HOvZE0dUo0TEWRzy0gxByK8SYCnveJ RVi5aq+2gkqZiul5zBwQpn/67h/H+qrjvPO/L/1YvO+6MVVuNwPpnyjmOk/oiMyS k+GMyrZ1gaVhZL+t20Yye8FiALF+vf2/qK5HBYwmdZqZUGUPXKlsQGFTNQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLAlusEy5HmijfM1c90Qlqm3t40yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2QyZDlm My04ZDU2LTQ4MWMtOGJjNC03YzhmM2ZlY2RiMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvZDJkOWYz LThkNTYtNDgxYy04YmM0LTdjOGYzZmVjZGIyYy8xL3NDVzZ3VExrZWFLTjh6Vnoz UkNXcWJlM2pUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuYREAwQCudYAMA0EAgACMAcDBQMqC5HAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNEmTANBgkqhkiG9w0BAQsFAAOCAQEAZslN dyEalTBzGmt9xqmIJPOGqIXqRj4dUl6pMQjQNWUlyzboGkIc1/S07/Ps+WgXzcnL w4mNoPiQHpHrVzyQmXhK+l50u4PlInW92NHNtHLZl9Euq84DJN4XVL0f4sNPzNj/ CKkFwdIY/6a0374IEcxHw1u/tl0Ky82bTE1fvqobJosBvVJ2CmYdAsrxbz3cDpEC 751UefOwi4bxlmAZ8htj8dQYGy0K1AmCpToPog9e/otIdba/Uk2HnWhx94YcTfZV bIPK5aLb4kXLgBk9blda3n+IJoEkaxjCYMY15BLAmFyZTxS385VjfBVCoBDzXvzD TgEtV8vVBX75XkUV2A== -----END CERTIFICATE-----Generated at Mon Jan 26 21:07:48 2026 by rpki-client