This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer File: sDQCUfGCY0f06WRfaCTTuT9H5d4.cer (raw, json) Hash identifier: 6zUACAfz1zwk152HHDfhZi6fjVnn6MDuWb2VftJI2Tc= Subject key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A0521C5D251FBEC1FDB2805F34C00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203930 IP: 89.207.152.0/24 IP: 2a13:5b00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:05:21:c5:d2:51:fb:ec:1f:db:28:05:f3:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0340251f1826347f4e9645f6824d3b93f47e5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:f4:5a:ff:01:77:52:af:d9:6d:5d:54:c2: 86:b4:d3:d1:f9:72:cf:7d:a4:60:60:9b:71:b6:0c: 42:c4:75:8b:23:52:95:9c:ea:d8:e2:30:9f:7a:34: f5:a7:33:97:d5:78:87:a2:9d:e8:00:d0:60:ba:53: 3b:8d:86:e2:2f:ad:4c:4e:0f:79:bf:cf:60:31:be: d6:03:e3:b7:96:56:93:17:bd:80:bb:5a:2d:18:f5: ca:57:dd:29:88:39:cc:a0:ff:4a:ff:33:e7:5e:ea: 85:a9:c8:b1:9f:34:e9:d1:9a:8a:92:bd:1a:f3:72: 1f:c4:05:4a:fc:92:25:5b:db:ef:85:17:77:25:ff: a2:0e:2d:c8:13:17:03:16:b6:34:75:e4:dc:48:ff: 01:3d:bf:21:f4:66:d1:0c:dc:dd:ba:fc:9b:e5:65: c4:74:18:36:6c:d8:cc:89:91:72:53:b1:45:a7:d9: 9a:52:6f:dc:0e:84:32:4a:6e:7b:03:99:15:26:fb: 08:92:ae:aa:98:1e:34:c7:2f:ec:67:8a:92:57:6e: 18:d9:22:bd:11:fb:84:4a:fd:ee:34:7c:92:b3:ba: 94:26:74:ab:4e:d8:4e:b2:b6:71:43:2b:ff:67:36: d9:5b:91:f9:76:99:67:35:7d:14:11:24:ff:eb:e1: a4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.152.0/24 IPv6: 2a13:5b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203930 Signature Algorithm: sha256WithRSAEncryption 32:e5:77:65:c1:95:6e:0c:b0:09:ce:9c:94:38:11:4e:a4:f7: 12:6e:e9:be:bb:cb:47:a5:a7:e4:cc:97:d1:f6:4f:04:21:7e: c9:35:81:ad:78:95:ab:0e:0b:91:de:90:75:fb:99:dc:07:bf: 2c:56:16:b0:86:c7:c8:3c:33:55:54:d6:7c:9c:e9:3a:d0:db: 07:50:b9:3f:39:2c:e0:91:05:c4:aa:87:25:41:88:8b:ea:3a: 6c:08:83:59:4f:d1:0f:d2:5b:2e:00:7d:54:0c:95:48:e2:04: c0:3e:d7:de:53:3d:38:1b:7d:c3:1a:d4:2a:49:c8:4f:24:63: 37:13:b2:f0:e5:35:e4:96:71:ca:57:92:2e:69:d9:be:77:2f: 1f:d0:db:fd:af:84:11:bb:a5:af:22:aa:90:75:ed:61:68:32: ba:67:09:ec:2d:f3:e4:47:9c:80:bd:58:56:7d:60:d3:74:ed: 76:7b:63:7b:0c:d5:cf:ce:5e:26:45:d4:e5:e7:13:15:d6:97: 24:26:8f:70:1e:34:97:8a:27:92:fe:74:29:c8:2d:a3:d9:79: c2:7e:db:eb:62:a1:14:5e:57:72:88:1a:bb:7c:b3:35:96:a2: f2:e6:2b:f8:71:72:85:03:b5:ee:a8:a5:f3:9b:7c:9a:9f:bd: e9:e9:20:fb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WgUhxdJR++wf2ygF80wAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDM0MDI1MWYxODI2MzQ3ZjRlOTY0NWY2ODI0ZDNiOTNmNDdlNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfH0Wv8Bd1Kv2W1dVMKGtNPR+XLP faRgYJtxtgxCxHWLI1KVnOrY4jCfejT1pzOX1XiHop3oANBgulM7jYbiL61MTg95 v89gMb7WA+O3llaTF72Au1otGPXKV90piDnMoP9K/zPnXuqFqcixnzTp0ZqKkr0a 83IfxAVK/JIlW9vvhRd3Jf+iDi3IExcDFrY0deTcSP8BPb8h9GbRDNzduvyb5WXE dBg2bNjMiZFyU7FFp9maUm/cDoQySm57A5kVJvsIkq6qmB40xy/sZ4qSV24Y2SK9 EfuESv3uNHySs7qUJnSrTthOsrZxQyv/ZzbZW5H5dplnNX0UEST/6+GkQwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLA0AlHxgmNH9OlkX2gk07k/R+XeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2Y1MjEw ZC0wNTkwLTQzYTMtOWVlZC02YTgzNTYzYjY1NWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZjUyMTBk LTA1OTAtNDNhMy05ZWVkLTZhODM1NjNiNjU1Yi8xL3NEUUNVZkdDWTBmMDZXUmZh Q1RUdVQ5SDVkNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAWc+YMA0EAgACMAcDBQAqE1sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcmjANBgkqhkiG9w0BAQsFAAOCAQEAMuV3ZcGVbgyw Cc6clDgRTqT3Em7pvrvLR6Wn5MyX0fZPBCF+yTWBrXiVqw4Lkd6QdfuZ3Ae/LFYW sIbHyDwzVVTWfJzpOtDbB1C5Pzks4JEFxKqHJUGIi+o6bAiDWU/RD9JbLgB9VAyV SOIEwD7X3lM9OBt9wxrUKknITyRjNxOy8OU15JZxyleSLmnZvncvH9Db/a+EEbul ryKqkHXtYWgyumcJ7C3z5EecgL1YVn1g03TtdntjewzVz85eJkXU5ecTFdaXJCaP cB40l4onkv50Kcgto9l5wn7b62KhFF5Xcogau3yzNZai8uYr+HFyhQO17qil85t8 mp+96ekg+w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:42 2026 by rpki-client