This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer File: sIRyULOncSfffDx7je-MnZGdxLk.cer (raw, json) Hash identifier: suvE0VmrRiyDdoV0ft1NzRrhw3D0UmIZqgbXpPW7HSw= Subject key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84257817F1CB11726745CE142BC9C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60823 IP: 92.243.70.0/24 IP: 92.243.92.0/24 IP: 185.25.124.0/22 IP: 195.191.254.0/23 IP: 2a04:3180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:25:78:17:f1:cb:11:72:67:45:ce:14:2b:c9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:ed:31:7a:69:e3:d6:04:21:b1:69:79:ee: 24:07:a0:49:5a:38:c8:43:98:95:8d:25:6e:39:2a: 5a:64:6e:ab:e8:dc:33:97:f1:47:f0:17:34:d3:ac: 61:a6:3d:be:40:70:7f:e9:45:66:53:7a:8b:84:72: 9e:6b:ea:f0:28:22:77:8e:74:a1:df:5a:b3:b9:54: 1b:56:70:d4:f3:f3:20:c6:e9:96:9a:84:3d:61:52: 18:c7:19:c3:33:3e:cf:c8:fd:cf:5a:2f:3f:8d:69: 0d:f0:fd:7b:f2:17:3e:15:50:65:c0:87:5a:90:58: b4:28:82:41:75:c4:aa:2a:ab:38:12:8c:95:ee:8f: c6:6e:57:22:2f:86:84:cc:85:f1:ce:a7:f5:3f:38: d3:5a:8f:f0:a0:5d:0a:00:15:88:b9:a7:32:69:04: 35:06:bb:b3:d5:20:9c:b2:89:0d:e7:11:19:ec:a1: 5c:d5:51:f2:1d:f0:ce:e7:e8:d5:1e:30:f6:26:4c: ef:f9:91:96:f2:09:c7:7e:e5:a1:57:78:89:7b:10: 35:25:8b:eb:78:fe:37:87:c4:ca:c1:c5:42:13:0d: 2c:04:6a:8f:d8:69:95:cb:f4:3b:79:28:d9:62:b7: 24:37:d2:36:ea:1f:0a:82:df:5e:13:e0:a6:95:68: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.70.0/24 92.243.92.0/24 185.25.124.0/22 195.191.254.0/23 IPv6: 2a04:3180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60823 Signature Algorithm: sha256WithRSAEncryption 60:0d:0c:22:98:11:45:c3:c7:a8:8b:ee:e2:14:23:fe:49:e3: a8:84:c1:14:fa:1f:3e:c2:e2:ae:c2:85:3a:99:6e:37:ab:c5: e8:73:d0:27:05:6e:95:8e:dc:4a:92:ef:11:b3:f4:3f:71:b4: 7c:7b:55:d3:ca:ff:03:bb:aa:6c:64:18:c8:64:ee:e5:d7:0e: e1:8e:e7:f7:5c:df:5a:a8:a8:81:2e:45:0c:c2:64:92:4c:78: 99:36:52:81:8d:bf:82:79:40:ea:15:3c:f4:92:65:f5:d2:5a: cd:58:04:84:0c:c6:15:6e:f9:ea:dc:9f:07:b4:02:55:e7:cd: 56:5f:35:87:05:8f:39:4a:11:3c:1a:ff:6b:be:c4:5c:00:a4: d4:0c:c3:11:1b:31:5d:b4:7d:e8:b1:63:ef:c8:68:75:a3:af: 8a:d4:4f:17:52:0e:bc:40:e4:22:9b:59:1b:b3:8c:f2:03:b0: 3b:8f:29:f7:52:de:11:f3:ca:16:27:69:01:b9:84:89:83:6c: 9b:dd:a3:75:24:50:98:f9:6a:f2:21:15:3e:7b:fd:01:33:76: b8:e7:db:1f:6f:93:93:98:33:07:4b:68:91:38:08:bd:e6:2b: 79:e0:89:c2:5a:a8:00:cd:36:4c:de:de:c2:5f:ac:6c:cd:e6: 97:88:49:97 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/hCV4F/HLEXJnRc4UK8nGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDg0NzI1MGIzYTc3MTI3ZGY3YzNjN2I4ZGVmOGM5ZDkxOWRjNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVntMXpp49YEIbFpee4kB6BJWjjI Q5iVjSVuOSpaZG6r6Nwzl/FH8Bc006xhpj2+QHB/6UVmU3qLhHKea+rwKCJ3jnSh 31qzuVQbVnDU8/MgxumWmoQ9YVIYxxnDMz7PyP3PWi8/jWkN8P178hc+FVBlwIda kFi0KIJBdcSqKqs4EoyV7o/GblciL4aEzIXxzqf1PzjTWo/woF0KABWIuacyaQQ1 Bruz1SCcsokN5xEZ7KFc1VHyHfDO5+jVHjD2Jkzv+ZGW8gnHfuWhV3iJexA1JYvr eP43h8TKwcVCEw0sBGqP2GmVy/Q7eSjZYrckN9I26h8Kgt9eE+CmlWjm1wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLCEclCzp3En33w8e43vjJ2RncS5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzE3OGZm ZC1hOTljLTQzMzMtOGU5Yi1jYTM1NDY5NTUzY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMTc4ZmZk LWE5OWMtNDMzMy04ZTliLWNhMzU0Njk1NTNjZi8xL3NJUnlVTE9uY1NmZmZEeDdq ZS1NblpHZHhMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAXPNGAwQAXPNcAwQCuRl8AwQBw7/+MA0EAgAC MAcDBQMqBDGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtlzANBgkqhkiG9w0B AQsFAAOCAQEAYA0MIpgRRcPHqIvu4hQj/knjqITBFPofPsLirsKFOpluN6vF6HPQ JwVulY7cSpLvEbP0P3G0fHtV08r/A7uqbGQYyGTu5dcO4Y7n91zfWqiogS5FDMJk kkx4mTZSgY2/gnlA6hU89JJl9dJazVgEhAzGFW756tyfB7QCVefNVl81hwWPOUoR PBr/a77EXACk1AzDERsxXbR96LFj78hodaOvitRPF1IOvEDkIptZG7OM8gOwO48p 91LeEfPKFidpAbmEiYNsm92jdSRQmPlq8iEVPnv9ATN2uOfbH2+Tk5gzB0tokTgI veYreeCJwlqoAM02TN7ewl+sbM3ml4hJlw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:33 2026 by rpki-client