This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer File: sJLCwjUMWQpEg_1E8lCnf-6qspY.cer (raw, json) Hash identifier: 0mCpTN263Mefooi5jaTuB0FHHi9ks6jdjz8GfBp6LRY= Subject key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2988828866840BF8D2D980B82911D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44998 IP: 93.188.136.0/21 IP: 2a00:c840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:98:88:28:86:68:40:bf:8d:2d:98:0b:82:91:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b092c2c2350c590a4483fd44f250a77feeaab296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:4c:ce:7e:27:ef:ca:ef:d5:c8:af:ae:f1: 75:f8:69:a8:08:40:97:79:02:74:7d:7c:5a:b2:e9: 16:fb:6b:ac:8b:85:75:0b:7a:8f:d8:53:f7:92:ad: b0:a5:12:37:17:68:09:9f:9a:b6:ae:7e:73:42:ef: ac:ad:c3:98:4d:34:77:50:b2:d1:92:80:f6:b9:5a: a8:c2:61:40:2d:d1:54:60:68:03:ae:b6:e3:7b:62: 93:46:aa:29:2c:61:bd:0f:df:a6:46:99:c7:8e:e9: c4:65:e0:ec:f8:e6:4b:15:4f:df:b2:91:35:df:8c: f2:ec:d7:67:69:41:0a:f9:1a:9d:e8:5c:90:41:47: 5b:93:66:1e:c1:12:d9:03:87:fd:ee:bb:df:a4:25: 40:2a:8e:05:fa:df:3f:2d:21:36:cb:1b:63:76:a2: 70:84:ee:fb:56:c3:b4:1d:a6:fe:15:5a:86:8c:0a: aa:76:5b:07:06:e7:3c:8e:ed:f5:03:f7:71:bf:46: 14:3b:66:b3:b4:68:0d:25:ff:7d:f9:7b:56:8c:3e: a2:78:ed:7c:55:2a:fc:bc:12:54:ac:65:8a:b3:8f: 6c:a9:35:a8:26:d5:3f:89:8a:a5:06:d4:7e:b4:64: a0:84:0b:11:ce:ae:15:2b:72:5f:a5:c0:9c:33:3f: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.188.136.0/21 IPv6: 2a00:c840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44998 Signature Algorithm: sha256WithRSAEncryption 27:94:d2:b4:f2:67:3b:76:14:73:ee:9a:f8:e4:cf:dd:16:0f: c7:03:3c:d1:55:90:21:9d:52:8a:ab:1b:50:c0:ca:30:8f:18: 6a:43:71:7c:ec:38:bb:e2:c8:47:92:67:93:ac:3b:a5:06:d0: 7b:c3:99:35:00:56:fc:27:51:1b:33:d9:f5:19:42:8b:b6:b4: ba:8f:17:60:9d:57:84:3a:f5:a9:11:75:4a:af:74:d2:44:12: f9:44:fd:5f:6d:86:1b:6e:2d:9f:0c:db:24:8b:a0:1e:2e:59: a5:4b:e4:1b:72:5a:37:7e:25:10:5d:15:9f:4f:c7:06:69:d6: 10:dd:16:a4:3a:68:b1:db:7b:8f:28:80:7f:6f:08:d3:ef:f5: cb:6e:56:d6:85:af:16:28:15:97:d3:63:a6:dd:a1:7f:a3:cd: d8:93:a2:60:26:de:2b:55:f0:33:60:07:bc:fa:a8:50:3b:3e: e3:13:df:50:7c:39:0d:b9:f1:7b:6d:0f:c8:88:03:41:2e:d9: 31:a7:61:2f:82:a5:20:95:e4:de:ce:e9:fa:9f:c6:2d:84:39: 70:d8:94:48:fc:39:f4:2d:16:08:9e:63:23:d4:cb:17:02:01: 27:e3:10:d6:23:52:5a:9b:c1:a1:bc:ec:6e:9c:a5:ec:99:57: 98:9e:9e:70 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4opiIKIZoQL+NLZgLgpEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDkyYzJjMjM1MGM1OTBhNDQ4M2ZkNDRmMjUwYTc3ZmVlYWFiMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT1Mzn4n78rv1civrvF1+GmoCECX eQJ0fXxasukW+2usi4V1C3qP2FP3kq2wpRI3F2gJn5q2rn5zQu+srcOYTTR3ULLR koD2uVqowmFALdFUYGgDrrbje2KTRqopLGG9D9+mRpnHjunEZeDs+OZLFU/fspE1 34zy7NdnaUEK+Rqd6FyQQUdbk2YewRLZA4f97rvfpCVAKo4F+t8/LSE2yxtjdqJw hO77VsO0Hab+FVqGjAqqdlsHBuc8ju31A/dxv0YUO2aztGgNJf99+XtWjD6ieO18 VSr8vBJUrGWKs49sqTWoJtU/iYqlBtR+tGSghAsRzq4VK3JfpcCcMz9cYwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLCSwsI1DFkKRIP9RPJQp3/uqrKWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzUyYzZj OC03MTZhLTQ5NjktOWIzZS00OWViZWIzYWYwZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNTJjNmM4 LTcxNmEtNDk2OS05YjNlLTQ5ZWJlYjNhZjBlYS8xL3NKTEN3alVNV1FwRWdfMUU4 bENuZi02cXNwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDXbyIMA0EAgACMAcDBQAqAMhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCvxjANBgkqhkiG9w0BAQsFAAOCAQEAJ5TStPJnO3YU c+6a+OTP3RYPxwM80VWQIZ1SiqsbUMDKMI8YakNxfOw4u+LIR5Jnk6w7pQbQe8OZ NQBW/CdRGzPZ9RlCi7a0uo8XYJ1XhDr1qRF1Sq900kQS+UT9X22GG24tnwzbJIug Hi5ZpUvkG3JaN34lEF0Vn0/HBmnWEN0WpDposdt7jyiAf28I0+/1y25W1oWvFigV l9Njpt2hf6PN2JOiYCbeK1XwM2AHvPqoUDs+4xPfUHw5Dbnxe20PyIgDQS7ZMadh L4KlIJXk3s7p+p/GLYQ5cNiUSPw59C0WCJ5jI9TLFwIBJ+MQ1iNSWpvBobzsbpyl 7JlXmJ6ecA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:34 2026 by rpki-client