This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer (raw, json) Hash identifier: LPZxBjx1mXi1rtucrtulnbPOu2I6Os/qwNlw6bveGPg= Subject key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C68A84212CE3BC33496B3862C14EBE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39263 IP: 80.94.0.0/20 IP: 93.115.212.0/22 IP: 185.79.144.0/22 IP: 188.247.172.0/22 IP: 2a00:a840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8a:84:21:2c:e3:bc:33:49:6b:38:62:c1:4e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:df:7a:55:2b:ba:2b:7a:d4:a4:83:5b:76: 18:a4:c9:12:33:c5:77:cb:31:49:13:6b:ec:ed:12: 4c:f4:27:16:cd:55:b2:fa:91:48:16:12:07:31:ec: c5:70:27:21:09:a0:2a:b6:65:a2:ec:8d:ea:cb:e1: 12:63:39:11:df:9a:8d:c6:c3:50:8b:dd:df:03:5b: 0c:bf:f4:b9:9c:0a:4b:a8:6d:22:d4:27:4f:ef:8f: e2:b2:7e:90:7c:6a:2d:1b:12:28:a6:c2:77:6e:b6: 00:3f:f3:fb:b8:18:49:05:cc:cd:ec:b3:4e:5d:6b: cc:53:06:fa:2a:11:e2:41:cf:ca:8e:29:ad:d0:18: fc:72:ac:1f:fb:5c:6c:a2:55:a6:5b:71:f1:f3:74: d5:d1:9e:69:ae:d0:71:83:54:6a:7f:fb:e1:99:94: 6a:fe:b0:3c:16:7d:26:ba:b3:05:80:80:2a:c4:9c: aa:8d:8a:ff:bd:a9:ab:ba:94:98:91:cd:df:90:e0: 5a:7e:a1:f8:11:80:81:07:2f:06:e7:b7:6d:ec:c5: 04:df:4d:3a:e6:58:89:a4:73:01:66:72:15:db:dc: 26:5b:bf:a8:0f:22:82:12:8b:21:2e:6d:4c:5c:2a: c0:2c:52:4d:e6:1d:3b:4d:cc:c6:85:cf:da:33:d7: d9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.94.0.0/20 93.115.212.0/22 185.79.144.0/22 188.247.172.0/22 IPv6: 2a00:a840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39263 Signature Algorithm: sha256WithRSAEncryption 49:4c:fa:a3:4f:d4:d2:9d:fb:82:9b:36:db:d4:82:48:7c:38: fc:50:b0:ef:73:79:ec:ce:c6:25:c8:85:92:d5:6b:73:c3:77: c4:ab:e7:de:26:bf:93:53:fa:79:16:ff:3c:9a:ab:d7:24:8b: e9:35:11:09:d5:62:b2:ec:61:11:8a:9d:50:bb:43:bd:90:61: 98:4b:81:c9:ea:48:58:14:22:83:3d:1c:23:8e:d5:c2:b8:13: 45:de:a7:13:b6:44:3f:7e:5f:a0:43:50:9b:9d:fb:ff:ee:01: 11:77:1d:76:b2:c1:84:e6:0a:57:ba:30:c5:15:79:b9:47:47: 77:42:da:96:54:54:52:ec:95:53:f0:e7:2c:97:dc:95:27:46: 4a:29:c9:04:de:1a:43:0b:18:29:c6:07:10:3b:32:e5:e4:3a: 9a:f2:39:11:3e:5c:35:95:30:16:b7:f6:df:85:cc:58:d3:5a: c0:2f:16:67:c3:1a:9b:e4:79:e7:93:df:13:de:bc:36:93:7b: df:31:63:fb:54:43:38:a1:48:e5:99:26:94:ea:3e:b8:21:ca: 84:79:cf:d0:1d:8b:a6:61:33:0e:08:2f:cf:1d:28:21:79:8d: 16:a9:92:ac:52:45:63:ca:07:04:be:24:e9:55:0e:22:9a:dc: 5c:15:f0:a9 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3xoqEISzjvDNJazhiwU6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGFmZDBjYjk3NzVmZjQ3OGYxODVmOGY5ODBkNWIxZDkyZDRiZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q7felUruit61KSDW3YYpMkSM8V3 yzFJE2vs7RJM9CcWzVWy+pFIFhIHMezFcCchCaAqtmWi7I3qy+ESYzkR35qNxsNQ i93fA1sMv/S5nApLqG0i1CdP74/isn6QfGotGxIopsJ3brYAP/P7uBhJBczN7LNO XWvMUwb6KhHiQc/Kjimt0Bj8cqwf+1xsolWmW3Hx83TV0Z5prtBxg1Rqf/vhmZRq /rA8Fn0murMFgIAqxJyqjYr/vamrupSYkc3fkOBafqH4EYCBBy8G57dt7MUE3006 5liJpHMBZnIV29wmW7+oDyKCEoshLm1MXCrALFJN5h07TczGhc/aM9fZrQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzgwMGZm ZC1jNTNiLTQ2NDYtYjI2ZS02ZWY1YzQ3MzVlOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvODAwZmZk LWM1M2ItNDY0Ni1iMjZlLTZlZjVjNDczNWU4YS8xL3NLX1F5NWQxXzBlUEdGLVBt QTFiSFpMVXZrOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEUF4AAwQCXXPUAwQCuU+QAwQCvPesMA0EAgAC MAcDBQAqAKhAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCZXzANBgkqhkiG9w0B AQsFAAOCAQEASUz6o0/U0p37gps229SCSHw4/FCw73N57M7GJciFktVrc8N3xKvn 3ia/k1P6eRb/PJqr1ySL6TURCdVisuxhEYqdULtDvZBhmEuByepIWBQigz0cI47V wrgTRd6nE7ZEP35foENQm537/+4BEXcddrLBhOYKV7owxRV5uUdHd0LallRUUuyV U/DnLJfclSdGSinJBN4aQwsYKcYHEDsy5eQ6mvI5ET5cNZUwFrf234XMWNNawC8W Z8Mam+R555PfE968NpN73zFj+1RDOKFI5ZkmlOo+uCHKhHnP0B2LpmEzDggvzx0o IXmNFqmSrFJFY8oHBL4k6VUOIprcXBXwqQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:17:18 2026 by rpki-client