This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer File: sNnizl5psqH543QB08UFXF09584.cer (raw, json) Hash identifier: 59GU4d8iWJzaUIhC8FZ99QeGxSYZ8viShtmzmbTvjWg= Subject key identifier: B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C2FCFAC8259E0DECAD24824F6FAA2B270 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 05 Feb 2026 21:57:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213969 IP: 85.209.40.0/24 IP: 2a01:fbc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:cf:ac:82:59:e0:de:ca:d2:48:24:f6:fa:a2:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 5 21:57:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0d9e2ce5e69b2a1f9e37401d3c5055c5d3de7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:3e:1b:6f:c2:3a:a0:72:82:c9:21:69:04: 5a:c7:4b:f3:21:e1:ec:fa:6f:b4:c7:16:52:79:ac: d0:6a:f2:5c:dd:9f:a1:61:9f:5f:8c:dd:0e:17:e3: 5c:36:d7:54:08:f6:4d:91:be:bc:50:5f:6c:dd:e9: 65:c7:5f:bb:ee:b0:61:55:d2:59:22:9f:aa:58:35: 7e:ea:eb:6b:39:27:f9:73:02:1f:66:4c:df:35:5a: 93:04:c2:d4:24:46:e9:54:7e:07:75:9d:e1:9a:2f: 17:fe:53:6b:de:d0:35:8a:0b:d9:16:cd:05:5c:f9: 27:4c:68:d1:98:ad:3d:b5:64:db:fd:33:01:3d:d3: 4d:42:4a:af:bb:b8:01:3b:21:c9:64:db:4a:a7:7d: fb:14:d3:6b:65:4f:17:2b:88:a6:2c:a5:e3:dc:34: cf:2c:d5:48:11:a1:06:09:a0:80:c5:c3:3e:2c:3e: f8:70:dc:2b:6e:d3:bb:2d:ee:79:7b:14:fd:65:49: 55:65:35:ee:76:77:04:78:aa:dd:73:93:13:35:83: aa:58:e8:6f:6d:e9:48:13:ab:a0:e1:51:48:b9:61: 99:9f:2f:be:d5:2a:51:56:92:f0:7d:5d:04:e8:a7: f5:39:95:4d:4d:a6:8d:5c:28:e6:fb:d7:c0:71:31: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.40.0/24 IPv6: 2a01:fbc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213969 Signature Algorithm: sha256WithRSAEncryption 51:e6:18:84:1c:62:d7:13:43:e1:85:c1:88:cd:c7:cc:a8:80: 2c:2b:19:bb:b0:5d:02:cc:70:ef:dd:5e:a9:f3:f0:f1:84:28: 4f:b4:27:ce:25:8b:f9:98:b0:a8:29:31:e5:56:33:55:56:97: e5:85:3d:5f:58:51:5f:40:77:e2:2f:2a:03:1c:4d:2b:94:9f: 5b:36:ff:ae:3e:e5:bb:b4:01:bb:8c:42:21:e5:b0:3c:11:e9: 70:e6:9b:b2:a0:76:60:1d:0d:b1:19:24:ce:2e:04:67:eb:32: a5:36:15:ca:36:ab:11:ee:a5:5b:38:03:59:99:0c:ae:ec:05: be:1e:1f:cc:4b:bd:bd:ea:6b:4c:0d:56:79:1a:4b:d6:06:e0: 0b:99:dc:6a:43:d1:6a:97:df:0c:a7:a2:f2:77:31:1c:17:3d: 44:7f:35:6c:0b:26:ad:f2:96:52:0a:3d:8e:7b:e3:cd:c1:9e: b7:db:74:de:2e:21:4b:b7:57:57:aa:a3:f1:35:ce:e3:1e:56: 13:ef:de:18:48:07:a2:6c:11:bd:d4:e5:b4:ce:ea:c0:f6:62: 80:4e:e9:9c:2b:4f:3a:67:06:25:42:92:be:d4:3d:3e:79:f3: 6e:75:2e:ad:8a:4b:50:f8:10:31:b2:f6:f9:be:f2:c4:98:55: e9:19:ba:9b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwvz6yCWeDeytJIJPb6orJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA1MjE1NzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGQ5ZTJjZTVlNjliMmExZjllMzc0MDFkM2M1MDU1YzVkM2RlN2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j0+G2/COqBygskhaQRax0vzIeHs +m+0xxZSeazQavJc3Z+hYZ9fjN0OF+NcNtdUCPZNkb68UF9s3ellx1+77rBhVdJZ Ip+qWDV+6utrOSf5cwIfZkzfNVqTBMLUJEbpVH4HdZ3hmi8X/lNr3tA1igvZFs0F XPknTGjRmK09tWTb/TMBPdNNQkqvu7gBOyHJZNtKp337FNNrZU8XK4imLKXj3DTP LNVIEaEGCaCAxcM+LD74cNwrbtO7Le55exT9ZUlVZTXudncEeKrdc5MTNYOqWOhv belIE6ug4VFIuWGZny++1SpRVpLwfV0E6Kf1OZVNTaaNXCjm+9fAcTHj1wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLDZ4s5eabKh+eN0AdPFBVxdPefOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzBmNWQ0 Ni0yOTUwLTQxMzUtODRmMy0yZTk2NGU5N2ZmODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMGY1ZDQ2 LTI5NTAtNDEzNS04NGYzLTJlOTY0ZTk3ZmY4OC8xL3NObml6bDVwc3FINTQzUUIw OFVGWEYwOTU4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAVdEoMA0EAgACMAcDBQMqAfvAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwND0TANBgkqhkiG9w0BAQsFAAOCAQEAUeYYhBxi1xND 4YXBiM3HzKiALCsZu7BdAsxw791eqfPw8YQoT7QnziWL+ZiwqCkx5VYzVVaX5YU9 X1hRX0B34i8qAxxNK5SfWzb/rj7lu7QBu4xCIeWwPBHpcOabsqB2YB0NsRkkzi4E Z+sypTYVyjarEe6lWzgDWZkMruwFvh4fzEu9veprTA1WeRpL1gbgC5ncakPRapff DKei8ncxHBc9RH81bAsmrfKWUgo9jnvjzcGet9t03i4hS7dXV6qj8TXO4x5WE+/e GEgHomwRvdTltM7qwPZigE7pnCtPOmcGJUKSvtQ9PnnzbnUurYpLUPgQMbL2+b7y xJhV6Rm6mw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:32 2026 by rpki-client