This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sP1zG26feISuJu_kOT3qFmfvtRg.cer File: sP1zG26feISuJu_kOT3qFmfvtRg.cer (raw, json) Hash identifier: lNt/U6GP/pgruOi7cRvVOaH97V4aGz3ZpNyzQeXJlu0= Subject key identifier: B0:FD:73:1B:6E:9F:78:84:AE:26:EF:E4:39:3D:EA:16:67:EF:B5:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B85BCABAB5375BE9A3C7CB3CDE17DDA8D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 03 Jan 2026 21:21:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215136 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:85:bc:ab:ab:53:75:be:9a:3c:7c:b3:cd:e1:7d:da:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 3 21:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0fd731b6e9f7884ae26efe4393dea1667efb518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:1c:92:b1:3f:f2:a8:b1:4f:47:10:a9:4d: dd:92:92:f5:31:d3:0c:33:a4:e1:92:8d:ab:7c:73: 36:9a:66:83:5c:bb:91:2c:80:d3:39:4a:55:14:9f: b6:f6:8b:a6:5e:ed:e3:e6:23:4e:da:a4:1b:29:59: 21:d0:81:10:80:6f:b7:69:8c:6c:7a:e5:99:a2:ff: 36:99:5d:9b:da:56:df:c4:d9:b4:90:1d:1f:58:ed: 1f:74:96:3d:af:c5:31:1a:f3:b0:d6:bb:38:b4:96: 1f:54:e1:07:39:47:6c:ac:29:c0:49:71:cd:2a:e2: 91:9a:ca:27:4a:46:8c:47:1d:f5:96:b3:18:76:ba: 99:27:a3:31:d1:2f:68:28:30:9e:4c:fa:4a:bb:c6: ff:c1:2c:50:dc:09:6b:63:b2:1b:ad:66:d9:41:14: b6:da:89:94:d7:eb:3b:41:bf:42:2c:9d:29:89:16: 91:e5:99:c0:af:16:21:02:2b:df:56:ff:25:7f:7f: 1d:fe:be:40:9b:dc:16:01:68:01:67:34:c4:f6:36: 11:24:52:df:ce:11:d3:ab:e1:5b:a8:c1:ce:a3:e0: 7c:46:ff:04:52:ac:96:19:38:c0:28:5c:92:21:34: bc:3a:43:ce:5b:1b:0e:1d:76:5d:9e:d3:66:97:4e: ee:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:73:1B:6E:9F:78:84:AE:26:EF:E4:39:3D:EA:16:67:EF:B5:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215136 Signature Algorithm: sha256WithRSAEncryption 91:c9:19:ce:ff:51:9d:6b:b3:3e:fa:d0:6d:d4:f0:b5:0f:78: 1a:1a:d9:c9:f4:03:8d:45:c8:52:66:2f:7e:38:44:0a:6b:d7: 7d:61:ce:5c:49:f0:32:71:f6:9a:30:7a:ff:05:d1:20:ac:11: aa:be:27:1a:4d:b9:79:4b:e3:8a:d1:4f:36:3a:14:01:36:33: 28:c1:39:92:72:28:2e:8e:98:08:e1:1d:f9:d2:b5:8c:5d:87: 4c:dd:b1:df:72:a6:15:d5:18:0e:aa:f1:fc:a7:44:7b:20:3f: f8:71:30:b1:1b:14:37:66:97:31:73:a5:8b:fb:62:0b:c2:e4: 07:28:bc:bf:01:b8:80:93:d0:ae:2b:33:fd:02:4d:3b:b5:14: 30:a1:ba:8e:da:f2:9a:f1:53:0d:6e:f0:46:5d:b4:d9:4f:1a: d2:e4:ea:8f:fe:6e:25:af:1a:8c:d7:cd:ad:78:1b:ca:95:01: fd:86:d7:6a:7b:c6:55:84:e2:9d:ee:7f:8f:77:d5:b5:47:e1: 8a:4a:24:66:5f:48:95:2e:9b:45:52:04:f3:37:03:d6:00:47: e4:71:6a:ac:05:55:ec:1e:10:d0:67:05:7b:7a:86:76:45:ff: bb:18:1e:b7:7a:01:4b:b5:14:eb:00:c8:e8:a7:4b:e1:32:e8: 66:d6:7c:f2 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZuFvKurU3W+mjx8s83hfdqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAzMjEyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGZkNzMxYjZlOWY3ODg0YWUyNmVmZTQzOTNkZWExNjY3ZWZiNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IAckrE/8qixT0cQqU3dkpL1MdMM M6Thko2rfHM2mmaDXLuRLIDTOUpVFJ+29oumXu3j5iNO2qQbKVkh0IEQgG+3aYxs euWZov82mV2b2lbfxNm0kB0fWO0fdJY9r8UxGvOw1rs4tJYfVOEHOUdsrCnASXHN KuKRmsonSkaMRx31lrMYdrqZJ6Mx0S9oKDCeTPpKu8b/wSxQ3AlrY7IbrWbZQRS2 2omU1+s7Qb9CLJ0piRaR5ZnArxYhAivfVv8lf38d/r5Am9wWAWgBZzTE9jYRJFLf zhHTq+FbqMHOo+B8Rv8EUqyWGTjAKFySITS8OkPOWxsOHXZdntNml07u/wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFLD9cxtun3iEribv5Dk96hZn77UYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ2ZGZh Y2JjLTkzZGYtNGY3NS1iNWQ5LWJjMzIwNWQ3MjY3MC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZk ZmFjYmMtOTNkZi00Zjc1LWI1ZDktYmMzMjA1ZDcyNjcwLzAvQjBGRDczMUI2RTlG Nzg4NEFFMjZFRkU0MzkzREVBMTY2N0VGQjUxOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSGAw DQYJKoZIhvcNAQELBQADggEBAJHJGc7/UZ1rsz760G3U8LUPeBoa2cn0A41FyFJm L344RApr131hzlxJ8DJx9powev8F0SCsEaq+JxpNuXlL44rRTzY6FAE2MyjBOZJy KC6OmAjhHfnStYxdh0zdsd9yphXVGA6q8fynRHsgP/hxMLEbFDdmlzFzpYv7YgvC 5AcovL8BuICT0K4rM/0CTTu1FDChuo7a8prxUw1u8EZdtNlPGtLk6o/+biWvGozX za14G8qVAf2G12p7xlWE4p3uf4931bVH4YpKJGZfSJUum0VSBPM3A9YAR+RxaqwF VeweENBnBXt6hnZF/7sYHrd6AUu1FOsAyOinS+Ey6GbWfPI= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:38 2026 by rpki-client