This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer File: sPoMerwQeWkV4zW6GXgORz4CeWk.cer (raw, json) Hash identifier: CYiCxbcmD2ej0KkyudOa2zhUpOtvF6W5dFKXksKSSS8= Subject key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791048FB422A13FAA4DFAFFD4141B6E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9211 IP: 185.109.156.0/22 IP: 194.49.7.0/24 IP: 212.12.32.0/20 IP: 212.12.56.0/21 IP: 213.238.32.0/20 IP: 213.238.50.0 -- 213.238.55.255 IP: 2a00:ea8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:48:fb:42:2a:13:fa:a4:df:af:fd:41:41:b6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0fa0c7abc10796915e335ba19780e473e027969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:ad:b2:c0:b0:de:68:87:b8:29:d7:17:b0: ae:02:e8:c4:6f:f0:78:e0:ed:8e:0b:6d:df:12:03: dd:20:ab:3a:eb:11:1f:64:de:f8:56:30:ad:7b:5d: 3c:af:77:dc:ca:2c:cd:82:2e:76:4e:f1:46:01:cb: f5:ca:31:e6:3a:98:fd:26:42:64:bd:f0:bf:b4:6b: 74:f3:19:39:54:0f:7d:0d:b7:a4:7f:5c:98:42:ae: 27:7f:59:62:83:93:05:eb:8f:e6:6c:f0:f6:c1:37: 8e:6e:c1:31:d0:24:51:05:a8:24:7d:f8:cd:93:dc: 8a:13:1c:4d:8d:c4:1c:1c:77:22:3d:3a:2f:e9:f0: 39:fb:c1:37:0a:ad:1a:af:61:9c:29:0a:05:53:30: 20:70:e5:91:f9:e0:05:56:3a:78:de:2a:45:ae:14: ff:25:ad:09:d4:19:e9:1b:9e:70:ac:99:04:07:2e: b7:d6:3c:e1:32:77:55:1d:fe:94:ed:a1:d9:f6:4f: 22:82:86:7b:26:a6:13:61:e3:f4:e4:b7:1c:d8:52: 42:f0:48:e3:ba:c7:45:cb:35:ca:0a:47:5b:0b:af: 5d:d2:7c:2c:e6:e8:85:45:cd:d6:4e:01:be:ab:91: ed:bb:42:e8:46:ed:cc:5a:36:14:23:b2:62:5d:b7: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.156.0/22 194.49.7.0/24 212.12.32.0/20 212.12.56.0/21 213.238.32.0/20 213.238.50.0-213.238.55.255 IPv6: 2a00:ea8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9211 Signature Algorithm: sha256WithRSAEncryption 7b:d2:d1:d6:99:99:11:1c:05:70:b1:66:4b:e2:43:b2:7d:9d: 28:58:f8:02:03:8e:56:6b:35:0c:58:3b:fb:00:6d:cc:05:03: 22:2e:a0:b9:b6:8c:49:e3:f1:24:ef:be:b9:f0:30:4a:5e:15: d0:9f:59:02:5b:bb:a3:8b:28:48:57:7f:6f:7c:11:f6:6b:a6: 34:e7:57:53:18:11:27:28:09:cb:bb:c9:d0:05:69:26:83:92: 36:e6:6d:a9:de:33:20:0f:77:34:98:52:3c:86:e9:dc:53:0d: 7a:dd:e9:4c:bd:0c:76:21:49:10:ac:bc:86:bd:ec:32:76:da: dd:b8:2f:b2:ce:52:43:26:c7:15:c9:0b:ff:6f:1e:b5:b8:b8: 5a:54:38:1d:ba:c1:d8:09:9e:a9:f8:cb:29:f1:a5:0e:4d:20: 89:b1:b8:b4:8b:d3:01:db:3f:ea:65:4a:91:dc:e9:b4:7a:55: 69:0a:43:0f:62:6f:ad:e9:06:bd:96:4c:3c:b4:76:b9:52:42: 7f:27:ba:be:fb:57:92:2d:99:f9:e7:b2:5a:0a:38:f7:ec:74: c6:0b:5a:f7:df:32:fa:57:e2:e4:07:e6:e1:dd:f1:76:71:70: 8e:39:f8:12:59:ff:b1:6c:12:f3:14:d5:a7:ed:b0:13:5e:ea: 64:39:3e:ad -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt5EEj7QioT+qTfr/1BQbbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGZhMGM3YWJjMTA3OTY5MTVlMzM1YmExOTc4MGU0NzNlMDI3OTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq2tssCw3miHuCnXF7CuAujEb/B4 4O2OC23fEgPdIKs66xEfZN74VjCte108r3fcyizNgi52TvFGAcv1yjHmOpj9JkJk vfC/tGt08xk5VA99Dbekf1yYQq4nf1lig5MF64/mbPD2wTeObsEx0CRRBagkffjN k9yKExxNjcQcHHciPTov6fA5+8E3Cq0ar2GcKQoFUzAgcOWR+eAFVjp43ipFrhT/ Ja0J1BnpG55wrJkEBy631jzhMndVHf6U7aHZ9k8igoZ7JqYTYeP05Lcc2FJC8Ejj usdFyzXKCkdbC69d0nws5uiFRc3WTgG+q5Htu0LoRu3MWjYUI7JiXbdASwIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzk3NDc0 OS00ZDdlLTQ0NTAtOTc5My1kZjg1NGY0N2JhZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvOTc0NzQ5 LTRkN2UtNDQ1MC05NzkzLWRmODU0ZjQ3YmFmNC8xL3NQb01lcndRZVdrVjR6VzZH WGdPUno0Q2VXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQCuW2cAwQAwjEHAwQE1AwgAwQD1Aw4AwQE1e4g MAwDBAHV7jIDBAPV7jAwDQQCAAIwBwMFAyoADqgwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICI/swDQYJKoZIhvcNAQELBQADggEBAHvS0daZmREcBXCxZkviQ7J9nShY +AIDjlZrNQxYO/sAbcwFAyIuoLm2jEnj8STvvrnwMEpeFdCfWQJbu6OLKEhXf298 EfZrpjTnV1MYEScoCcu7ydAFaSaDkjbmbaneMyAPdzSYUjyG6dxTDXrd6Uy9DHYh SRCsvIa97DJ22t24L7LOUkMmxxXJC/9vHrW4uFpUOB26wdgJnqn4yynxpQ5NIImx uLSL0wHbP+plSpHc6bR6VWkKQw9ib63pBr2WTDy0drlSQn8nur77V5ItmfnnsloK OPfsdMYLWvffMvpX4uQH5uHd8XZxcI45+BJZ/7FsEvMU1aftsBNe6mQ5Pq0= -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:35 2026 by rpki-client