This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer File: sXQMTAefLR3uhUOfgngbm651apU.cer (raw, json) Hash identifier: sgcc6qYi2kz/YwrE7WtQt0tTRsD6BIZWhSNyl2tHzTI= Subject key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834DE11D329EF19041B62E914966380 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203375 IP: 185.136.224.0/22 IP: 2a06:ff00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:de:11:d3:29:ef:19:04:1b:62:e9:14:96:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1740c4c079f2d1dee85439f82781b9bae756a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:24:e8:1f:0a:c6:44:e1:2c:e2:5d:7f:16: ab:c7:da:3c:31:99:f0:98:84:b0:17:ef:ae:fa:53: b2:cf:90:d4:42:cc:87:0a:14:54:87:26:25:d4:3c: e5:0c:be:ad:61:a3:02:85:9a:8b:01:68:9e:23:9f: a9:ed:fe:5f:5d:b3:66:f2:0b:df:b2:a1:f7:22:30: 09:8d:8a:9a:a2:2b:a4:1b:9c:9d:16:f3:bd:0d:64: 82:32:67:31:86:77:94:db:ed:ec:a5:56:d2:d1:18: 2f:ef:a3:ad:44:a8:1c:16:bf:99:96:a3:8a:de:b7: 4c:a6:e6:98:3e:2c:a2:1a:56:d2:01:13:09:ec:39: a8:00:cb:d9:58:55:ff:80:74:43:c4:0f:75:9e:5a: 7e:a5:ef:78:7b:ce:ba:a6:4a:ae:ae:81:83:21:89: 23:0c:8a:ae:cc:9f:5d:9f:85:31:89:20:9e:6f:60: a6:59:24:a7:33:cd:7c:66:5c:84:bb:ab:02:03:27: 62:43:15:96:60:90:e6:79:eb:1f:11:2c:43:6c:48: db:c5:31:78:9a:11:e6:15:a9:da:57:36:5d:fe:8d: c4:da:f3:ba:5a:be:54:8e:c6:d9:14:e4:fb:50:2e: a2:d6:b0:9d:fd:7d:79:34:d9:a8:64:c7:24:ea:a2: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.224.0/22 IPv6: 2a06:ff00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203375 Signature Algorithm: sha256WithRSAEncryption 8f:40:44:a0:4d:be:e2:61:49:b9:d3:b0:c2:f1:e1:49:cd:4c: 11:94:56:bb:fd:fb:0b:93:e5:19:0f:99:11:81:2f:59:0e:2f: 1e:76:61:a0:36:08:21:fb:d4:48:0d:79:40:6d:40:89:25:f5: ba:7b:f0:d6:3f:c6:1a:30:59:e7:51:2c:a0:88:cb:c1:05:51: 9a:fb:ab:d5:1e:e2:0a:6d:fa:de:52:48:a8:10:57:96:01:ea: 2f:25:94:e7:b6:34:0c:a9:24:8d:2b:3c:dd:d8:d5:aa:56:94: 78:61:6b:04:5b:6b:c7:ab:41:1e:ff:06:b4:09:22:0c:bc:cd: ec:ca:f1:60:b2:c1:3f:41:86:d5:56:1e:6d:7c:db:b6:07:78: 54:0c:75:79:43:f1:40:f1:14:02:5c:9b:c7:8b:34:74:9f:6b: 8e:84:97:6e:42:6d:05:b6:18:f8:18:fe:e9:98:17:cd:28:54: d4:5a:34:f0:4f:71:3e:6b:0f:2e:48:ed:86:b0:40:fb:52:41: 30:4f:8d:15:1a:9e:ac:fb:e0:93:a2:77:5a:c3:7e:d9:53:8c: b3:12:f4:66:3e:8c:87:b4:82:f4:8a:fa:5c:53:bd:d6:2c:14: 76:0b:97:88:04:3b:d1:c6:cc:36:18:d6:2c:76:b3:e4:e2:7b: e3:3a:31:13 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NN4R0ynvGQQbYukUlmOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTc0MGM0YzA3OWYyZDFkZWU4NTQzOWY4Mjc4MWI5YmFlNzU2YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiAk6B8KxkThLOJdfxarx9o8MZnw mISwF++u+lOyz5DUQsyHChRUhyYl1DzlDL6tYaMChZqLAWieI5+p7f5fXbNm8gvf sqH3IjAJjYqaoiukG5ydFvO9DWSCMmcxhneU2+3spVbS0Rgv76OtRKgcFr+ZlqOK 3rdMpuaYPiyiGlbSARMJ7DmoAMvZWFX/gHRDxA91nlp+pe94e866pkquroGDIYkj DIquzJ9dn4UxiSCeb2CmWSSnM818ZlyEu6sCAydiQxWWYJDmeesfESxDbEjbxTF4 mhHmFanaVzZd/o3E2vO6Wr5UjsbZFOT7UC6i1rCd/X15NNmoZMck6qKUlQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLF0DEwHny0d7oVDn4J4G5uudWqVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzcyYTQ5 NS0yYjVkLTRhMjMtOTljNC1lZjA2NzFjN2MwZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvNzJhNDk1 LTJiNWQtNGEyMy05OWM0LWVmMDY3MWM3YzBkZi8xL3NYUU1UQWVmTFIzdWhVT2Zn bmdibTY1MWFwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYjgMA0EAgACMAcDBQMqBv8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMabzANBgkqhkiG9w0BAQsFAAOCAQEAj0BEoE2+4mFJ udOwwvHhSc1MEZRWu/37C5PlGQ+ZEYEvWQ4vHnZhoDYIIfvUSA15QG1AiSX1unvw 1j/GGjBZ51EsoIjLwQVRmvur1R7iCm363lJIqBBXlgHqLyWU57Y0DKkkjSs83djV qlaUeGFrBFtrx6tBHv8GtAkiDLzN7MrxYLLBP0GG1VYebXzbtgd4VAx1eUPxQPEU Alybx4s0dJ9rjoSXbkJtBbYY+Bj+6ZgXzShU1Fo08E9xPmsPLkjthrBA+1JBME+N FRqerPvgk6J3WsN+2VOMsxL0Zj6Mh7SC9Ir6XFO91iwUdguXiAQ70cbMNhjWLHaz 5OJ74zoxEw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:06 2026 by rpki-client