This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s_sdIFBvVM-5oflFH6EKiP87L2Q.cer File: s_sdIFBvVM-5oflFH6EKiP87L2Q.cer (raw, json) Hash identifier: dh2wZeERZcbZq5y/0ptiYizBbyQcE4NnTteI2mowA3w= Subject key identifier: B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30215DE654F064212B1649938AC89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51017 IP: 89.223.72.0/22 IP: 185.75.220.0/24 IP: 185.121.72.0/22 IP: 2a0d:4f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:02:15:de:65:4f:06:42:12:b1:64:99:38:ac:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3fb1d20506f54cfb9a1f9451fa10a88ff3b2f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:9f:ba:fa:6b:4b:89:24:99:d5:c8:47:7d: e0:a8:e9:cc:a3:67:aa:7d:95:23:f1:95:e9:51:a8: 42:2c:25:23:68:1c:66:ca:d7:81:64:e1:5f:74:91: b2:56:f8:7a:4e:f0:14:c7:cb:93:7f:1a:e2:1e:92: 32:a1:b2:98:85:c8:52:54:5c:2d:60:c1:7a:16:15: f1:b7:da:cf:68:4f:ee:f5:d6:8c:ed:05:be:bf:f1: d9:e2:01:30:98:0e:02:99:00:60:59:2d:33:64:e9: d5:3d:24:04:27:92:0c:ec:a7:68:be:69:f5:d6:4d: 13:b3:ec:b7:34:01:43:bc:57:63:d6:40:41:81:b1: 7b:36:7c:98:ab:bb:82:94:d4:24:67:82:fa:63:fa: f4:f4:09:19:99:72:5f:2b:2c:7d:60:bb:56:c5:43: e1:3a:3a:34:3e:c7:00:c0:1a:2d:40:d8:77:fe:ba: 89:0a:3f:75:0e:0b:08:16:17:4c:69:85:ae:44:09: 52:a0:01:e4:24:f9:00:19:4d:7e:9c:dd:19:ec:d5: 69:fd:3e:fe:86:92:3c:9e:fc:a8:15:75:01:4f:00: fb:74:37:0c:c2:db:2b:88:07:e8:c4:14:62:e1:50: 49:7a:80:18:cc:1e:12:a6:e2:0b:d0:3c:1a:39:c4: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.223.72.0/22 185.75.220.0/24 185.121.72.0/22 IPv6: 2a0d:4f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51017 Signature Algorithm: sha256WithRSAEncryption 68:4e:5d:18:7c:f9:34:d4:49:9a:d7:8e:b1:a9:96:45:13:01: 99:70:04:7c:9d:69:2c:61:50:4f:d6:0b:5c:b1:c7:70:7a:0a: 96:02:4f:51:c4:6d:3a:d4:56:7f:36:03:26:28:d8:70:6c:dd: 1a:32:64:ad:6d:7f:88:f0:fd:d0:96:84:ce:98:b5:17:f0:12: b2:ed:d1:a2:82:38:7e:8f:f1:8f:9f:73:93:64:62:b6:75:97: 4d:59:ef:91:6f:fb:12:21:4e:50:49:2f:14:0c:a8:ae:8e:7a: f3:1b:ab:a7:b2:55:71:96:79:b0:43:14:15:bb:73:a8:f9:10: 42:5c:d6:47:20:62:e2:d0:ee:d1:d3:4c:f1:95:d6:84:3d:df: 1f:a9:13:57:90:49:8d:dc:64:50:43:04:84:38:70:dc:0f:8d: 79:8c:78:83:11:13:37:dc:24:13:6b:85:a3:69:0f:cf:bf:57: 67:b3:2f:51:54:91:d3:77:75:28:73:65:39:8f:13:c7:6a:e6: 67:a8:b6:76:d6:e8:2a:92:81:b8:f9:6c:16:05:8f:63:24:7e: 79:68:02:56:0a:2e:cb:c8:cb:12:39:97:8e:4d:83:81:c5:ed: d8:7f:43:47:3b:8b:1e:df:40:c1:b5:e2:d5:82:db:29:21:79: ae:24:3c:6a -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4owIV3mVPBkISsWSZOKyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2ZiMWQyMDUwNmY1NGNmYjlhMWY5NDUxZmExMGE4OGZmM2IyZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk6fuvprS4kkmdXIR33gqOnMo2eq fZUj8ZXpUahCLCUjaBxmyteBZOFfdJGyVvh6TvAUx8uTfxriHpIyobKYhchSVFwt YMF6FhXxt9rPaE/u9daM7QW+v/HZ4gEwmA4CmQBgWS0zZOnVPSQEJ5IM7Kdovmn1 1k0Ts+y3NAFDvFdj1kBBgbF7NnyYq7uClNQkZ4L6Y/r09AkZmXJfKyx9YLtWxUPh Ojo0PscAwBotQNh3/rqJCj91DgsIFhdMaYWuRAlSoAHkJPkAGU1+nN0Z7NVp/T7+ hpI8nvyoFXUBTwD7dDcMwtsriAfoxBRi4VBJeoAYzB4SpuIL0DwaOcQCNQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFLP7HSBQb1TPuaH5RR+hCoj/Oy9kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2M0MmRm NS00ZjkyLTQ0N2QtYmQyNS04NmQ2ZTJmNDY2NDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYzQyZGY1 LTRmOTItNDQ3ZC1iZDI1LTg2ZDZlMmY0NjY0Mi8xL3Nfc2RJRkJ2Vk0tNW9mbEZI NkVLaVA4N0wyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCWd9IAwQAuUvcAwQCuXlIMA0EAgACMAcDBQMq DU+AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDHSTANBgkqhkiG9w0BAQsFAAOC AQEAaE5dGHz5NNRJmteOsamWRRMBmXAEfJ1pLGFQT9YLXLHHcHoKlgJPUcRtOtRW fzYDJijYcGzdGjJkrW1/iPD90JaEzpi1F/ASsu3RooI4fo/xj59zk2RitnWXTVnv kW/7EiFOUEkvFAyoro568xurp7JVcZZ5sEMUFbtzqPkQQlzWRyBi4tDu0dNM8ZXW hD3fH6kTV5BJjdxkUEMEhDhw3A+NeYx4gxETN9wkE2uFo2kPz79XZ7MvUVSR03d1 KHNlOY8Tx2rmZ6i2dtboKpKBuPlsFgWPYyR+eWgCVgouy8jLEjmXjk2DgcXt2H9D RzuLHt9AwbXi1YLbKSF5riQ8ag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:28 2026 by rpki-client