This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer File: sdgCZnmAlE302iq0sI6dNLIKjRE.cer (raw, json) Hash identifier: bRt64ba8EZ0/YBoHJ5qrx0gz3USf3ORplJjOsu/4FFo= Subject key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5AEC951604D64F4BBB818C208A9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207192 IP: 185.161.48.0/22 IP: 194.56.214.0/24 IP: 212.2.232.0/23 IP: 2a0f:5240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5a:ec:95:16:04:d6:4f:4b:bb:81:8c:20:8a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:42:87:02:bf:d8:3b:89:72:16:31:f8:af: 52:80:fb:d9:f9:3d:28:89:bc:ea:71:fc:42:00:85: 5d:96:7c:9e:3b:a0:b3:a6:da:37:ad:92:ff:a5:35: 7c:61:df:01:f3:6c:80:b4:38:0f:5d:a3:20:83:67: 66:26:ee:bf:57:ce:f1:1c:d3:34:ce:87:2a:ef:82: 2d:16:76:a2:23:04:02:9d:e8:ab:a7:08:c2:df:39: f0:6d:4c:47:47:c5:89:fe:40:14:be:be:c0:18:5c: 9a:c9:32:94:e2:7c:1e:77:db:33:fa:02:d2:f2:3e: 9e:53:cb:8e:80:d7:a6:f7:b5:de:6a:b6:37:7a:f0: c9:3f:2c:54:1d:18:14:a4:82:de:eb:22:2a:ff:0a: 3b:b7:c4:b2:55:e6:9c:b8:45:3f:d5:49:cc:a0:c9: 55:d7:03:17:5d:b3:40:10:8a:74:f7:52:02:ac:e6: 2e:a1:9e:79:3e:e4:35:b3:94:50:7a:1a:d1:dd:f4: 60:f9:f3:52:3a:7a:35:b5:43:46:c0:eb:5b:df:61: 15:a7:9a:4b:c6:83:79:bf:44:2b:69:27:a8:ea:c7: 33:ef:ee:3d:f9:14:cc:a8:fc:17:f2:54:7e:5d:06: c8:a7:27:3e:8c:98:d1:40:76:d4:66:a7:f8:9a:b8: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.48.0/22 194.56.214.0/24 212.2.232.0/23 IPv6: 2a0f:5240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207192 Signature Algorithm: sha256WithRSAEncryption 81:00:40:62:45:6f:b9:d8:81:53:c9:83:1c:d5:4c:c2:18:cc: 4b:f8:90:c7:63:e0:b9:cd:b6:58:46:ec:14:a4:38:ba:11:f3: 00:99:81:2e:bd:cc:a7:6e:15:65:3f:f0:00:16:33:f1:77:ef: e4:f4:16:3b:1c:43:8a:ff:0c:d5:b5:18:4f:1a:e6:e8:1d:d8: 45:4f:2b:fb:37:d1:ba:33:18:3c:ec:cc:21:6a:48:37:3b:01: fa:5f:51:dd:0d:17:b7:15:75:c6:89:e6:e5:d3:63:e9:8d:2b: 5c:41:d1:02:12:42:21:1a:6c:1e:f9:32:d5:55:93:be:dd:4f: 62:ce:b3:75:07:26:be:d6:f7:f8:33:61:7a:6f:6e:93:9c:bf: be:5a:39:6f:e3:67:19:cf:95:60:0d:21:44:2e:54:7e:96:a2: 8f:0c:4c:a1:2e:85:80:e7:30:ba:fc:5c:ba:32:3b:66:3e:14: 22:95:43:02:7a:38:b1:f0:cc:55:e1:3b:d7:a2:cc:72:bf:cd: ea:be:fd:83:12:dd:ea:c3:28:ab:e9:08:3d:97:89:05:05:9c: eb:c6:90:1f:cf:1f:a6:0a:8d:47:90:11:25:a1:98:33:3b:f8: bc:fa:d7:5c:84:c5:f8:e9:7c:0b:0b:65:2e:db:d8:fa:10:b2: da:1e:5c:cd -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt57VrslRYE1k9Lu4GMIIqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ4MDI2Njc5ODA5NDRkZjRkYTJhYjRiMDhlOWQzNGIyMGE4ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu89ChwK/2DuJchYx+K9SgPvZ+T0o ibzqcfxCAIVdlnyeO6Czpto3rZL/pTV8Yd8B82yAtDgPXaMgg2dmJu6/V87xHNM0 zocq74ItFnaiIwQCneirpwjC3znwbUxHR8WJ/kAUvr7AGFyayTKU4nwed9sz+gLS 8j6eU8uOgNem97XearY3evDJPyxUHRgUpILe6yIq/wo7t8SyVeacuEU/1UnMoMlV 1wMXXbNAEIp091ICrOYuoZ55PuQ1s5RQehrR3fRg+fNSOno1tUNGwOtb32EVp5pL xoN5v0QraSeo6scz7+49+RTMqPwX8lR+XQbIpyc+jJjRQHbUZqf4mrgQLwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2YxNTNl Ny0wN2Q5LTRiODEtYWFlZC1jYmVjNDNmZDkyYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvZjE1M2U3 LTA3ZDktNGI4MS1hYWVkLWNiZWM0M2ZkOTJhMS8xL3NkZ0Nabm1BbEUzMDJpcTBz STZkTkxJS2pSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuaEwAwQAwjjWAwQB1ALoMA0EAgACMAcDBQAq D1JAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMpWDANBgkqhkiG9w0BAQsFAAOC AQEAgQBAYkVvudiBU8mDHNVMwhjMS/iQx2Pguc22WEbsFKQ4uhHzAJmBLr3Mp24V ZT/wABYz8Xfv5PQWOxxDiv8M1bUYTxrm6B3YRU8r+zfRujMYPOzMIWpINzsB+l9R 3Q0XtxV1xonm5dNj6Y0rXEHRAhJCIRpsHvky1VWTvt1PYs6zdQcmvtb3+DNhem9u k5y/vlo5b+NnGc+VYA0hRC5UfpaijwxMoS6FgOcwuvxcujI7Zj4UIpVDAno4sfDM VeE716LMcr/N6r79gxLd6sMoq+kIPZeJBQWc68aQH88fpgqNR5ARJaGYMzv4vPrX XITF+Ol8CwtlLtvY+hCy2h5czQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:31 2026 by rpki-client