This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer File: smbm5NXff4olZUFEdV172ZLnNTk.cer (raw, json) Hash identifier: 7FTmNJLU9LG2+9ACNftTWsKi0QzUM4vZ5o7X9eukxQY= Subject key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F152551193986F86B47B1D824C05612 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204332 IP: 185.252.88.0/22 IP: 2a0c:2440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:25:51:19:39:86:f8:6b:47:b1:d8:24:c0:56:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b266e6e4d5df7f8a25654144755d7bd992e73539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:9b:6b:c6:9b:08:0b:20:50:80:8d:ec:32: f0:be:18:6c:63:a5:53:06:e0:09:bd:60:5e:6f:e4: 14:be:ea:53:e0:b4:85:b6:cf:9c:17:fe:b8:4c:59: 26:1d:87:de:44:fb:90:48:9e:d0:a7:c5:9e:59:1f: cb:38:13:2c:28:0e:a8:ca:a4:16:19:14:c3:b6:e2: 39:b0:a0:ed:20:b6:66:73:41:5e:7d:0d:3f:ea:83: 71:5c:90:63:3b:27:7a:e7:b9:77:90:52:3b:7e:d4: b8:92:3f:9b:95:52:6a:5f:c3:4e:b5:cb:7e:45:a3: fd:70:f6:ef:08:c7:48:c2:3a:9a:10:72:2c:58:43: 78:af:03:09:9f:4a:a4:e5:6d:67:c5:6f:ab:0c:2c: 34:52:b2:68:5c:60:8e:aa:d7:1b:eb:81:27:0b:b3: b9:d9:34:21:99:b2:66:bb:8c:3b:a0:e9:05:db:1e: 7f:92:6b:f5:e9:28:73:64:03:b6:93:dc:41:1a:59: fa:01:51:49:ed:28:63:1e:cc:45:a8:6d:2d:79:cf: 34:df:6a:e8:28:4b:d6:f7:1c:ef:fd:b2:5e:99:3f: 1d:ca:12:0c:00:e4:3f:86:68:84:36:33:cb:9d:bc: 8b:e6:31:7f:48:38:94:63:20:c8:15:a5:c5:2a:f9: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.88.0/22 IPv6: 2a0c:2440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204332 Signature Algorithm: sha256WithRSAEncryption 0f:d5:89:2b:9e:73:3a:4c:bf:b1:e4:b3:eb:4a:62:96:ee:7e: 0b:8f:1f:fa:82:05:28:43:7b:08:7f:2f:16:68:da:04:5e:de: f8:b1:bf:ad:98:a0:b9:55:a6:c5:b3:d2:1c:b7:aa:5e:95:b9: 0e:80:dd:dc:5d:3b:4e:ca:fe:c1:a2:e2:1d:02:34:9f:79:b5: a9:dc:94:21:29:ea:a8:16:fd:f2:87:ac:f3:3c:a6:e9:fe:b9: 9b:b6:d0:a4:b6:f2:c7:d6:06:5f:5f:28:b4:17:77:dc:46:7d: c4:f2:ed:e3:b0:9b:27:22:dd:8f:1d:d8:40:72:65:61:44:9c: e1:82:ff:bc:4c:4b:9e:a8:1f:e1:2b:12:9b:14:6d:4b:5b:39: 89:57:0e:fe:87:3b:d0:72:8c:e9:a2:6c:ce:cc:d0:70:42:3b: 20:75:8d:09:ad:05:f4:88:75:1e:ad:39:ee:6b:96:59:00:39: 44:d8:9f:44:af:cb:47:d7:d0:fe:a4:20:5b:74:89:77:28:35: bd:aa:35:7f:f6:fd:76:de:3b:5f:2f:05:f0:6a:a0:3f:65:9c: 26:79:90:cc:10:10:6e:ca:d3:dc:ad:d8:9c:9a:9f:86:dd:2e: c1:9e:86:bc:c4:b2:76:ec:96:28:70:30:35:8c:09:b1:91:85: 4d:c4:63:2e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FSVRGTmG+GtHsdgkwFYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjY2ZTZlNGQ1ZGY3ZjhhMjU2NTQxNDQ3NTVkN2JkOTkyZTczNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaqba8abCAsgUICN7DLwvhhsY6VT BuAJvWBeb+QUvupT4LSFts+cF/64TFkmHYfeRPuQSJ7Qp8WeWR/LOBMsKA6oyqQW GRTDtuI5sKDtILZmc0FefQ0/6oNxXJBjOyd657l3kFI7ftS4kj+blVJqX8NOtct+ RaP9cPbvCMdIwjqaEHIsWEN4rwMJn0qk5W1nxW+rDCw0UrJoXGCOqtcb64EnC7O5 2TQhmbJmu4w7oOkF2x5/kmv16ShzZAO2k9xBGln6AVFJ7ShjHsxFqG0tec8032ro KEvW9xzv/bJemT8dyhIMAOQ/hmiENjPLnbyL5jF/SDiUYyDIFaXFKvldzQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLJm5uTV33+KJWVBRHVde9mS5zU5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2VjODgw MS0wYTdjLTQ4N2UtYTEwMy01MjVkN2UyMmM3ODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZWM4ODAx LTBhN2MtNDg3ZS1hMTAzLTUyNWQ3ZTIyYzc4OC8xL3NtYm01TlhmZjRvbFpVRkVk VjE3MlpMbk5Uay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufxYMA0EAgACMAcDBQMqDCRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeLDANBgkqhkiG9w0BAQsFAAOCAQEAD9WJK55zOky/ seSz60pilu5+C48f+oIFKEN7CH8vFmjaBF7e+LG/rZiguVWmxbPSHLeqXpW5DoDd 3F07Tsr+waLiHQI0n3m1qdyUISnqqBb98oes8zym6f65m7bQpLbyx9YGX18otBd3 3EZ9xPLt47CbJyLdjx3YQHJlYUSc4YL/vExLnqgf4SsSmxRtS1s5iVcO/oc70HKM 6aJszszQcEI7IHWNCa0F9Ih1Hq057muWWQA5RNifRK/LR9fQ/qQgW3SJdyg1vao1 f/b9dt47Xy8F8GqgP2WcJnmQzBAQbsrT3K3YnJqfht0uwZ6GvMSyduyWKHAwNYwJ sZGFTcRjLg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:07 2026 by rpki-client