This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer File: sq8TPUrDS9z7e93H4RsnBUNi9wk.cer (raw, json) Hash identifier: TD4XQ7TQBGYW4eXKS7DdJIu89VPAtafrgQ4dIuT7/m0= Subject key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38D5D59F1D72859EF33FB30A437520 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198340 IP: 193.57.218.0 -- 193.57.222.255 IP: 193.57.232.0 -- 193.57.247.255 IP: 193.57.250.0 -- 193.57.253.255 IP: 2a0a:cb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d5:d5:9f:1d:72:85:9e:f3:3f:b3:0a:43:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:9a:8d:d8:e8:c8:10:dc:c6:33:dc:6e:64: ba:41:a1:57:68:27:10:dd:1b:e9:bc:c2:77:e2:c6: 1d:01:9f:4c:39:d2:f9:f0:7e:a9:2d:05:07:cf:1e: 4e:46:21:c7:82:07:24:df:8a:54:df:e0:34:64:53: 54:19:f6:e5:f6:a0:27:47:ae:c0:50:90:dc:ee:42: e5:f7:bc:b0:86:b7:a0:bc:d3:89:3c:20:e2:78:b2: d9:e9:10:d0:5b:2e:34:9b:7a:2b:1e:fb:1b:45:07: b1:3c:24:62:14:df:b2:81:a8:2b:ab:20:0e:01:68: c6:0f:9d:0c:7c:48:52:08:d5:95:45:04:22:40:f7: cf:50:20:76:17:fb:9c:10:a4:9e:53:c6:dc:77:8e: 50:d6:90:09:cd:d3:54:29:b9:92:e8:2d:93:4f:00: 2e:51:15:22:d2:18:4a:2d:6e:f9:f0:f1:6c:7b:1e: 66:49:da:db:98:79:84:5b:88:aa:b0:20:78:cc:fb: 3f:1e:5a:76:66:77:30:17:88:98:ee:18:70:a9:39: ae:b8:c2:00:4f:e9:4d:35:b7:27:58:54:89:8a:ee: c4:84:47:e3:6d:6f:51:9f:56:85:b0:5e:02:9f:56: 08:93:c6:d1:a2:d1:87:35:5e:5c:43:12:aa:87:ff: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.218.0-193.57.222.255 193.57.232.0-193.57.247.255 193.57.250.0-193.57.253.255 IPv6: 2a0a:cb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198340 Signature Algorithm: sha256WithRSAEncryption 7f:81:93:46:91:83:d8:59:92:10:d9:1a:ff:93:8f:f3:da:07: 12:50:d0:6c:96:2b:ef:00:a2:21:fe:0b:57:de:2e:24:72:19: e7:e9:5c:d5:db:5e:fb:a8:08:4c:4b:9f:93:b3:58:11:f1:f4: cd:18:b9:74:d7:f4:2e:6e:a3:50:fc:48:7a:d0:4c:e1:cb:ef: 38:e6:f6:0f:43:36:32:93:32:ad:c6:2f:09:5c:92:a4:5f:3e: 57:a1:f5:9d:6b:00:a7:30:3d:9e:96:ad:94:ac:4a:11:a7:92: cc:f7:a2:d3:ad:65:3f:56:10:ca:84:c3:4c:30:e3:83:e7:09: b8:45:f4:fb:b6:a6:5d:d4:f0:c7:3d:dc:af:4e:fe:bb:5b:48: 50:a1:bd:7b:8a:f6:fe:b8:b9:b4:15:d2:3f:6e:77:3d:58:f5: 2d:a7:3e:99:e7:83:0f:7a:f1:ac:79:ab:3e:e7:7f:c9:41:0e: 26:22:11:b8:ac:8d:21:12:79:d8:21:21:c2:99:40:ba:d1:1f: 80:7f:68:a0:99:33:97:1b:d9:9f:bc:8f:bf:fa:db:1a:21:d4: b5:cd:33:83:cd:d5:18:c1:3b:a2:f0:3b:7d:a2:12:da:05:26: bc:27:56:be:57:b5:b9:65:a5:76:05:56:5f:d6:8a:ae:7d:3e: 07:46:c1:5c -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt+ONXVnx1yhZ7zP7MKQ3UgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmFmMTMzZDRhYzM0YmRjZmI3YmRkYzdlMTFiMjcwNTQzNjJmNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEGajdjoyBDcxjPcbmS6QaFXaCcQ 3RvpvMJ34sYdAZ9MOdL58H6pLQUHzx5ORiHHggck34pU3+A0ZFNUGfbl9qAnR67A UJDc7kLl97ywhregvNOJPCDieLLZ6RDQWy40m3orHvsbRQexPCRiFN+ygagrqyAO AWjGD50MfEhSCNWVRQQiQPfPUCB2F/ucEKSeU8bcd45Q1pAJzdNUKbmS6C2TTwAu URUi0hhKLW758PFsex5mSdrbmHmEW4iqsCB4zPs/Hlp2ZncwF4iY7hhwqTmuuMIA T+lNNbcnWFSJiu7EhEfjbW9Rn1aFsF4Cn1YIk8bRotGHNV5cQxKqh/81aQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFLKvEz1Kw0vc+3vdx+EbJwVDYvcJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2VhYWNh ZS0zNzdlLTQ1N2EtOTAwYS1mM2VhYWU2MzNhMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvZWFhY2Fl LTM3N2UtNDU3YS05MDBhLWYzZWFhZTYzM2ExZS8xL3NxOFRQVXJEUzl6N2U5M0g0 UnNuQlVOaTl3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqMAwDBAHBOdoDBADBOd4wDAMEA8E56AMEA8E58DAM AwQBwTn6AwQBwTn8MA0EAgACMAcDBQMqCssAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMGxDANBgkqhkiG9w0BAQsFAAOCAQEAf4GTRpGD2FmSENka/5OP89oHElDQ bJYr7wCiIf4LV94uJHIZ5+lc1dte+6gITEufk7NYEfH0zRi5dNf0Lm6jUPxIetBM 4cvvOOb2D0M2MpMyrcYvCVySpF8+V6H1nWsApzA9npatlKxKEaeSzPei061lP1YQ yoTDTDDjg+cJuEX0+7amXdTwxz3cr07+u1tIUKG9e4r2/ri5tBXSP253PVj1Lac+ meeDD3rxrHmrPud/yUEOJiIRuKyNIRJ52CEhwplAutEfgH9ooJkzlxvZn7yPv/rb GiHUtc0zg83VGME7ovA7faIS2gUmvCdWvle1uWWldgVWX9aKrn0+B0bBXA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:13 2026 by rpki-client