This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer File: srQdL319OFfgdfKk8vnT4ETy5TY.cer (raw, json) Hash identifier: M/ZVidSoq5EF7T8X5HzcS9YmcApFNOmVVYMv6yADR1I= Subject key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C133744CA6A2E91B6C0D5A851101EF8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34688 IP: 194.116.252.0/23 IP: 194.187.72.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:37:44:ca:6a:2e:91:b6:c0:d5:a8:51:10:1e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:4e:71:9d:60:40:16:06:db:c9:3b:f7:63: 12:47:94:1c:99:c1:0b:b8:0d:3a:b8:cf:19:e4:c5: 63:b5:09:d3:65:c6:8f:9b:52:b7:c1:2b:03:2e:90: f5:34:b6:a6:51:31:c1:e5:be:da:95:12:e6:67:d4: e4:aa:73:6c:59:92:aa:85:a8:00:66:90:d0:5e:41: 0a:90:04:a9:e6:d9:d8:cf:bd:ef:84:da:48:3e:05: 0e:98:37:5b:da:8f:06:d9:a5:b9:3c:ea:ea:96:6c: 4b:e3:f4:90:e3:78:75:fb:02:62:78:3e:74:8c:75: 91:c0:ab:1f:77:da:43:6e:0e:91:f3:7e:3c:6a:9b: 8e:3c:20:d3:a6:e2:40:ba:43:cf:05:5c:5a:87:03: d0:a3:13:03:83:6e:48:f7:1e:f9:dd:c6:ca:b1:56: 01:c3:e5:73:da:ed:fe:c4:bc:4f:e1:c5:a7:57:7a: 8d:61:88:1d:96:c5:f0:0d:ac:61:e0:4f:af:c9:0e: 02:54:97:dd:4d:26:25:fd:e0:35:39:7d:e5:f4:d7: 40:72:04:a8:9d:ac:ff:a0:71:7f:66:1c:b6:22:b7: 03:ff:c6:58:0f:f0:b0:97:19:23:35:37:c8:25:3d: d3:30:bf:24:3f:f7:e8:da:35:d5:60:7a:41:cc:d9: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.252.0/23 194.187.72.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34688 Signature Algorithm: sha256WithRSAEncryption 0e:1c:f1:d7:50:2d:bd:f2:5b:18:e7:28:0c:d9:4b:64:04:83: b5:75:c7:df:c8:41:81:c8:f9:1c:4e:b4:25:88:c6:36:0e:70: 6d:81:06:01:8e:58:c2:be:5d:88:e1:17:cd:1f:f4:87:2f:a5: df:08:57:40:cd:25:5b:7b:fc:35:d5:1f:38:a6:c3:be:e8:0f: 45:71:04:9a:e0:c4:a1:3c:1d:5d:38:9b:40:f4:32:51:eb:b8: dc:23:44:17:9c:55:9b:fd:97:98:4b:b6:20:8a:e5:06:04:90: 27:d4:39:c8:06:5e:34:e5:7d:b9:d3:33:76:fa:bb:ac:97:b2: b9:6c:e3:68:94:6f:e8:ad:f8:1b:28:71:31:f2:77:a6:9e:31: ac:78:20:2b:87:a1:34:1d:c1:41:b3:74:6f:7b:90:b9:bc:4a: 47:90:22:99:20:b7:c8:df:8f:df:f2:f9:0b:9c:c3:29:c5:d0: 70:6f:13:45:fd:4a:01:75:8e:16:de:70:36:a3:ef:d2:00:a5: d1:69:e6:c2:0b:a3:f2:ee:08:2b:1d:3a:e8:2e:4c:1b:01:a1: 80:c2:21:8d:13:9a:91:dd:fc:75:19:0e:03:b0:4b:9a:95:19: d8:38:f2:80:0c:01:ec:3a:ab:74:2f:c9:f4:03:93:89:1c:d8: 09:75:0b:e9 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8EzdEymoukbbA1ahREB74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmI0MWQyZjdkN2QzODU3ZTA3NWYyYTRmMmY5ZDNlMDQ0ZjJlNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy05OcZ1gQBYG28k792MSR5QcmcEL uA06uM8Z5MVjtQnTZcaPm1K3wSsDLpD1NLamUTHB5b7alRLmZ9TkqnNsWZKqhagA ZpDQXkEKkASp5tnYz73vhNpIPgUOmDdb2o8G2aW5POrqlmxL4/SQ43h1+wJieD50 jHWRwKsfd9pDbg6R8348apuOPCDTpuJAukPPBVxahwPQoxMDg25I9x753cbKsVYB w+Vz2u3+xLxP4cWnV3qNYYgdlsXwDaxh4E+vyQ4CVJfdTSYl/eA1OX3l9NdAcgSo naz/oHF/Zhy2IrcD/8ZYD/CwlxkjNTfIJT3TML8kP/fo2jXVYHpBzNnxbwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFLK0HS99fThX4HXypPL50+BE8uU2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2Q3N2Fj NC1kYzY2LTQzNGYtODQyMy1jOWUyMGNjZDQ3NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvZDc3YWM0 LWRjNjYtNDM0Zi04NDIzLWM5ZTIwY2NkNDc2Zi8xL3NyUWRMMzE5T0ZmZ2RmS2s4 dm5UNEVUeTVUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwnT8AwQCwrtIMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCHgDANBgkqhkiG9w0BAQsFAAOCAQEADhzx11AtvfJbGOcoDNlLZASD tXXH38hBgcj5HE60JYjGNg5wbYEGAY5Ywr5diOEXzR/0hy+l3whXQM0lW3v8NdUf OKbDvugPRXEEmuDEoTwdXTibQPQyUeu43CNEF5xVm/2XmEu2IIrlBgSQJ9Q5yAZe NOV9udMzdvq7rJeyuWzjaJRv6K34GyhxMfJ3pp4xrHggK4ehNB3BQbN0b3uQubxK R5AimSC3yN+P3/L5C5zDKcXQcG8TRf1KAXWOFt5wNqPv0gCl0Wnmwguj8u4IKx06 6C5MGwGhgMIhjROakd38dRkOA7BLmpUZ2DjygAwB7DqrdC/J9AOTiRzYCXUL6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:39 2026 by rpki-client