This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer File: swUV9H2pJdn5ATgIqpETwr3pbZo.cer (raw, json) Hash identifier: Xg+GWDYmslIZYA3cQC+/jaeqbc/ND/Ga6szf3onETtc= Subject key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759542CB9048179D137F36606192D1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201661 IP: 185.53.152.0/22 IP: 2a04:cdc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:54:2c:b9:04:81:79:d1:37:f3:66:06:19:2d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b30515f47da925d9f9013808aa9113c2bde96d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:15:ce:98:ae:1c:f4:20:e6:ed:bc:b3:6a: 9b:ee:c6:0e:0b:14:1e:b5:c6:a8:bb:78:d8:f6:2b: 3d:4b:66:51:68:e6:eb:01:7e:87:0b:d0:ee:06:cb: c9:f2:50:e4:d2:52:7b:54:3f:8c:02:80:5b:54:ae: 1e:90:4f:91:d5:ab:ca:4d:56:8f:38:55:2b:d8:0f: 19:fd:80:43:b4:94:92:8f:8a:7f:ed:30:1d:fd:66: f9:ac:88:45:bc:f2:56:d7:3b:ee:15:e7:39:f5:70: dd:6a:d3:0c:4e:f8:6d:c3:8f:5d:cb:37:d8:f7:c2: c6:06:36:d3:b3:da:b4:5e:a4:48:bc:1c:87:b3:23: ce:ff:a4:5b:72:54:ea:ec:aa:4f:bc:91:1b:d6:ef: ac:79:d6:05:d7:3b:18:82:16:dc:bd:50:61:24:a0: 36:98:e1:5d:61:25:d4:cd:b4:03:a3:9b:ec:3e:2b: 01:39:95:1f:43:38:1d:b8:3a:4b:a3:77:f2:93:9a: e9:b6:a6:cd:d6:8b:66:9f:27:c2:db:21:66:ec:c6: 8a:3f:d9:e6:d0:85:97:51:25:cb:bb:d2:c7:53:a2: 6c:ff:a5:21:c9:7e:58:90:a4:7e:4b:87:2d:7f:06: ee:ed:76:78:01:6b:fc:43:ea:60:5e:77:0d:b2:28: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.152.0/22 IPv6: 2a04:cdc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201661 Signature Algorithm: sha256WithRSAEncryption 4a:e9:38:c9:02:1b:1b:ee:8a:76:ee:de:1f:eb:ac:85:b6:96: 42:8f:36:f9:4c:ec:3b:16:f8:e1:73:a4:9d:2d:c6:c3:82:9a: 13:cf:3d:58:e7:0a:ab:dd:4e:2f:2d:a6:90:38:68:5b:b2:ce: 16:7f:4b:aa:76:49:09:a6:5a:e6:1b:5a:0c:ae:1e:4c:53:5a: ec:8c:47:cf:e3:11:cf:28:19:a2:0f:e3:a4:15:f6:1b:96:86: 85:67:17:b6:84:ae:ef:08:b8:47:eb:e8:9f:52:97:71:dd:3e: 1b:38:03:61:f7:ca:5f:2c:0b:0a:96:be:8d:5e:bc:be:e4:ae: 31:8f:13:93:73:db:41:d8:84:5c:9c:f3:28:57:56:ba:57:bb: 73:5a:78:c9:8f:17:76:a9:bb:47:cb:80:07:8f:d0:3f:9c:37: 57:2e:41:2d:5b:72:66:76:39:58:6d:41:4a:dd:ae:6a:8c:70: bb:0c:8c:67:59:11:20:cd:97:43:c7:97:54:08:62:27:66:59: 33:a0:61:d4:31:07:94:c8:47:f2:c9:4f:5c:52:94:31:60:71: 44:7d:ab:1d:fe:5e:6d:7e:c5:a3:81:35:81:c5:42:f6:da:68: a8:f3:56:f5:46:3d:0d:8b:96:15:81:95:28:28:94:f5:d6:fb: 39:ef:e1:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WVQsuQSBedE382YGGS0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzA1MTVmNDdkYTkyNWQ5ZjkwMTM4MDhhYTkxMTNjMmJkZTk2ZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbIVzpiuHPQg5u28s2qb7sYOCxQe tcaou3jY9is9S2ZRaObrAX6HC9DuBsvJ8lDk0lJ7VD+MAoBbVK4ekE+R1avKTVaP OFUr2A8Z/YBDtJSSj4p/7TAd/Wb5rIhFvPJW1zvuFec59XDdatMMTvhtw49dyzfY 98LGBjbTs9q0XqRIvByHsyPO/6RbclTq7KpPvJEb1u+sedYF1zsYghbcvVBhJKA2 mOFdYSXUzbQDo5vsPisBOZUfQzgduDpLo3fyk5rptqbN1otmnyfC2yFm7MaKP9nm 0IWXUSXLu9LHU6Js/6UhyX5YkKR+S4ctfwbu7XZ4AWv8Q+pgXncNsijC3wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLMFFfR9qSXZ+QE4CKqRE8K96W2aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2VmMjE5 Mi1mMmQ5LTRhNTYtOTNmNi0xNzM4MjUzOWIwMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZWYyMTky LWYyZDktNGE1Ni05M2Y2LTE3MzgyNTM5YjAwMC8xL3N3VVY5SDJwSmRuNUFUZ0lx cEVUd3IzcGJaby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTWYMA0EAgACMAcDBQMqBM3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTvTANBgkqhkiG9w0BAQsFAAOCAQEASuk4yQIbG+6K du7eH+ushbaWQo82+UzsOxb44XOknS3Gw4KaE889WOcKq91OLy2mkDhoW7LOFn9L qnZJCaZa5htaDK4eTFNa7IxHz+MRzygZog/jpBX2G5aGhWcXtoSu7wi4R+von1KX cd0+GzgDYffKXywLCpa+jV68vuSuMY8Tk3PbQdiEXJzzKFdWule7c1p4yY8Xdqm7 R8uAB4/QP5w3Vy5BLVtyZnY5WG1BSt2uaoxwuwyMZ1kRIM2XQ8eXVAhiJ2ZZM6Bh 1DEHlMhH8slPXFKUMWBxRH2rHf5ebX7Fo4E1gcVC9tpoqPNW9UY9DYuWFYGVKCiU 9db7Oe/hyw== -----END CERTIFICATE-----Generated at Tue Feb 10 10:12:32 2026 by rpki-client