This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer File: syHLgokI9DB0nuOl8qYt5fgi99E.cer (raw, json) Hash identifier: sPrdsiZ6oHVVMBTYmRTPs/EKcF3HBCW+7sdBKL8+F2g= Subject key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12D27962F06817F38CC59E4BC011AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41789 IP: 46.16.8.0/22 IP: 46.227.24.0/21 IP: 91.142.144.0/20 IP: 159.255.0.0 -- 159.255.23.255 IP: 159.255.28.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d2:79:62:f0:68:17:f3:8c:c5:9e:4b:c0:11:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:bd:c0:27:63:76:64:97:70:d9:95:7e:d8: 6b:82:16:82:ef:d2:6b:2f:69:f1:22:4c:30:83:6e: 7f:15:13:53:03:6d:eb:d9:52:36:17:b6:be:ff:e8: 6e:02:eb:28:cc:60:fd:59:5e:b6:19:aa:be:55:b5: a5:34:68:ab:ab:30:9e:fb:54:00:98:b0:62:34:f6: 2d:8f:33:ad:44:66:6f:07:1d:4b:cf:86:37:27:1f: 3d:5e:f2:af:f6:81:64:1f:e1:d8:62:e1:30:04:53: b6:a2:24:67:3e:6f:ca:0d:14:c5:30:be:ae:8f:45: 2b:ef:8f:91:69:5b:b5:99:71:87:97:c7:17:07:fe: 4f:f1:39:68:6f:23:fa:6c:51:66:d3:b6:13:17:d6: e3:16:74:5e:cc:57:3a:fd:cf:22:3b:31:b7:c7:1b: d4:5c:60:fd:1b:0f:c8:4e:d3:8c:e9:d7:af:ef:74: e0:bb:ce:b7:bc:46:d9:17:5d:c6:2b:ee:f0:34:4a: c7:d6:f8:f4:94:5a:c9:d0:21:46:e5:a2:d3:ba:d7: 5d:95:49:ba:35:4b:75:b8:63:c8:26:b7:af:f0:b2: f5:b3:11:b7:87:e3:c0:9a:50:3f:98:9e:ed:a9:14: f4:29:09:9d:6c:10:c9:a1:c2:e6:1c:5a:cd:4e:80: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.8.0/22 46.227.24.0/21 91.142.144.0/20 159.255.0.0-159.255.23.255 159.255.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41789 Signature Algorithm: sha256WithRSAEncryption 61:ef:60:66:cf:af:f4:e5:89:fc:ee:19:4d:05:d3:b0:54:49: 9f:fd:8c:1a:48:4b:56:82:fd:56:fd:1b:f2:f6:87:3a:03:2b: 83:10:bc:61:ce:7f:71:d0:ce:ed:3c:24:5f:72:a2:47:07:52: 56:70:4a:72:33:a4:ec:09:d9:a8:01:b2:62:b4:aa:ec:6c:6d: fe:65:88:de:0b:ee:ae:3d:57:21:26:b7:38:7a:6b:ce:7b:7e: 61:a3:df:e0:03:d0:ce:41:70:86:e9:88:c5:11:27:29:69:12: 6c:45:da:7e:ca:f2:2e:32:cd:7c:40:2a:54:64:6a:a6:50:33: 91:0b:16:ce:32:27:2e:b0:b8:f8:62:ea:b5:42:e6:e9:3b:51: e7:cb:10:cc:af:9e:ea:89:a9:3c:af:1e:be:f8:89:64:8f:db: a7:d1:05:32:24:86:37:03:e6:70:fe:77:9b:cb:84:b3:ce:8b: 63:ab:82:5f:cb:29:ed:de:26:f2:3f:9a:53:77:40:c5:4e:3d: 6d:25:9b:1e:f9:1e:ed:cf:86:70:e4:22:ff:8f:b2:bd:03:f8: f4:24:9c:04:29:aa:f1:20:b0:5b:7e:2f:27:07:d7:2f:b0:d9: dd:2d:73:9e:b2:98:aa:56:6c:e8:2e:92:43:bf:6f:55:ac:e0: e0:27:02:a8 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt8EtJ5YvBoF/OMxZ5LwBGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzIxY2I4Mjg5MDhmNDMwNzQ5ZWUzYTVmMmE2MmRlNWY4MjJmN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j29wCdjdmSXcNmVfthrghaC79Jr L2nxIkwwg25/FRNTA23r2VI2F7a+/+huAusozGD9WV62Gaq+VbWlNGirqzCe+1QA mLBiNPYtjzOtRGZvBx1Lz4Y3Jx89XvKv9oFkH+HYYuEwBFO2oiRnPm/KDRTFML6u j0Ur74+RaVu1mXGHl8cXB/5P8TlobyP6bFFm07YTF9bjFnRezFc6/c8iOzG3xxvU XGD9Gw/ITtOM6dev73Tgu863vEbZF13GK+7wNErH1vj0lFrJ0CFG5aLTutddlUm6 NUt1uGPIJrev8LL1sxG3h+PAmlA/mJ7tqRT0KQmdbBDJocLmHFrNToAdhwIDAQAB o4ICvzCCArswHQYDVR0OBBYEFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2NjYWEx YS05ZGFhLTQ0YjgtOWUyNi04N2YzNDE4ODg1NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvY2NhYTFh LTlkYWEtNDRiOC05ZTI2LTg3ZjM0MTg4ODU2MC8xL3N5SExnb2tJOURCMG51T2w4 cVl0NWZnaTk5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUF BwEHAQH/BC8wLTArBAIAATAlAwQCLhAIAwQDLuMYAwQEW46QMAsDAwCf/wMEA5// EAMEAp//HDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAoz0wDQYJKoZIhvcNAQEL BQADggEBAGHvYGbPr/TlifzuGU0F07BUSZ/9jBpIS1aC/Vb9G/L2hzoDK4MQvGHO f3HQzu08JF9yokcHUlZwSnIzpOwJ2agBsmK0quxsbf5liN4L7q49VyEmtzh6a857 fmGj3+AD0M5BcIbpiMURJylpEmxF2n7K8i4yzXxAKlRkaqZQM5ELFs4yJy6wuPhi 6rVC5uk7UefLEMyvnuqJqTyvHr74iWSP26fRBTIkhjcD5nD+d5vLhLPOi2Orgl/L Ke3eJvI/mlN3QMVOPW0lmx75Hu3PhnDkIv+Psr0D+PQknAQpqvEgsFt+LycH1y+w 2d0tc56ymKpWbOgukkO/b1Ws4OAnAqg= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:48 2026 by rpki-client