This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer File: syu38vqMQUxnGIvau_t2IVaTuoc.cer (raw, json) Hash identifier: kQnfqMYinkpgK4RwAB+Y2SGpun5k4Yukb3J6Ncx9/gM= Subject key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB066F7F68340E86DF60A675B11500 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57550 IP: 91.232.236.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:06:6f:7f:68:34:0e:86:df:60:a6:75:b1:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:55:95:94:61:ed:38:4c:8f:27:ae:50:e6: 83:61:db:5b:26:94:6a:ba:a3:29:c2:92:5b:8d:8e: 1d:96:d6:2c:49:d7:8f:37:48:c3:3d:9f:f8:62:72: 5c:09:c7:d7:8e:f2:3c:8e:9a:2e:18:aa:96:38:65: f2:db:93:39:4c:79:63:48:7a:f4:78:24:d1:1c:4e: 3a:e3:64:d1:5b:9d:d5:90:d3:2d:58:96:5d:39:83: 5d:6a:63:d2:91:d4:b2:1b:21:a5:a3:09:ea:62:e3: b4:fc:00:aa:fc:db:c9:54:1c:fa:c7:33:c8:18:2a: f9:2f:58:98:1d:3c:02:9c:18:0d:81:92:d2:b5:7e: 70:f3:6b:e9:62:3d:48:2a:84:d0:90:a8:05:5f:08: eb:a3:ab:e2:4d:42:03:cb:58:c5:d7:4b:de:6a:8e: 01:2f:0d:1a:61:55:47:d7:c0:02:ae:14:71:5c:40: a7:66:34:2c:7e:28:e9:59:b8:e5:90:5e:ab:7e:3d: d7:21:41:57:f0:e1:4d:27:ca:2d:73:a1:f6:9e:ba: b4:83:62:d1:a0:a5:d5:ad:56:6e:30:b1:27:fd:fe: 61:3f:74:28:dc:37:3a:7c:5d:30:76:02:e1:7c:78: 41:0b:2c:76:fa:91:bd:94:14:c4:4b:eb:a5:a5:eb: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.236.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57550 Signature Algorithm: sha256WithRSAEncryption 32:90:20:21:83:ee:b3:b9:7b:c0:cc:f5:d8:54:a4:4c:6a:b7: 71:df:28:85:9f:96:b7:5f:21:88:95:f6:4b:bd:08:64:02:d2: 46:e0:82:1a:9c:54:2f:ec:7c:69:a3:fa:44:f5:3d:fb:27:0b: cb:cb:18:f8:62:b1:9e:b4:d4:c7:58:30:79:7b:70:0c:08:8e: 86:45:79:7e:94:e0:af:a6:70:82:0c:dd:ec:17:fc:2e:ce:60: 6e:5b:35:fc:46:71:dc:e9:3e:e5:ad:c9:c4:ad:97:fe:04:32: ed:18:20:02:92:df:11:de:f2:91:18:60:08:66:c9:3e:b7:22: 75:ae:b6:9c:1c:8d:a8:02:20:85:b5:71:9c:16:01:a5:c5:d0: 79:d9:74:7e:66:db:17:92:cc:b3:f4:96:17:08:15:77:d1:6b: 5a:fd:71:ce:45:65:18:42:1a:c4:9a:a4:9d:11:24:b7:07:25: 8b:73:1b:af:b8:dd:a4:85:31:7c:06:85:00:82:12:0d:38:71: b4:37:8e:0d:9a:e6:8b:41:c4:6c:f8:32:94:26:f5:74:0e:08: 89:06:50:cf:70:60:d8:10:70:ef:a2:93:c7:37:20:d5:1e:24: f4:89:98:48:15:bd:3c:f7:c2:93:fe:ca:fa:63:d9:e4:8a:d5: 47:a0:9c:a0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9ywZvf2g0DobfYKZ1sRUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzJiYjdmMmZhOGM0MTRjNjcxODhiZGFiYmZiNzYyMTU2OTNiYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEtVlZRh7ThMjyeuUOaDYdtbJpRq uqMpwpJbjY4dltYsSdePN0jDPZ/4YnJcCcfXjvI8jpouGKqWOGXy25M5THljSHr0 eCTRHE4642TRW53VkNMtWJZdOYNdamPSkdSyGyGlownqYuO0/ACq/NvJVBz6xzPI GCr5L1iYHTwCnBgNgZLStX5w82vpYj1IKoTQkKgFXwjro6viTUIDy1jF10veao4B Lw0aYVVH18ACrhRxXECnZjQsfijpWbjlkF6rfj3XIUFX8OFNJ8otc6H2nrq0g2LR oKXVrVZuMLEn/f5hP3Qo3Dc6fF0wdgLhfHhBCyx2+pG9lBTES+ulpevXwwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLMrt/L6jEFMZxiL2rv7diFWk7qHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2FmMzFh Yi0yZTM0LTQ3ZmItOTYxMS0yMjNhNGQ5NDcwOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvYWYzMWFi LTJlMzQtNDdmYi05NjExLTIyM2E0ZDk0NzA5ZS8xL3N5dTM4dnFNUVV4bkdJdmF1 X3QySVZhVHVvYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+jsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgzjANBgkqhkiG9w0BAQsFAAOCAQEAMpAgIYPus7l7wMz12FSkTGq3cd8ohZ+W t18hiJX2S70IZALSRuCCGpxUL+x8aaP6RPU9+ycLy8sY+GKxnrTUx1gweXtwDAiO hkV5fpTgr6Zwggzd7Bf8Ls5gbls1/EZx3Ok+5a3JxK2X/gQy7RggApLfEd7ykRhg CGbJPrcida62nByNqAIghbVxnBYBpcXQedl0fmbbF5LMs/SWFwgVd9FrWv1xzkVl GEIaxJqknREktwcli3Mbr7jdpIUxfAaFAIISDThxtDeODZrmi0HEbPgylCb1dA4I iQZQz3Bg2BBw76KTxzcg1R4k9ImYSBW9PPfCk/7K+mPZ5IrVR6CcoA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:04 2026 by rpki-client