This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer File: 0kSCMx_jdh3lOpm9N8j9am-foAc.cer (raw, json) Hash identifier: xOh2RaZQxfmPJmS6PwWHopKe0eWogiUJMMyVyIV/Xg8= Subject key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835361A1557B86027990DF2D8593A93 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.143.184.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:36:1a:15:57:b8:60:27:99:0d:f2:d8:59:3a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:09:7d:50:aa:9c:d4:d7:c4:cc:61:3f:f5: 65:85:7a:c4:d6:5a:46:0a:4b:97:da:11:c8:3b:64: cd:f5:09:0c:34:64:32:8c:5a:ec:36:dc:89:b1:6b: 7d:a2:70:fe:7c:cb:65:e9:e5:58:92:9a:e5:0b:07: 37:9b:4f:25:16:2d:04:01:32:9e:40:31:dc:ea:f9: 59:17:88:a6:df:97:86:1c:cb:5d:22:ef:25:94:ac: 68:bd:43:53:42:67:ae:09:79:63:b1:b9:d2:56:0d: a1:8b:f1:c4:a8:a3:05:ec:ca:17:87:50:9c:7d:3c: f4:cd:b1:a4:fd:04:39:c3:10:9b:a7:84:7d:91:f3: b2:d0:e7:5c:32:22:72:fd:04:e7:90:4b:f0:8e:29: e5:4b:85:28:ab:57:02:11:ae:25:e7:35:c5:39:a4: 20:91:14:66:1e:09:98:9d:72:21:d9:e2:d4:33:7b: b6:e5:16:3d:f6:9f:84:8c:cd:f3:c0:e3:30:cf:89: b4:1b:15:e5:6d:1c:b7:9f:42:36:71:23:92:8f:74: 36:81:a9:7e:c5:91:18:43:6a:ed:2b:2b:d3:9b:de: 3e:22:a0:ff:d6:4d:47:6e:41:c2:f8:33:e2:35:ff: 0a:d9:42:42:d6:e1:d0:84:f4:46:6b:6b:bc:04:33: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.184.0/22 Signature Algorithm: sha256WithRSAEncryption a3:d0:59:9f:6f:d3:11:d9:6a:c2:3d:9d:93:7c:63:12:ae:43: 01:2e:51:50:ad:20:29:25:31:d0:1d:81:3e:29:ac:f3:8e:3e: eb:ef:4d:e5:88:29:a8:41:a0:92:e9:31:59:eb:e2:79:2c:cc: 58:f0:b3:39:f5:7b:2c:98:da:85:cd:6b:b4:28:c1:97:52:07: 78:97:c2:0e:78:67:b3:97:e8:00:98:80:d7:f8:d8:22:8b:17: 01:b4:90:60:c0:81:95:38:5c:e1:fa:f8:61:60:f9:11:ac:fd: 5f:c5:d4:fc:dd:0f:02:8b:7c:42:80:78:e9:75:e0:45:e4:96: c4:73:c1:c3:22:a9:f2:f6:38:66:0e:49:d0:e1:c2:a1:2a:0c: 19:fa:d5:93:1f:ab:38:40:2d:45:cc:e0:ba:86:92:4d:a8:3d: 5f:88:51:b1:8b:6b:2c:07:21:62:f8:60:5b:0a:12:15:08:5c: 9a:82:f7:0c:fe:ae:be:10:ff:0c:0e:ff:15:69:64:86:a8:c3: 3a:09:63:31:b4:e9:4e:1e:4b:1f:3e:03:51:49:c8:8f:8f:67: c5:a3:ef:58:aa:8e:52:e2:26:77:4e:cd:fa:b5:a0:e1:cb:88: 35:9d:40:a5:24:25:e5:fb:88:4e:f2:4b:9e:a5:97:2a:8a:fa: 6b:d4:7e:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NTYaFVe4YCeZDfLYWTqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjQ0ODIzMzFmZTM3NjFkZTUzYTk5YmQzN2M4ZmQ2YTZmOWZhMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVcJfVCqnNTXxMxhP/VlhXrE1lpG CkuX2hHIO2TN9QkMNGQyjFrsNtyJsWt9onD+fMtl6eVYkprlCwc3m08lFi0EATKe QDHc6vlZF4im35eGHMtdIu8llKxovUNTQmeuCXljsbnSVg2hi/HEqKMF7MoXh1Cc fTz0zbGk/QQ5wxCbp4R9kfOy0OdcMiJy/QTnkEvwjinlS4Uoq1cCEa4l5zXFOaQg kRRmHgmYnXIh2eLUM3u25RY99p+EjM3zwOMwz4m0GxXlbRy3n0I2cSOSj3Q2gal+ xZEYQ2rtKyvTm94+IqD/1k1HbkHC+DPiNf8K2UJC1uHQhPRGa2u8BDM4kQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNJEgjMf43Yd5TqZvTfI/Wpvn6AHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzI1YjYx Yi0zN2U5LTQ0MDgtYWNjMS04N2MwM2NkZDdmOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjViNjFi LTM3ZTktNDQwOC1hY2MxLTg3YzAzY2RkN2Y5Zi8xLzBrU0NNeF9qZGgzbE9wbTlO OGo5YW0tZm9BYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLY+4MA0GCSqGSIb3DQEBCwUAA4IBAQCj0Fmf b9MR2WrCPZ2TfGMSrkMBLlFQrSApJTHQHYE+Kazzjj7r703liCmoQaCS6TFZ6+J5 LMxY8LM59XssmNqFzWu0KMGXUgd4l8IOeGezl+gAmIDX+NgiixcBtJBgwIGVOFzh +vhhYPkRrP1fxdT83Q8Ci3xCgHjpdeBF5JbEc8HDIqny9jhmDknQ4cKhKgwZ+tWT H6s4QC1FzOC6hpJNqD1fiFGxi2ssByFi+GBbChIVCFyagvcM/q6+EP8MDv8VaWSG qMM6CWMxtOlOHksfPgNRSciPj2fFo+9Yqo5S4iZ3Ts36taDhy4g1nUClJCXl+4hO 8kuepZcqivpr1H7s -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:39 2026 by rpki-client