This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer File: S-zMnRp26RRpy2OxK_cl1966-xs.cer (raw, json) Hash identifier: Hb0jjzmQfvat8GJqLxwPjp5OegTq3aEaSyT3UANWEMY= Subject key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7A7FDF18E7E4A52B4612CE50DF337 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198462 IP: 45.82.200.0/22 IP: 185.208.136.0/22 IP: 2a0d:a600::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a7:fd:f1:8e:7e:4a:52:b4:61:2c:e5:0d:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:7b:d1:67:cb:58:7f:3c:84:32:a3:cb:1d: 16:94:aa:16:83:1e:90:f3:3e:af:9d:90:ba:f4:06: 2a:d0:e7:ab:c5:c8:e6:81:9a:f7:18:cc:dd:f5:cc: 62:d6:76:da:cc:9b:64:ef:14:c2:72:9f:fa:01:e3: 3b:91:b1:e1:a5:9c:1e:18:b9:ea:16:1e:bc:48:4b: c2:51:02:42:e0:ca:c0:c7:ad:73:dc:4c:01:64:fc: 70:14:c3:bf:13:eb:8a:cc:2c:ae:89:ef:7a:0f:83: ec:60:1b:bc:7c:a4:8f:c7:8c:13:f9:6c:4c:40:dd: 33:3a:e5:03:5b:95:e4:aa:ac:01:97:ea:8a:71:8b: b7:19:a3:a6:25:0f:07:02:c8:16:c7:06:40:cc:b1: fb:5c:87:07:21:60:c3:63:21:8f:9a:6f:17:48:0c: ff:14:43:b5:b8:80:97:8a:d1:9a:4f:c4:1f:bf:c9: f4:60:63:c7:d4:a5:62:3b:ab:d2:dc:3b:64:be:d2: 9e:96:d2:c4:21:e6:3b:77:d6:80:f5:e8:57:dc:29: 8c:18:69:82:b1:64:28:21:4b:79:14:a5:58:68:df: be:36:2b:3d:f3:04:97:47:1d:47:16:94:ac:99:26: 91:43:b1:15:6e:25:40:26:6b:26:ed:60:1d:85:bc: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.200.0/22 185.208.136.0/22 IPv6: 2a0d:a600::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198462 Signature Algorithm: sha256WithRSAEncryption 97:c7:a9:36:e5:8a:42:7d:f0:cd:9a:65:c2:44:3d:09:03:62: 06:21:b8:c9:fa:c9:5c:81:4b:37:60:51:1b:ff:8a:12:69:65: e4:29:61:94:c5:30:c4:db:ae:7c:3f:46:b3:49:af:a0:3b:33: b3:d6:f1:f6:db:98:f4:7e:61:ba:ee:0d:12:76:c0:68:5b:33: ae:28:9e:fd:a4:f2:9d:a4:6c:76:9d:99:20:8c:f4:08:b2:34: 3a:9c:ec:5d:eb:ab:0e:7c:64:00:d7:d8:51:58:af:b4:14:84: db:a9:19:c2:ca:77:1e:00:9d:18:2f:72:ce:02:ca:a9:f3:8d: ba:7d:3f:43:1e:19:64:05:df:52:c7:f9:63:67:9f:cd:ee:bd: a7:4b:95:5d:3b:e1:68:1a:10:2e:87:e7:07:fd:7a:f6:5a:7e: 1e:25:f6:16:96:37:17:fa:e5:c8:3d:93:bf:e9:89:b2:37:2a: d0:96:39:19:d4:e1:ef:60:ac:1d:26:8f:98:dd:ec:1f:00:89: 11:93:c4:40:0e:10:63:0f:c3:08:e2:45:c2:d7:ef:8d:6d:95: a8:4a:4d:62:9e:34:1e:b5:72:90:8b:63:44:9d:e6:b7:8a:3a: 44:43:16:c9:bf:9d:bf:bb:94:22:66:70:bd:81:c0:41:5b:e6: bf:bc:ca:7b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6x6f98Y5+SlK0YSzlDfM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmVjY2M5ZDFhNzZlOTE0NjljYjYzYjEyYmY3MjVkN2RlYmFmYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxR70WfLWH88hDKjyx0WlKoWgx6Q 8z6vnZC69AYq0OerxcjmgZr3GMzd9cxi1nbazJtk7xTCcp/6AeM7kbHhpZweGLnq Fh68SEvCUQJC4MrAx61z3EwBZPxwFMO/E+uKzCyuie96D4PsYBu8fKSPx4wT+WxM QN0zOuUDW5XkqqwBl+qKcYu3GaOmJQ8HAsgWxwZAzLH7XIcHIWDDYyGPmm8XSAz/ FEO1uICXitGaT8Qfv8n0YGPH1KViO6vS3DtkvtKeltLEIeY7d9aA9ehX3CmMGGmC sWQoIUt5FKVYaN++Nis98wSXRx1HFpSsmSaRQ7EVbiVAJmsm7WAdhbxRBwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEvszJ0adukUactjsSv3JdfeuvsbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzc2OGYx NC1hNzIxLTQ2ZjAtOTE5OS00ZjRiOTk0ZTBlYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNzY4ZjE0 LWE3MjEtNDZmMC05MTk5LTRmNGI5OTRlMGViMi8xL1Mtek1uUnAyNlJScHkyT3hL X2NsMTk2Ni14cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLVLIAwQCudCIMA0EAgACMAcDBQIqDaYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMHPjANBgkqhkiG9w0BAQsFAAOCAQEAl8ep NuWKQn3wzZplwkQ9CQNiBiG4yfrJXIFLN2BRG/+KEmll5ClhlMUwxNuufD9Gs0mv oDszs9bx9tuY9H5huu4NEnbAaFszriie/aTynaRsdp2ZIIz0CLI0OpzsXeurDnxk ANfYUVivtBSE26kZwsp3HgCdGC9yzgLKqfONun0/Qx4ZZAXfUsf5Y2efze69p0uV XTvhaBoQLofnB/169lp+HiX2FpY3F/rlyD2Tv+mJsjcq0JY5GdTh72CsHSaPmN3s HwCJEZPEQA4QYw/DCOJFwtfvjW2VqEpNYp40HrVykItjRJ3mt4o6REMWyb+dv7uU ImZwvYHAQVvmv7zKew== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:09 2026 by rpki-client