This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer File: S21-pBAzg38IwoxHQphLgrj0Q98.cer (raw, json) Hash identifier: FR5/2PZJqXVz1r7wPWjWqma61AVlq8pfkpm6DxQFapo= Subject key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79106E3EDB4C894B2B7314A35466AA62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 85.209.180.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6e:3e:db:4c:89:4b:2b:73:14:a3:54:66:aa:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b6d7ea41033837f08c28c4742984b82b8f443df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:65:6f:19:c9:8c:dd:7c:2f:2b:a3:86:8b: a3:e6:0c:76:00:6f:42:5f:08:8f:b4:23:16:5a:e6: fc:92:22:85:e8:56:f3:f2:2e:ae:50:9f:9e:62:11: ee:57:65:b8:81:36:09:7a:e5:9e:b5:3c:0b:4f:00: a8:19:4a:69:c2:b7:a3:75:d8:80:a0:d2:20:92:3c: 90:7a:af:78:05:83:d0:61:71:dc:43:24:45:2e:74: 15:47:65:06:98:7b:5d:91:75:2c:7a:93:13:39:18: 50:70:18:fc:56:25:51:f0:4d:54:a8:30:7c:db:27: ea:97:5f:f2:1d:6f:36:bf:32:77:ba:0b:ae:0c:8f: 40:57:4b:aa:7e:8c:f7:d6:c7:79:e0:eb:d6:71:a6: a4:44:f8:2c:86:96:6d:da:fa:31:12:d9:20:27:44: ec:70:df:e2:bb:60:19:f4:50:3b:03:ce:83:d2:5c: 2b:74:17:6c:75:8b:ba:41:6d:b0:a5:60:96:5f:a0: 5e:90:ba:df:8e:c1:9f:7b:9f:b2:94:c3:b4:d1:33: 99:ed:e7:69:b6:ce:d6:fb:14:b2:15:a8:35:f5:1a: b0:23:05:78:a1:72:e6:7e:bf:48:ed:32:cb:6a:23: 61:4a:cf:f5:04:9b:20:c1:78:d7:3e:94:4a:dc:a1: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.180.0/22 Signature Algorithm: sha256WithRSAEncryption a5:d7:36:f5:3e:9d:ac:46:12:03:14:ee:c3:60:6e:3f:55:6d: 69:3e:46:ce:99:03:48:59:d5:74:21:83:4f:29:18:04:65:79: 0e:a7:83:9e:22:42:8f:c4:c1:10:87:db:28:3b:c7:c3:db:73: 6d:e2:3c:13:1e:84:50:e1:24:ed:dd:d0:9e:fa:8c:bd:8f:74: 61:e1:24:dc:ba:d8:c6:41:58:78:65:9e:dc:33:80:00:22:a3: 26:f4:c1:e4:df:94:cc:fd:af:c8:27:e2:2d:31:c5:5e:62:e6: 58:df:4c:0c:ea:c2:6d:3b:58:d5:a1:be:ce:c2:e0:d0:5d:cd: 0a:91:e6:b6:20:44:eb:6a:81:b2:be:97:ff:6c:fd:6e:b9:8e: e4:78:7e:f0:74:5b:27:74:a1:2f:b1:11:b9:37:65:54:c4:a1: 89:e4:bd:d3:33:d1:93:c9:18:ed:d8:be:b2:8e:ce:e2:84:02: c2:0e:4a:1c:27:ac:83:78:4e:eb:53:bc:61:5a:27:ed:37:0d: e2:3b:22:44:9f:0e:99:fa:d1:5f:5c:90:25:94:89:92:56:86: 7e:e4:ac:cd:8b:35:9c:c3:d0:d2:51:72:19:e9:73:c0:2c:36: b7:94:8e:6c:97:82:3a:bc:ee:c7:d9:49:e1:c4:d5:a2:37:00: 75:61:1e:1e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EG4+20yJSytzFKNUZqpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjZkN2VhNDEwMzM4MzdmMDhjMjhjNDc0Mjk4NGI4MmI4ZjQ0M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklJlbxnJjN18Lyujhouj5gx2AG9C XwiPtCMWWub8kiKF6Fbz8i6uUJ+eYhHuV2W4gTYJeuWetTwLTwCoGUppwrejddiA oNIgkjyQeq94BYPQYXHcQyRFLnQVR2UGmHtdkXUsepMTORhQcBj8ViVR8E1UqDB8 2yfql1/yHW82vzJ3uguuDI9AV0uqfoz31sd54OvWcaakRPgshpZt2voxEtkgJ0Ts cN/iu2AZ9FA7A86D0lwrdBdsdYu6QW2wpWCWX6BekLrfjsGfe5+ylMO00TOZ7edp ts7W+xSyFag19RqwIwV4oXLmfr9I7TLLaiNhSs/1BJsgwXjXPpRK3KHnaQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEttfqQQM4N/CMKMR0KYS4K49EPfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzFkMDY4 MS1mZTIwLTQ3YTMtOTRkZi01ZWU4NzIxYzFjZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMWQwNjgx LWZlMjAtNDdhMy05NGRmLTVlZTg3MjFjMWNmYy8xL1MyMS1wQkF6ZzM4SXdveEhR cGhMZ3JqMFE5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCVdG0MA0GCSqGSIb3DQEBCwUAA4IBAQCl1zb1 Pp2sRhIDFO7DYG4/VW1pPkbOmQNIWdV0IYNPKRgEZXkOp4OeIkKPxMEQh9soO8fD 23Nt4jwTHoRQ4STt3dCe+oy9j3Rh4STcutjGQVh4ZZ7cM4AAIqMm9MHk35TM/a/I J+ItMcVeYuZY30wM6sJtO1jVob7OwuDQXc0Kkea2IETraoGyvpf/bP1uuY7keH7w dFsndKEvsRG5N2VUxKGJ5L3TM9GTyRjt2L6yjs7ihALCDkocJ6yDeE7rU7xhWift Nw3iOyJEnw6Z+tFfXJAllImSVoZ+5KzNizWcw9DSUXIZ6XPALDa3lI5sl4I6vO7H 2UnhxNWiNwB1YR4e -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:42 2026 by rpki-client