This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer (raw, json) Hash identifier: gK8XSlZcA0y6vJmXgImDvrIss/MTwISBMkQTJLPAJFk= Subject key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B0179A8B67BA22463435D3FCEE510 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.86.92.0/22 IP: 78.24.120.0/21 IP: 93.92.17.0 -- 93.92.23.255 IP: 2a0f:69c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:01:79:a8:b6:7b:a2:24:63:43:5d:3f:ce:e5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:e0:69:b7:ca:74:a5:64:31:09:71:ee:b6: ba:24:27:87:ce:ac:47:23:64:21:9d:86:03:ba:2e: 42:5c:62:ab:b6:7e:7d:de:f4:32:50:d3:ab:df:e2: 61:35:44:4a:d8:8f:b1:1c:b0:1a:f0:a9:fe:47:c0: 91:97:be:18:8e:09:d2:1f:af:a0:49:ae:1e:7b:6e: cc:ff:99:3b:15:a0:54:36:e3:ac:c4:94:31:79:d2: 30:38:4b:ba:97:99:9d:72:a4:41:2c:ee:3b:00:09: d1:52:d6:7c:30:50:2e:a3:72:38:11:b2:57:39:b6: 1e:9c:77:a5:4b:79:7e:a4:e3:41:19:f8:49:04:13: b6:55:8c:da:48:48:97:43:61:bf:b5:a4:b4:e7:a4: cb:2e:5a:b8:68:a5:24:f6:76:c8:1a:7e:a7:a8:d0: 3a:cd:0f:d2:e6:d1:01:7d:a6:69:b7:f7:2c:28:c2: 71:e0:dc:c8:4c:ad:64:3c:6b:85:00:31:47:2d:ec: ba:8d:41:f1:04:99:8b:c3:ed:26:6f:03:75:8f:96: 83:f1:d8:6b:2b:6d:ee:80:8b:8e:ba:a4:30:09:c3: 83:1d:e7:65:00:f2:b7:92:bf:70:d4:3a:a3:c9:13: 6e:bc:9d:79:50:8a:85:f0:4d:54:79:69:32:1f:5c: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.92.0/22 78.24.120.0/21 93.92.17.0-93.92.23.255 IPv6: 2a0f:69c0::/29 Signature Algorithm: sha256WithRSAEncryption 7d:e6:04:bc:e0:d7:e4:6b:07:b8:21:57:db:de:a7:6e:cd:9b: 5d:25:d7:88:59:15:9c:eb:91:4d:27:dd:4f:bf:57:60:9c:25: 71:40:77:4d:24:c7:c0:ca:f8:8b:ba:5c:be:a6:64:bb:6e:d6: 06:98:b1:dd:9b:b4:13:b8:41:ca:c7:75:e3:4a:f8:05:27:c3: 8f:0b:46:58:86:59:ec:b8:91:cf:ab:5e:2f:76:1e:2c:2c:b0: fe:f0:e7:a8:4a:24:6d:82:5d:4b:34:01:75:67:eb:f8:dc:3c: 21:4f:1d:45:7a:93:9d:21:1c:4e:05:e6:de:1d:7f:42:85:64: 17:f8:39:90:0d:34:52:07:e3:ff:d1:8b:7f:5b:5a:1f:85:30: 73:e9:60:1e:79:47:85:f5:12:22:f7:4b:d0:f6:2d:76:1e:73: 9b:93:cc:fc:cf:03:7c:30:fb:a3:9f:b9:59:8a:48:2d:6b:02: 7b:a5:78:b7:2b:b4:28:4d:a8:93:57:cf:49:52:d8:b8:a1:97: f6:6c:8c:d0:4c:de:16:c1:49:9f:66:42:0e:7a:fe:97:d0:43: 21:b5:a6:ff:ee:84:b0:47:7c:c2:b7:47:f8:9f:c3:ab:4f:e4: 3e:03:31:fb:b2:ed:bc:32:c6:48:6c:53:41:0f:fe:97:8f:57: c7:6e:56:da -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt9WwF5qLZ7oiRjQ10/zuUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjc4Y2FhNzc0MWY5OWI5ZmJjYTRmNDk0M2M4Yjc5ZjAwYmViZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo3gabfKdKVkMQlx7ra6JCeHzqxH I2QhnYYDui5CXGKrtn593vQyUNOr3+JhNURK2I+xHLAa8Kn+R8CRl74YjgnSH6+g Sa4ee27M/5k7FaBUNuOsxJQxedIwOEu6l5mdcqRBLO47AAnRUtZ8MFAuo3I4EbJX ObYenHelS3l+pONBGfhJBBO2VYzaSEiXQ2G/taS056TLLlq4aKUk9nbIGn6nqNA6 zQ/S5tEBfaZpt/csKMJx4NzITK1kPGuFADFHLey6jUHxBJmLw+0mbwN1j5aD8dhr K23ugIuOuqQwCcODHedlAPK3kr9w1DqjyRNuvJ15UIqF8E1UeWkyH1yuoQIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFEt4yqd0H5m5+8pPSUPIt58Avr/4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzNjODg1 NC1kM2U2LTQ1ODEtYWIzMy02M2NlZDg3NjIwNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvM2M4ODU0 LWQzZTYtNDU4MS1hYjMzLTYzY2VkODc2MjA0Mi8xL1MzaktwM1FmbWJuN3lrOUpR OGkzbndDLXZfZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQCLVZcAwQDThh4MAwDBABdXBEDBANdXBAwDQQC AAIwBwMFAyoPacAwDQYJKoZIhvcNAQELBQADggEBAH3mBLzg1+RrB7ghV9vep27N m10l14hZFZzrkU0n3U+/V2CcJXFAd00kx8DK+Iu6XL6mZLtu1gaYsd2btBO4QcrH deNK+AUnw48LRliGWey4kc+rXi92HiwssP7w56hKJG2CXUs0AXVn6/jcPCFPHUV6 k50hHE4F5t4df0KFZBf4OZANNFIH4//Ri39bWh+FMHPpYB55R4X1EiL3S9D2LXYe c5uTzPzPA3ww+6OfuVmKSC1rAnuleLcrtChNqJNXz0lS2Lihl/ZsjNBM3hbBSZ9m Qg56/pfQQyG1pv/uhLBHfMK3R/ifw6tP5D4DMfuy7bwyxkhsU0EP/pePV8duVto= -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:00 2026 by rpki-client