This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer (raw, json) Hash identifier: Ggp9nEUdnlHvWr5nakRHYg0ikdSSPv7A8cSmc7TjBzg= Subject key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB59F78C08055DAFCAA0BC7A8E24CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 167.94.170.0 -- 167.94.173.255 IP: 185.251.144.0/22 IP: 190.102.100.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:59:f7:8c:08:05:5d:af:ca:a0:bc:7a:8e:24:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b8d822165e7f01f722c973967f7554605240802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:b3:6e:14:33:0f:4e:ee:dc:1e:b3:1a:e2: 7b:2b:d9:61:34:86:91:83:4f:ce:db:f7:5a:28:1f: 02:76:9c:47:04:2b:ec:3e:0f:24:b2:6f:f1:d6:b5: 2b:2f:4f:cb:27:3a:d9:48:20:b7:a1:4f:72:55:35: d8:58:ce:24:be:df:c7:ca:90:93:84:00:3e:b6:2f: 0f:66:ce:58:5c:5b:1e:15:e3:0c:ca:e9:3a:38:ea: 89:d1:2e:34:4f:28:d1:a4:df:f9:91:e4:db:85:b8: 41:49:65:2a:56:4d:4c:59:c4:3e:fc:16:45:09:cf: ec:67:7a:ee:49:d2:5d:16:63:0e:68:ea:3d:12:9f: 15:83:f2:7f:6f:67:fe:cb:fc:bb:bc:21:68:ad:4a: c4:b7:a2:a2:fc:2a:e9:cb:10:12:6c:f5:a0:29:dc: 5c:e3:e6:08:bf:a5:93:f9:b2:70:ab:d2:9e:c3:ea: b5:80:66:02:6c:f4:3f:e1:7b:5b:f8:af:f5:ad:bd: d4:56:e6:01:a9:de:5c:ca:f5:a2:ce:f6:11:4d:e1: c7:3a:f2:84:2f:d8:70:4d:6f:b5:80:5a:5d:e4:89: 77:1e:8f:6c:f1:d5:0b:5c:63:91:83:65:c5:39:d0: ed:06:33:51:41:47:9d:ab:2b:f5:80:b3:7d:82:3c: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.94.170.0-167.94.173.255 185.251.144.0/22 190.102.100.0/22 Signature Algorithm: sha256WithRSAEncryption 98:ce:e3:bb:2d:68:ea:ba:18:1f:91:44:3d:7d:63:ae:08:b6: ab:18:c4:a8:d7:68:7f:1b:ff:7d:56:f4:55:35:61:66:6f:6f: 4d:09:f7:d6:fd:b3:1d:f1:61:e3:6f:9e:92:b7:a5:bc:ac:33: a3:bc:eb:fc:9a:b0:b7:d5:7e:85:94:19:26:7b:11:9f:df:b9: e5:4a:ee:f0:b0:37:16:e0:ee:75:fa:aa:44:b5:c4:47:78:82: ed:7a:b0:09:fe:4f:ba:23:11:c8:b5:fc:ad:7d:2f:71:13:aa: 75:e5:ab:99:b8:08:d0:06:c1:82:bd:b3:8e:46:65:32:c4:97: af:e0:29:34:cc:ec:66:cc:ef:f1:13:06:42:36:73:02:3b:81: e3:5f:6f:c7:bb:d3:24:7d:c5:0e:b0:f7:11:8d:64:77:0b:e7: ea:8f:3a:73:be:b8:79:df:cf:a2:78:0d:2e:7a:dc:91:92:55: 41:eb:df:3c:1b:de:ca:2f:e5:c8:0d:b4:be:e1:0b:b7:8d:4f: 01:bd:e5:e2:68:b0:55:40:a3:13:a9:5c:61:4a:44:f0:b0:8f: 20:43:3e:12:8f:c7:52:d9:98:85:e9:42:af:09:d0:ef:ab:8c: 83:8c:7e:5d:10:d5:bc:93:ab:5f:52:8a:47:3a:2a:cb:f0:71: 60:32:55:bb -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt261n3jAgFXa/KoLx6jiTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjhkODIyMTY1ZTdmMDFmNzIyYzk3Mzk2N2Y3NTU0NjA1MjQwODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuWzbhQzD07u3B6zGuJ7K9lhNIaR g0/O2/daKB8CdpxHBCvsPg8ksm/x1rUrL0/LJzrZSCC3oU9yVTXYWM4kvt/HypCT hAA+ti8PZs5YXFseFeMMyuk6OOqJ0S40TyjRpN/5keTbhbhBSWUqVk1MWcQ+/BZF Cc/sZ3ruSdJdFmMOaOo9Ep8Vg/J/b2f+y/y7vCForUrEt6Ki/CrpyxASbPWgKdxc 4+YIv6WT+bJwq9Kew+q1gGYCbPQ/4Xtb+K/1rb3UVuYBqd5cyvWizvYRTeHHOvKE L9hwTW+1gFpd5Il3Ho9s8dULXGORg2XFOdDtBjNRQUedqyv1gLN9gjzgvQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFEuNgiFl5/AfciyXOWf3VUYFJAgCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzMyZTc3 Ni04ZjM2LTRkMTYtOTU2YS01YWY5NThjZWFmNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMzJlNzc2 LThmMzYtNGQxNi05NTZhLTVhZjk1OGNlYWY2ZS8xL1M0MkNJV1huOEI5eUxKYzVa X2RWUmdVa0NBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaMAwDBAGnXqoDBAGnXqwDBAK5+5ADBAK+ZmQwDQYJ KoZIhvcNAQELBQADggEBAJjO47staOq6GB+RRD19Y64ItqsYxKjXaH8b/31W9FU1 YWZvb00J99b9sx3xYeNvnpK3pbysM6O86/yasLfVfoWUGSZ7EZ/fueVK7vCwNxbg 7nX6qkS1xEd4gu16sAn+T7ojEci1/K19L3ETqnXlq5m4CNAGwYK9s45GZTLEl6/g KTTM7GbM7/ETBkI2cwI7geNfb8e70yR9xQ6w9xGNZHcL5+qPOnO+uHnfz6J4DS56 3JGSVUHr3zwb3sov5cgNtL7hC7eNTwG95eJosFVAoxOpXGFKRPCwjyBDPhKPx1LZ mIXpQq8J0O+rjIOMfl0Q1byTq19Sikc6KsvwcWAyVbs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:28 2026 by rpki-client