This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer (raw, json) Hash identifier: Hl7Q3Vvck9R8oblsbR/8tfPVRvSARUhF4wvMNqDFzR4= Subject key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAED5F77867FA02A4976275CCB4BB5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9202 IP: 109.235.8.0/21 IP: 212.8.32.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ed:5f:77:86:7f:a0:2a:49:76:27:5c:cb:4b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:83:02:5d:3c:cf:a4:2b:91:7c:98:15:30: 30:ca:be:cf:13:d3:77:16:c7:38:6c:6a:e3:31:50: 9e:ce:2c:e3:ee:a3:16:85:4f:1a:05:31:42:82:9b: 30:8f:53:57:1d:05:b0:0c:37:15:09:57:d4:ea:a5: d8:cb:0b:fa:c4:15:56:31:3f:78:24:7c:bc:ea:db: f4:19:93:33:23:63:42:87:48:f0:0d:3b:d2:10:b2: 49:33:42:26:50:55:3d:dc:2b:55:90:34:50:af:7e: 4b:04:72:03:d4:29:f4:f1:ed:f5:7a:f0:e4:89:97: 40:62:9c:7d:92:c5:50:fd:ed:43:e0:cb:72:5c:7b: 2b:2d:d4:a0:8f:cc:df:a9:85:6b:25:ed:11:6d:c6: a1:eb:18:8d:f3:a2:65:8a:ae:f4:88:65:e7:79:08: 1d:26:59:ac:3c:c3:c2:53:1d:a8:b1:a4:39:a0:f1: 3d:5c:e3:e3:4e:b6:74:d3:7f:bc:fd:e1:f8:de:ae: b5:2c:78:e5:5f:82:a4:30:68:9e:dd:55:63:cb:66: d3:e5:2c:f1:d5:55:7e:8f:8f:7f:d4:9f:e0:86:25: 41:b1:ea:ca:35:9e:68:ea:6a:a4:62:9d:36:db:98: f3:55:0a:7d:c1:e3:69:7e:68:db:84:19:55:8f:ec: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.8.0/21 212.8.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9202 Signature Algorithm: sha256WithRSAEncryption 6b:5d:9e:5d:20:37:f7:84:bf:96:48:41:c9:3c:04:0c:e6:b5: 49:2c:27:2a:2e:73:48:68:20:22:8e:2d:35:df:4f:c5:76:29: fa:ca:bb:dc:3a:10:19:0f:68:74:4d:e5:02:ec:f9:68:85:e3: 24:65:fa:e7:05:4a:67:fc:40:21:fe:8e:5f:40:b5:d8:79:79: ec:f4:b7:68:09:c9:0b:13:ec:92:99:f9:ae:bb:71:81:8a:09: b7:e7:20:51:43:21:36:15:14:77:a8:0d:5f:70:e8:81:0e:67: 63:22:69:4b:67:c5:c7:c9:d0:70:a9:3e:88:b3:fd:6f:5d:2e: 9e:b5:43:cf:c0:ea:0f:a2:57:1b:31:34:dd:65:4d:46:4b:36: e2:03:a7:87:a8:1e:42:a9:7c:37:86:ac:3c:37:67:3c:6c:cc: dc:63:05:3b:d7:60:34:6b:31:10:a0:0e:9b:33:a1:c8:32:71: ad:bb:1f:03:14:b3:ae:fa:2c:05:7f:d7:ec:17:f1:e6:38:0b: 94:01:da:7d:7e:bc:65:2d:90:a6:da:4f:14:8a:32:de:e8:8d: 2f:78:d7:85:28:af:cf:03:5b:04:31:2f:7e:aa:1e:fe:e7:60: e1:7e:74:bf:74:49:28:90:db:98:e5:21:a8:3c:9b:37:3e:a8: 4e:5a:8c:97 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt26u1fd4Z/oCpJdidcy0u1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODVkZGI2NzhjNGMwZDBjNDg4ZWZkM2I4MzY3MTQyMTg5ZjMzNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDmDAl08z6QrkXyYFTAwyr7PE9N3 Fsc4bGrjMVCezizj7qMWhU8aBTFCgpswj1NXHQWwDDcVCVfU6qXYywv6xBVWMT94 JHy86tv0GZMzI2NCh0jwDTvSELJJM0ImUFU93CtVkDRQr35LBHID1Cn08e31evDk iZdAYpx9ksVQ/e1D4MtyXHsrLdSgj8zfqYVrJe0Rbcah6xiN86Jliq70iGXneQgd JlmsPMPCUx2osaQ5oPE9XOPjTrZ003+8/eH43q61LHjlX4KkMGie3VVjy2bT5Szx 1VV+j49/1J/ghiVBserKNZ5o6mqkYp0225jzVQp9weNpfmjbhBlVj+wUHwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFEhd22eMTA0MSI79O4NnFCGJ8zWKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2JlYjIw MC1lNWQ2LTQ2OTYtYWUyNS1kZWJmY2Q5ZWIyMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYmViMjAw LWU1ZDYtNDY5Ni1hZTI1LWRlYmZjZDllYjIwZS8xL1NGM2JaNHhNRFF4SWp2MDdn MmNVSVluek5Zby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDbesIAwQF1AggMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAiPyMA0GCSqGSIb3DQEBCwUAA4IBAQBrXZ5dIDf3hL+WSEHJPAQM5rVJ LCcqLnNIaCAiji0130/Fdin6yrvcOhAZD2h0TeUC7PloheMkZfrnBUpn/EAh/o5f QLXYeXns9LdoCckLE+ySmfmuu3GBigm35yBRQyE2FRR3qA1fcOiBDmdjImlLZ8XH ydBwqT6Is/1vXS6etUPPwOoPolcbMTTdZU1GSzbiA6eHqB5CqXw3hqw8N2c8bMzc YwU712A0azEQoA6bM6HIMnGtux8DFLOu+iwFf9fsF/HmOAuUAdp9frxlLZCm2k8U ijLe6I0veNeFKK/PA1sEMS9+qh7+52DhfnS/dEkokNuY5SGoPJs3PqhOWoyX -----END CERTIFICATE-----Generated at Sun Jan 25 20:25:37 2026 by rpki-client