This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer (raw, json) Hash identifier: BoDXPk3PTvbZtDyEsMJoptLx6dosD4D0ttiNpQhcE0Y= Subject key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910672BEE2C8E080E0F1ACC722A1104 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8476 IP: 193.194.158.0/24 IP: 195.234.162.0/24 IP: 204.13.56.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:67:2b:ee:2c:8e:08:0e:0f:1a:cc:72:2a:11:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=485375191d1c2e50982108fdd407bbcf73e9795c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:34:e7:54:c5:e2:24:48:84:db:04:96:3b: 62:e3:87:66:f2:b8:02:c7:05:a1:d3:df:de:82:db: 4b:3c:a5:08:30:b3:6b:ec:cd:70:cb:be:7f:8c:70: 1c:13:09:a5:a9:70:6e:86:2c:55:40:6b:ad:ff:9c: 32:ae:3c:7a:57:6e:db:f5:8f:28:3d:c7:fa:d0:8d: 3d:7d:d7:b8:00:9f:c0:0a:34:ce:f2:9d:4b:6e:d4: 37:5f:7b:36:0c:ac:f1:ba:5b:b0:1f:1e:69:43:3d: 2b:f5:c2:be:c3:3c:d1:82:f2:02:aa:2a:4e:1b:1c: 65:90:73:f4:1b:7b:06:13:7c:21:0b:96:1d:21:20: f8:f4:85:ab:2c:fc:2b:d5:1d:2b:c2:26:91:a4:27: b6:22:15:07:64:be:da:da:c6:27:c8:a4:bb:d8:2e: 7c:bf:96:22:0b:23:83:d4:12:ac:82:5f:25:b4:71: 7f:8f:e5:1b:e5:0a:35:95:02:c4:e3:83:d0:2e:61: ec:26:fa:83:e6:86:ae:56:4c:ae:3a:61:4d:8d:a5: 81:f9:71:c8:18:ed:59:66:9a:c3:28:82:28:70:2d: e1:b9:b5:52:8e:4f:b0:36:2d:b6:e6:29:fc:e2:7c: 06:b4:af:51:bc:11:5f:6c:f3:ba:56:f4:fd:82:ff: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.158.0/24 195.234.162.0/24 204.13.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8476 Signature Algorithm: sha256WithRSAEncryption ad:4d:54:57:52:de:57:29:93:05:df:c9:e8:47:1b:18:0e:d3: 0d:b5:95:dc:6a:38:f4:5e:a2:66:b0:50:63:85:8f:81:71:e4: 86:a2:2d:a3:06:dd:68:77:06:14:9a:04:fb:26:6d:83:64:6d: 15:fb:9a:6b:8c:74:d4:e3:ce:bd:f5:b3:a5:7a:0b:c6:e9:00: 9a:72:c6:11:13:5b:9d:77:e6:6b:31:ad:55:f7:81:ba:9f:95: ab:14:7d:c7:51:05:5f:61:7b:ba:2f:43:c9:b1:d0:18:d4:02: 81:3f:98:26:b2:14:e4:a0:30:3f:7b:bf:ac:14:c2:60:07:b7: b0:76:e5:71:3f:a3:c0:a0:aa:a9:78:5b:a5:5f:eb:6f:23:04: fb:2a:9e:88:47:d1:18:fc:81:73:1a:b0:38:40:7e:8b:99:10: 48:0a:f2:04:2b:fe:5d:1c:ac:44:8f:cb:44:51:f7:15:28:12: ef:53:d6:91:c9:cd:9e:4e:be:5c:e5:c0:04:ef:43:81:c8:5c: aa:b8:a4:4c:ef:a0:e5:6a:11:1f:3a:27:10:8b:0a:89:21:f9: be:c0:4e:f0:8a:b4:d7:50:db:5a:e2:bf:0c:77:2c:8b:7c:30: 8b:9b:24:a5:73:37:3a:33:da:d1:eb:b2:26:fa:94:7d:8c:94: d3:c4:5b:15 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5EGcr7iyOCA4PGsxyKhEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODUzNzUxOTFkMWMyZTUwOTgyMTA4ZmRkNDA3YmJjZjczZTk3OTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N0051TF4iRIhNsEljti44dm8rgC xwWh09/egttLPKUIMLNr7M1wy75/jHAcEwmlqXBuhixVQGut/5wyrjx6V27b9Y8o Pcf60I09fde4AJ/ACjTO8p1LbtQ3X3s2DKzxuluwHx5pQz0r9cK+wzzRgvICqipO GxxlkHP0G3sGE3whC5YdISD49IWrLPwr1R0rwiaRpCe2IhUHZL7a2sYnyKS72C58 v5YiCyOD1BKsgl8ltHF/j+Ub5Qo1lQLE44PQLmHsJvqD5oauVkyuOmFNjaWB+XHI GO1ZZprDKIIocC3hubVSjk+wNi225in84nwGtK9RvBFfbPO6VvT9gv/KZwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFEhTdRkdHC5QmCEI/dQHu89z6XlcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2IyNjA5 Yi1hZTM5LTQyOWYtYTUwNS02ZWJmZjY0YmNhMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYjI2MDli LWFlMzktNDI5Zi1hNTA1LTZlYmZmNjRiY2ExYy8xL1NGTjFHUjBjTGxDWUlRajkx QWU3ejNQcGVWdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAwcKeAwQAw+qiAwQCzA04MBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAiEcMA0GCSqGSIb3DQEBCwUAA4IBAQCtTVRXUt5XKZMF38no RxsYDtMNtZXcajj0XqJmsFBjhY+BceSGoi2jBt1odwYUmgT7Jm2DZG0V+5prjHTU 48699bOlegvG6QCacsYRE1udd+ZrMa1V94G6n5WrFH3HUQVfYXu6L0PJsdAY1AKB P5gmshTkoDA/e7+sFMJgB7ewduVxP6PAoKqpeFulX+tvIwT7Kp6IR9EY/IFzGrA4 QH6LmRBICvIEK/5dHKxEj8tEUfcVKBLvU9aRyc2eTr5c5cAE70OByFyquKRM76Dl ahEfOicQiwqJIfm+wE7wirTXUNta4r8MdyyLfDCLmySlczc6M9rR67Im+pR9jJTT xFsV -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:14 2026 by rpki-client