This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer File: SM83s2Rv2pPL3QuKrM__MTpvcY8.cer (raw, json) Hash identifier: TNoM9BmIECwZK/vV0l/HyxeLPynnKvQiyOC+vfpDi4k= Subject key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F7C75CCB04614542741A30812940 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.108.216.0/24 IP: 193.109.0.0/22 IP: 2001:678:e6c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f7:c7:5c:cb:04:61:45:42:74:1a:30:81:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:14:58:97:35:e2:54:21:9d:d3:ba:36:30: 1c:1a:28:9a:34:29:96:11:73:1b:0b:67:f6:f2:6e: 2c:98:5c:b5:d4:11:14:e6:6b:57:1f:c6:c9:de:36: dc:49:b6:e3:19:d2:9e:dd:b5:12:78:ff:27:30:5b: b3:2f:9b:23:a4:1d:5f:96:23:1c:62:ba:18:81:b4: 84:7c:66:7b:57:63:e3:a7:7c:c3:a9:9c:a2:42:ca: 53:7a:cc:ef:5c:99:bb:f6:98:c3:61:80:ce:85:55: ff:b3:49:8e:ca:96:f4:f7:f5:e3:ac:2b:6a:87:4a: 11:36:f5:89:cf:3f:bc:3d:b7:14:96:24:88:26:55: c8:23:17:96:b6:6d:a5:f7:46:95:db:3e:ab:b0:0d: e7:08:68:a5:cc:ed:89:78:78:2b:fb:46:be:31:5e: 05:58:6a:c4:1f:26:5f:dd:f2:8d:e3:c3:2c:b1:54: fc:b8:9c:1c:61:7f:84:dd:2c:37:38:eb:ac:54:70: ad:b2:e8:3c:18:51:22:59:b4:7f:93:d6:d3:fe:4d: 71:d8:1b:a0:be:7a:8c:8c:8a:f5:e1:93:5f:d4:4c: ab:32:ab:03:d8:9a:67:5c:38:59:3a:5c:9e:c6:65: 8f:fd:e9:76:16:3a:42:dd:3d:72:95:17:2c:91:d2: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.216.0/24 193.109.0.0/22 IPv6: 2001:678:e6c::/48 Signature Algorithm: sha256WithRSAEncryption 6d:68:ba:85:c2:b4:25:7a:03:95:2c:78:6d:ba:f0:a6:17:88: 66:ce:e9:d9:6d:d3:d2:12:53:ee:45:63:9a:72:15:50:eb:fc: 57:fb:19:b4:81:87:63:7e:08:19:2d:a1:7f:ec:c7:d1:4a:cd: 9c:ff:4c:bf:93:d9:80:f3:8c:2f:14:b7:ee:8d:1d:86:0a:a6: f7:fd:fd:31:4d:25:ea:a4:ae:eb:79:69:93:b1:7b:c5:e4:b3: 00:40:98:84:0e:72:ee:5f:ca:ee:be:9f:30:c3:57:bc:b5:a5: 6c:5f:bd:2c:31:f9:7f:be:2a:76:82:0d:a0:a7:85:64:d7:e9: 79:d8:72:d4:1e:a9:69:9e:53:4b:30:5b:a1:ae:93:cf:62:ca: 09:2a:08:c4:cc:87:5b:42:a1:3d:21:f5:51:6e:14:05:89:20: 9c:6f:87:e6:cb:e3:9d:55:f2:26:aa:d7:5e:7a:d5:cc:d2:11: e4:cc:1d:80:4f:de:2d:7c:35:77:8f:58:11:75:68:6f:ec:6e: 1b:a7:3b:cd:45:29:52:81:0f:12:11:56:d8:96:f8:0c:19:eb: 24:ee:c3:f5:49:13:81:83:82:be:43:f9:79:b1:0b:dc:a6:fa: 80:db:e3:0d:15:48:75:e5:b1:20:4f:93:af:a8:29:6c:ff:b9: 2c:3f:5e:14 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4NPfHXMsEYUVCdBowgSlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGNmMzdiMzY0NmZkYTkzY2JkZDBiOGFhY2NmZmYzMTNhNmY3MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4UUWJc14lQhndO6NjAcGiiaNCmW EXMbC2f28m4smFy11BEU5mtXH8bJ3jbcSbbjGdKe3bUSeP8nMFuzL5sjpB1fliMc YroYgbSEfGZ7V2Pjp3zDqZyiQspTeszvXJm79pjDYYDOhVX/s0mOypb09/XjrCtq h0oRNvWJzz+8PbcUliSIJlXIIxeWtm2l90aV2z6rsA3nCGilzO2JeHgr+0a+MV4F WGrEHyZf3fKN48MssVT8uJwcYX+E3Sw3OOusVHCtsug8GFEiWbR/k9bT/k1x2Bug vnqMjIr14ZNf1EyrMqsD2JpnXDhZOlyexmWP/el2FjpC3T1ylRcskdJNhwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFEjPN7Nkb9qTy90LiqzP/zE6b3GPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzIwZDU5 My03MjNmLTQ5NjMtOTAxZC0xN2UzMTU4OTU0ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMjBkNTkz LTcyM2YtNDk2My05MDFkLTE3ZTMxNTg5NTRkYS8xL1NNODNzMlJ2MnBQTDNRdUty TV9fTVRwdmNZOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwWzYAwQCwW0AMA8EAgACMAkDBwAgAQZ4Dmww DQYJKoZIhvcNAQELBQADggEBAG1ouoXCtCV6A5UseG268KYXiGbO6dlt09ISU+5F Y5pyFVDr/Ff7GbSBh2N+CBktoX/sx9FKzZz/TL+T2YDzjC8Ut+6NHYYKpvf9/TFN Jeqkrut5aZOxe8XkswBAmIQOcu5fyu6+nzDDV7y1pWxfvSwx+X++KnaCDaCnhWTX 6XnYctQeqWmeU0swW6Guk89iygkqCMTMh1tCoT0h9VFuFAWJIJxvh+bL451V8iaq 11561czSEeTMHYBP3i18NXePWBF1aG/sbhunO81FKVKBDxIRVtiW+AwZ6yTuw/VJ E4GDgr5D+XmxC9ym+oDb4w0VSHXlsSBPk6+oKWz/uSw/XhQ= -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:46 2026 by rpki-client