This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer File: SUqFZSdrSiUbpXPdbV9fh4I469I.cer (raw, json) Hash identifier: iPppUaC8UbM+pIu7G/c9Wtkc5hugnOiFkMVD8LLd5do= Subject key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12A92C53BD3DB2BE251E2A9A3E6694 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.3.53.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a9:2c:53:bd:3d:b2:be:25:1e:2a:9a:3e:66:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:45:47:a3:ba:3e:4e:34:77:b8:4d:2c:41: 29:5e:b8:55:c9:5b:38:c0:e5:32:4f:f9:81:b2:82: 6b:91:fb:0c:f2:88:0a:e2:5d:b4:ee:90:39:85:37: 7b:61:c4:6d:19:f3:9d:c3:f8:26:96:68:af:35:f1: 96:24:09:a5:ca:a2:8a:b9:16:87:55:a7:1b:91:99: d3:6f:31:33:a0:ce:03:5a:60:21:12:e6:93:7b:86: 47:d7:60:22:18:d7:5e:fa:a2:11:60:d7:e2:34:d7: fd:58:4f:9d:00:7b:c5:d3:2f:e3:32:49:36:d4:2b: 6e:7d:f5:00:a8:c0:98:b8:6c:3b:65:2b:a6:a5:9f: 98:07:e8:ef:17:0d:39:5b:8a:99:cb:6b:d9:40:ba: 13:32:68:6a:59:6a:71:e1:26:81:ac:e3:db:2c:a3: 67:f2:64:ba:ac:3f:0a:8e:b6:6b:03:97:43:21:6f: 4f:0e:c7:77:02:fa:e4:a7:3d:00:ad:29:cb:d5:4b: b6:44:53:16:f3:d5:36:37:3d:e0:17:3c:53:8b:9d: 9d:d0:1b:22:8e:c6:c8:0e:45:d3:24:1e:94:c2:8a: d4:71:e5:60:1a:0f:47:81:1c:e8:55:9b:aa:48:a0: f5:f6:10:88:a9:b5:3c:05:a6:ac:57:db:0c:a7:f2: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.53.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:b0:49:d8:d2:42:3f:cd:57:c0:de:93:c7:4a:09:67:57:b3: 34:92:aa:e2:1e:26:c9:50:4f:d6:80:a5:b2:af:2f:26:80:b0: 03:38:2e:38:54:54:5c:fc:91:27:41:2d:fd:d7:2f:7a:30:13: b8:b1:a4:3d:43:45:a6:28:d3:a6:af:90:2e:63:f8:b4:43:c3: 47:b9:ac:ba:d6:ad:c4:0b:c9:20:53:14:79:15:c7:b2:ac:05: 34:67:79:29:cf:51:ae:75:58:f8:98:6d:88:5f:d5:98:81:5d: de:2a:b1:05:a7:4f:33:0b:24:21:3e:38:71:dd:bf:32:7e:4c: f1:bd:a8:14:b2:5b:d9:3b:59:e0:c7:5d:ac:88:9c:49:9e:2d: ff:a0:ca:22:40:6e:fd:50:ca:ec:5f:bc:d9:74:f2:aa:ef:1d: 92:8e:60:27:d8:dc:c8:13:97:35:64:63:95:07:cc:e9:71:cb: ff:ae:0b:32:3f:34:d4:7d:6c:7e:00:e1:09:5f:17:47:da:ef: de:9d:2a:a5:09:dd:62:79:0b:28:e3:4c:ce:38:8e:8b:ca:65: 7b:60:36:69:83:5f:51:33:0a:50:26:b9:fd:93:1d:97:19:ec: 12:0c:2f:b0:8f:3b:9c:12:f1:5a:08:ac:a2:f1:fa:68:f4:c9: 3f:07:d6:bc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EqksU709sr4lHiqaPmaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTRhODU2NTI3NmI0YTI1MWJhNTczZGQ2ZDVmNWY4NzgyMzhlYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP9FR6O6Pk40d7hNLEEpXrhVyVs4 wOUyT/mBsoJrkfsM8ogK4l207pA5hTd7YcRtGfOdw/gmlmivNfGWJAmlyqKKuRaH VacbkZnTbzEzoM4DWmAhEuaTe4ZH12AiGNde+qIRYNfiNNf9WE+dAHvF0y/jMkk2 1CtuffUAqMCYuGw7ZSumpZ+YB+jvFw05W4qZy2vZQLoTMmhqWWpx4SaBrOPbLKNn 8mS6rD8KjrZrA5dDIW9PDsd3Avrkpz0ArSnL1Uu2RFMW89U2Nz3gFzxTi52d0Bsi jsbIDkXTJB6UworUceVgGg9HgRzoVZuqSKD19hCIqbU8BaasV9sMp/JBcQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFElKhWUna0olG6Vz3W1fX4eCOOvSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzE4YTJm ZC0xNWY1LTQzZTYtYjc4Ni1jNmQ5ZjkxNWJkOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMThhMmZk LTE1ZjUtNDNlNi1iNzg2LWM2ZDlmOTE1YmQ4Yi8xL1NVcUZaU2RyU2lVYnBYUGRi VjlmaDRJNDY5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQM1MA0GCSqGSIb3DQEBCwUAA4IBAQCasEnY 0kI/zVfA3pPHSglnV7M0kqriHibJUE/WgKWyry8mgLADOC44VFRc/JEnQS391y96 MBO4saQ9Q0WmKNOmr5AuY/i0Q8NHuay61q3EC8kgUxR5FceyrAU0Z3kpz1GudVj4 mG2IX9WYgV3eKrEFp08zCyQhPjhx3b8yfkzxvagUslvZO1ngx12siJxJni3/oMoi QG79UMrsX7zZdPKq7x2SjmAn2NzIE5c1ZGOVB8zpccv/rgsyPzTUfWx+AOEJXxdH 2u/enSqlCd1ieQso40zOOI6LymV7YDZpg19RMwpQJrn9kx2XGewSDC+wjzucEvFa CKyi8fpo9Mk/B9a8 -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:36 2026 by rpki-client