This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer (raw, json) Hash identifier: 08R8voTiW/CvfqkPaTwU1cdL5VEtFe0HeJ34KAO6TZE= Subject key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F831D97B7903B9EFA8688F759AFA953 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.140.228.0/22 IP: 2a14:54c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1d:97:b7:90:3b:9e:fa:86:88:f7:59:af:a9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49af2153f02409a464e4d7461c802d4b8dd10dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:13:61:61:9c:80:0c:12:52:0d:98:90:d1: 6c:ad:6b:2c:12:72:51:ce:9a:f4:67:a9:09:dc:a2: cd:e4:ae:36:14:42:77:d9:b1:55:f5:04:af:33:44: 3c:b2:e6:5d:20:21:7f:67:a6:97:af:52:32:b0:86: ab:53:bb:91:5b:70:ac:cd:e2:a2:78:51:2b:cc:b8: 6a:82:ed:1a:56:86:1f:9e:c6:00:de:0f:36:d7:c8: a6:16:f1:63:49:ab:3c:8a:74:e8:a0:3d:a1:29:e0: c2:99:77:f5:28:c5:65:73:7c:15:c0:9b:0a:fc:6c: 1f:eb:54:7a:43:33:81:2b:37:a7:5a:27:af:45:3f: 16:b7:d8:61:29:ed:8e:60:34:5e:49:e6:50:9d:02: 92:6b:78:ac:ec:15:de:10:78:e6:ec:10:f9:7d:59: 12:6e:d2:c4:31:c1:82:4c:57:a4:36:72:bd:19:c3: ea:32:f4:2a:11:64:28:79:46:f7:67:03:b1:cd:37: ad:c0:d3:ac:aa:fc:49:89:89:e6:cf:0f:3b:16:27: fd:ef:91:53:14:84:15:69:5c:e7:68:e7:4b:6c:58: d9:87:6e:ae:27:d0:d1:4d:22:d8:ea:ba:87:61:3b: 96:4c:4e:d2:35:0e:30:4d:6c:ef:03:81:bb:3f:2f: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.228.0/22 IPv6: 2a14:54c0::/29 Signature Algorithm: sha256WithRSAEncryption b0:43:b2:85:a9:e9:a0:b5:e8:1d:ea:da:34:32:8d:ba:8f:c5: 2f:a2:c6:b7:37:91:fe:b6:a7:6b:a2:a0:cc:58:68:5f:04:6c: 3d:fc:b2:38:58:80:74:8c:db:23:62:ad:98:99:e7:7d:b3:82: 35:52:d7:6c:d5:65:e8:34:92:44:7d:3e:a6:0a:fc:e2:3e:04: 32:c3:9c:64:78:8d:bf:68:79:8d:9a:97:cd:56:91:b5:f0:68: ea:1e:e0:b1:cd:9c:a5:3c:06:3b:08:a0:0c:7f:01:76:cd:c3: fe:f0:44:79:94:62:95:e5:b6:ef:a4:b9:33:66:d4:31:12:3f: d2:1a:07:c7:c4:9c:5a:7c:6d:d5:a5:81:4f:a9:f5:dc:77:eb: fb:5a:88:d9:34:ce:3b:91:6c:9c:c2:bf:1c:31:0b:31:dd:c6: 62:00:c9:a6:a9:90:fc:f7:46:56:8f:f7:86:1d:28:85:7c:e3: e7:63:55:31:99:6d:db:4b:a1:1e:62:cf:23:ef:3d:29:61:0b: 0d:aa:ad:08:e6:c8:ea:5d:d2:c0:95:9f:86:36:76:b7:27:61: 88:d8:6c:e4:34:f2:de:80:a9:87:1d:ad:a6:82:d7:6d:18:3b: 21:25:60:b2:b2:e0:e2:95:ca:80:ad:ea:6b:a2:fa:07:c6:2c: 53:bf:cc:6a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/gx2Xt5A7nvqGiPdZr6lTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWFmMjE1M2YwMjQwOWE0NjRlNGQ3NDYxYzgwMmQ0YjhkZDEwZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiITYWGcgAwSUg2YkNFsrWssEnJR zpr0Z6kJ3KLN5K42FEJ32bFV9QSvM0Q8suZdICF/Z6aXr1IysIarU7uRW3CszeKi eFErzLhqgu0aVoYfnsYA3g8218imFvFjSas8inTooD2hKeDCmXf1KMVlc3wVwJsK /Gwf61R6QzOBKzenWievRT8Wt9hhKe2OYDReSeZQnQKSa3is7BXeEHjm7BD5fVkS btLEMcGCTFekNnK9GcPqMvQqEWQoeUb3ZwOxzTetwNOsqvxJiYnmzw87Fif975FT FIQVaVznaOdLbFjZh26uJ9DRTSLY6rqHYTuWTE7SNQ4wTWzvA4G7Py8xTwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEmvIVPwJAmkZOTXRhyALUuN0Q3/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2ViMjVi NS03MWVhLTQ2OWQtOTQ4NC00ZWE2ZGZiMmU1ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZWIyNWI1 LTcxZWEtNDY5ZC05NDg0LTRlYTZkZmIyZTVkMy8xL1NhOGhVX0FrQ2FSazVOZEdI SUF0UzQzUkRmOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYzkMA0EAgACMAcDBQMqFFTAMA0GCSqGSIb3 DQEBCwUAA4IBAQCwQ7KFqemgtegd6to0Mo26j8Uvosa3N5H+tqdroqDMWGhfBGw9 /LI4WIB0jNsjYq2Ymed9s4I1Utds1WXoNJJEfT6mCvziPgQyw5xkeI2/aHmNmpfN VpG18GjqHuCxzZylPAY7CKAMfwF2zcP+8ER5lGKV5bbvpLkzZtQxEj/SGgfHxJxa fG3VpYFPqfXcd+v7WojZNM47kWycwr8cMQsx3cZiAMmmqZD890ZWj/eGHSiFfOPn Y1UxmW3bS6EeYs8j7z0pYQsNqq0I5sjqXdLAlZ+GNna3J2GI2GzkNPLegKmHHa2m gtdtGDshJWCysuDilcqAreprovoHxixTv8xq -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:34 2026 by rpki-client