This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer File: SbJERkTEM0jXxQ9OUOdDVumJbb8.cer (raw, json) Hash identifier: /dINlw3YH4NmTuxMWMCqwvdIpKmp6AlHgslcOv8n/Xk= Subject key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3661D144B92F54CD5A57876C0E8FDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41459 IP: 185.85.232.0/22 IP: 2a05:afc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:61:d1:44:b9:2f:54:cd:5a:57:87:6c:0e:8f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:0d:a2:c8:39:b4:1e:7a:c7:f2:08:63:57: d0:13:f9:17:b4:19:3d:c0:93:e0:d2:22:64:66:7e: 1c:d4:f1:b9:b4:ca:05:69:88:85:8e:ee:f4:2a:11: f2:1a:6a:17:27:42:c9:19:c4:f7:c4:65:de:00:e7: 39:f0:a6:aa:70:37:2e:0f:15:40:f3:be:02:67:57: 20:f0:b9:d7:3a:fd:e8:f2:63:eb:ff:64:9c:de:3d: c2:01:48:7f:d4:a6:b1:dd:0c:ff:d1:ce:a5:6b:89: 80:0a:d1:9b:d5:32:25:88:78:63:e7:77:51:5a:02: 99:86:27:b6:bc:41:40:10:89:25:f4:fb:ba:e8:14: 45:fd:5e:9a:d5:6d:46:ea:6f:38:da:9b:f7:ef:f5: 48:9b:69:0d:47:2c:52:b3:0c:f0:ac:ac:35:8d:58: b9:d4:ee:65:46:e4:76:74:ec:1d:55:5f:37:9a:06: 03:57:04:61:bd:4d:96:f8:63:cb:12:bf:9e:80:f5: 17:5c:66:99:14:a5:0d:d7:50:3d:63:9c:33:ef:51: b1:fc:a4:0d:f0:6a:67:2e:72:0c:d4:7b:08:12:05: 0d:e6:84:70:78:b6:0f:c4:1b:22:c3:9f:10:44:64: 88:67:d0:85:13:67:46:43:db:cf:41:e5:ee:13:5b: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.232.0/22 IPv6: 2a05:afc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41459 Signature Algorithm: sha256WithRSAEncryption 11:05:9e:78:23:58:61:f3:70:af:6e:bf:ea:1b:66:ad:63:60: ee:20:ac:a7:1a:94:1e:66:b1:d3:1b:c1:8c:a8:e1:59:27:90: c2:b4:28:18:5a:f3:86:18:24:32:d6:ae:54:54:fd:35:0b:bb: 52:ff:b4:e3:1a:73:4e:f9:98:73:6e:92:52:a5:64:84:47:7f: 34:1f:3c:ca:30:b0:1b:ef:1f:cd:eb:6f:90:e0:2d:71:b1:f1: d2:3b:24:8d:d5:71:18:45:36:02:db:de:19:82:b7:a9:e1:39: 9c:67:09:97:cc:eb:4d:af:e6:28:1b:fd:f3:fe:ef:d1:ae:23: 34:5e:5a:5c:c5:fa:a7:9e:e9:be:83:76:21:16:ab:e0:17:06: 7b:6d:23:48:c2:c4:a3:af:73:89:f5:fe:3c:0b:6b:3f:23:a3: d2:f7:62:da:5c:6d:a0:aa:0e:8b:8b:ea:82:11:21:31:4d:ee: be:6e:98:8c:9a:b3:5f:04:aa:b6:24:5c:c7:e7:6d:ba:68:42: 01:be:32:40:6a:c5:c7:cc:49:b1:b2:7d:5b:e5:40:9f:c2:a7: 2a:0a:54:75:25:65:db:13:80:5c:cf:ab:63:16:fc:86:4c:de: ed:0a:1d:e3:d3:1d:e9:2c:1f:13:3c:0e:b5:d1:72:09:37:8e: 4b:3e:0e:c2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NmHRRLkvVM1aV4dsDo/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWIyNDQ0NjQ0YzQzMzQ4ZDdjNTBmNGU1MGU3NDM1NmU5ODk2ZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sANosg5tB56x/IIY1fQE/kXtBk9 wJPg0iJkZn4c1PG5tMoFaYiFju70KhHyGmoXJ0LJGcT3xGXeAOc58KaqcDcuDxVA 874CZ1cg8LnXOv3o8mPr/2Sc3j3CAUh/1Kax3Qz/0c6la4mACtGb1TIliHhj53dR WgKZhie2vEFAEIkl9Pu66BRF/V6a1W1G6m842pv37/VIm2kNRyxSswzwrKw1jVi5 1O5lRuR2dOwdVV83mgYDVwRhvU2W+GPLEr+egPUXXGaZFKUN11A9Y5wz71Gx/KQN 8GpnLnIM1HsIEgUN5oRweLYPxBsiw58QRGSIZ9CFE2dGQ9vPQeXuE1tsuQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEmyREZExDNI18UPTlDnQ1bpiW2/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzY0Y2Ri ZC1jODUxLTRiMzUtYmI3OS03NTNkOTY5YTA3MDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNjRjZGJk LWM4NTEtNGIzNS1iYjc5LTc1M2Q5NjlhMDcwMi8xL1NiSkVSa1RFTTBqWHhROU9V T2REVnVtSmJiOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVXoMA0EAgACMAcDBQMqBa/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCh8zANBgkqhkiG9w0BAQsFAAOCAQEAEQWeeCNYYfNw r26/6htmrWNg7iCspxqUHmax0xvBjKjhWSeQwrQoGFrzhhgkMtauVFT9NQu7Uv+0 4xpzTvmYc26SUqVkhEd/NB88yjCwG+8fzetvkOAtcbHx0jskjdVxGEU2AtveGYK3 qeE5nGcJl8zrTa/mKBv98/7v0a4jNF5aXMX6p57pvoN2IRar4BcGe20jSMLEo69z ifX+PAtrPyOj0vdi2lxtoKoOi4vqghEhMU3uvm6YjJqzXwSqtiRcx+dtumhCAb4y QGrFx8xJsbJ9W+VAn8KnKgpUdSVl2xOAXM+rYxb8hkze7Qod49Md6SwfEzwOtdFy CTeOSz4Owg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:23 2026 by rpki-client