This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer (raw, json) Hash identifier: 81AgYa1CXxC8RZMV1V40kW48xdZNYVroyd5FL37SIZA= Subject key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CA66628ECE999B06833F6367A7084 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.57.200.0/21 IP: 185.75.12.0/22 IP: 2a00:b080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a6:66:28:ec:e9:99:b0:68:33:f6:36:7a:70:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:27:c2:33:43:35:15:9a:d5:f0:70:fa:f3: 77:c5:7a:5c:bf:c1:43:d7:95:af:b4:44:0a:ab:41: 7e:b2:2f:40:9e:f1:15:69:9e:23:be:79:14:41:e0: ec:6c:06:d4:1d:b4:57:a1:a1:18:f7:1e:30:fb:df: 63:be:42:ce:e6:64:f5:4e:03:ab:57:cc:2c:25:91: 0e:83:46:15:a6:d5:87:e4:b6:e1:cf:22:be:5f:3b: 52:f2:9a:16:6b:49:ef:ea:8d:c4:f8:4c:ef:96:7f: e7:eb:81:8f:a3:ee:c1:4c:cb:77:46:c4:b6:b7:3c: 14:38:55:ab:ab:3b:9b:36:22:84:08:c8:cd:20:d8: 09:c8:eb:fd:26:6b:db:30:2e:5d:18:fb:b0:8a:1a: 35:43:b6:8b:4e:bc:56:66:11:20:e2:ae:56:35:99: 3d:9f:c0:fb:04:ab:1c:60:20:c6:18:c8:58:84:b7: 35:fa:d3:67:7f:47:ec:58:c1:1e:ad:f3:7c:a7:bf: 2c:d0:9e:96:55:15:3d:7d:54:e8:c9:1d:cc:9a:d5: 09:8d:32:4e:81:53:4c:f9:14:c7:08:af:a1:90:ea: 94:91:9c:68:7d:e0:74:f5:e7:19:31:82:3f:44:cd: 28:8b:f1:80:a4:e4:e3:0e:2b:24:37:c9:34:3b:14: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.200.0/21 185.75.12.0/22 IPv6: 2a00:b080::/32 Signature Algorithm: sha256WithRSAEncryption 91:1c:ec:69:d2:4e:1d:22:d2:2f:d6:fe:a1:09:36:d8:2b:da: 2e:0b:ef:5e:82:a4:eb:52:17:d5:6a:48:4d:e0:c0:fd:e6:72: 28:b4:08:71:cd:54:c8:94:d2:cf:7f:e6:00:4a:93:d8:77:0b: 4a:68:a1:d5:ba:04:48:4a:40:1b:40:50:38:6c:00:73:f6:25: b8:fe:b4:46:a0:62:bb:cb:20:c6:46:d1:81:92:43:fa:2a:f1: 91:7f:d1:a8:6a:2c:d9:53:73:0b:28:89:c4:36:a8:70:51:37: de:84:e2:7d:58:32:79:e3:a7:cf:af:7b:60:be:41:fe:85:6d: 59:bf:c0:d9:89:70:f2:db:b2:74:5f:c1:db:ca:85:05:8e:dc: d4:8f:0d:99:d8:04:1e:bd:98:df:f9:1e:34:db:12:9f:d1:fb: 97:f2:82:d0:0f:f1:70:14:86:04:58:fb:a7:e0:2b:67:f3:87: 22:39:9f:89:d4:4b:19:33:c5:ea:47:35:23:9e:d7:08:bb:79: 65:39:fc:05:d7:f4:7a:fe:22:fe:5b:be:be:78:d3:57:26:2a: e2:2f:d4:a0:55:3e:e5:61:a1:5b:b9:6e:f0:f1:96:85:dd:8f: 40:b3:c3:bb:0e:3e:b9:35:0d:28:37:27:22:3c:84:29:4c:9f: 99:61:33:27 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9XKZmKOzpmbBoM/Y2enCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWM0MDNkNDNiNWYzOGZjYTIxMTljZDE0MDlhOTI3NjNlZGVmZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFonwjNDNRWa1fBw+vN3xXpcv8FD 15WvtEQKq0F+si9AnvEVaZ4jvnkUQeDsbAbUHbRXoaEY9x4w+99jvkLO5mT1TgOr V8wsJZEOg0YVptWH5LbhzyK+XztS8poWa0nv6o3E+Ezvln/n64GPo+7BTMt3RsS2 tzwUOFWrqzubNiKECMjNINgJyOv9JmvbMC5dGPuwiho1Q7aLTrxWZhEg4q5WNZk9 n8D7BKscYCDGGMhYhLc1+tNnf0fsWMEerfN8p78s0J6WVRU9fVToyR3MmtUJjTJO gVNM+RTHCK+hkOqUkZxofeB09ecZMYI/RM0oi/GApOTjDiskN8k0OxTJXwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2EyZjg3 Yi00ODExLTRmZTEtYjE1ZC1mODg5Y2ExNjFjMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvYTJmODdi LTQ4MTEtNGZlMS1iMTVkLWY4ODljYTE2MWMwMS8xL1NjUUQxRHRmT1B5aUVaelJR SnFTZGo3ZV9uRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDsDnIAwQCuUsMMA0EAgACMAcDBQAqALCAMA0G CSqGSIb3DQEBCwUAA4IBAQCRHOxp0k4dItIv1v6hCTbYK9ouC+9egqTrUhfVakhN 4MD95nIotAhxzVTIlNLPf+YASpPYdwtKaKHVugRISkAbQFA4bABz9iW4/rRGoGK7 yyDGRtGBkkP6KvGRf9GoaizZU3MLKInENqhwUTfehOJ9WDJ546fPr3tgvkH+hW1Z v8DZiXDy27J0X8HbyoUFjtzUjw2Z2AQevZjf+R402xKf0fuX8oLQD/FwFIYEWPun 4Ctn84ciOZ+J1EsZM8XqRzUjntcIu3llOfwF1/R6/iL+W76+eNNXJiriL9SgVT7l YaFbuW7w8ZaF3Y9As8O7Dj65NQ0oNyciPIQpTJ+ZYTMn -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:15 2026 by rpki-client