This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer File: Sd2PGmKl1_gCEt4PPv51svozj_4.cer (raw, json) Hash identifier: XbFvnJNuAAZADg47DcDIj3MxOvowFZWQQC5NNILO+mc= Subject key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF574CD3854E6A9C4E048922CC487 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51684 AS: 215597 IP: 5.181.196.0/22 IP: 46.161.200.0/23 IP: 82.199.208.0/20 IP: 86.111.148.0/23 IP: 89.46.200.0/21 IP: 91.213.191.0/24 IP: 91.217.185.0/24 IP: 176.32.248.0/21 IP: 185.16.26.0/23 IP: 185.90.252.0/22 IP: 185.95.204.0/22 IP: 185.117.172.0/22 IP: 185.247.36.0/22 IP: 185.254.200.0/22 IP: 212.95.128.0/19 IP: 223.25.120.0/21 IP: 2a12:f680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f5:74:cd:38:54:e6:a9:c4:e0:48:92:2c:c4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:34:cc:f2:4f:79:fe:3d:17:74:b3:47:dd: df:4c:e2:84:05:35:b9:e1:fe:3f:45:86:28:bb:af: ae:20:9a:b3:e5:0d:c1:d6:3e:42:0c:fd:8e:0c:6f: 0f:f0:cb:8a:29:ed:1b:03:4f:3c:12:27:41:01:5d: bd:6a:ed:9e:8d:b7:ac:45:ea:1c:d2:33:a9:53:a8: ee:bb:79:b7:ca:1b:4c:a7:33:fc:9f:6a:cd:4b:23: 66:2b:2a:16:dc:23:61:17:f9:dc:6f:dd:6d:af:61: 77:de:f3:5b:55:7f:18:f4:17:db:37:47:b6:7a:20: 2f:ba:d7:fc:e5:51:ce:aa:57:cc:3f:21:81:4f:70: 63:13:ed:23:38:11:aa:79:c3:61:e2:29:0a:70:02: 94:76:05:a0:cd:a7:03:a3:7f:58:a9:90:75:5e:ff: b9:13:4a:3c:ee:20:84:aa:00:e9:70:9a:4e:5f:13: 5d:7c:ff:8c:de:b4:50:2d:72:50:01:01:b7:6a:2c: de:24:76:76:51:b9:27:03:32:e8:4c:99:a0:10:9e: 1a:2e:8c:6b:37:9a:9e:ba:fb:7e:68:fd:ca:21:83: 1c:23:92:d6:7a:27:65:da:b7:32:7a:82:02:5e:22: ab:c0:d1:7e:cd:a4:3a:ce:3a:82:31:16:4d:ae:47: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.196.0/22 46.161.200.0/23 82.199.208.0/20 86.111.148.0/23 89.46.200.0/21 91.213.191.0/24 91.217.185.0/24 176.32.248.0/21 185.16.26.0/23 185.90.252.0/22 185.95.204.0/22 185.117.172.0/22 185.247.36.0/22 185.254.200.0/22 212.95.128.0/19 223.25.120.0/21 IPv6: 2a12:f680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51684 215597 Signature Algorithm: sha256WithRSAEncryption 08:c0:3f:ab:78:44:fa:60:7f:11:4d:a8:95:22:92:c7:58:56: 90:04:c6:f0:b8:9d:bd:5f:06:c4:61:63:04:2a:f0:56:37:b3: 8d:46:8d:c4:12:29:71:89:47:bb:a1:e3:dd:6e:55:42:49:1d: 44:e7:1b:51:0f:36:ae:67:63:c1:2f:4b:0a:63:e4:c3:bc:1d: 86:4c:5a:86:c0:17:65:16:bf:bf:df:2f:b9:35:2e:f2:1f:b6: 55:b7:32:fd:5f:d8:11:bf:a0:c6:8d:59:10:15:2e:3f:f5:fd: e6:aa:64:5e:dc:90:04:dc:a4:4d:da:d6:3a:66:61:03:33:91: 0a:a4:41:30:ad:01:a4:b6:a3:6a:de:e2:ce:f5:ec:d0:e3:13: 9d:ba:6d:b0:04:e2:a6:25:7b:38:66:bc:a5:72:ed:9e:e1:5e: 65:c7:b5:f7:db:48:7d:39:1e:27:c0:8e:3a:00:6f:a7:24:b6: a1:12:89:4a:62:ef:ed:04:b3:0a:db:42:14:52:ad:29:07:7d: 15:09:b7:3d:cd:0b:a4:5c:2d:eb:4c:fa:b1:30:4a:a5:37:b5: 76:c8:a4:ad:52:e7:fc:6b:4f:5f:d1:85:1e:91:a1:31:3f:8b: fc:f5:6b:68:92:b2:9b:23:11:b9:ed:8d:52:a1:4c:fd:a2:03: e4:2c:82:8a -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZt5fvV0zThU5qnE4EiSLMSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWRkOGYxYTYyYTVkN2Y4MDIxMmRlMGYzZWZlNzViMmZhMzM4ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46M0zPJPef49F3SzR93fTOKEBTW5 4f4/RYYou6+uIJqz5Q3B1j5CDP2ODG8P8MuKKe0bA088EidBAV29au2ejbesReoc 0jOpU6juu3m3yhtMpzP8n2rNSyNmKyoW3CNhF/ncb91tr2F33vNbVX8Y9BfbN0e2 eiAvutf85VHOqlfMPyGBT3BjE+0jOBGqecNh4ikKcAKUdgWgzacDo39YqZB1Xv+5 E0o87iCEqgDpcJpOXxNdfP+M3rRQLXJQAQG3aizeJHZ2UbknAzLoTJmgEJ4aLoxr N5qeuvt+aP3KIYMcI5LWeidl2rcyeoICXiKrwNF+zaQ6zjqCMRZNrkdWKwIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFEndjxpipdf4AhLeDz7+dbL6M4/+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzAxYjFl Zi0yMzNiLTRkNmYtOGRjZi1jZWVjNDkxMjRjMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMDFiMWVm LTIzM2ItNGQ2Zi04ZGNmLWNlZWM0OTEyNGMwZi8xL1NkMlBHbUtsMV9nQ0V0NFBQ djUxc3ZvempfNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGIBggrBgEF BQcBBwEB/wR5MHcwZgQCAAEwYAMEAgW1xAMEAS6hyAMEBFLH0AMEAVZvlAMEA1ku yAMEAFvVvwMEAFvZuQMEA7Ag+AMEAbkQGgMEArla/AMEArlfzAMEArl1rAMEArn3 JAMEArn+yAMEBdRfgAMEA98ZeDANBAIAAjAHAwUDKhL2gDAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMAyeQCAwNKLTANBgkqhkiG9w0BAQsFAAOCAQEACMA/q3hE+mB/ EU2olSKSx1hWkATG8LidvV8GxGFjBCrwVjezjUaNxBIpcYlHu6Hj3W5VQkkdROcb UQ82rmdjwS9LCmPkw7wdhkxahsAXZRa/v98vuTUu8h+2Vbcy/V/YEb+gxo1ZEBUu P/X95qpkXtyQBNykTdrWOmZhAzORCqRBMK0BpLajat7izvXs0OMTnbptsATipiV7 OGa8pXLtnuFeZce199tIfTkeJ8COOgBvpyS2oRKJSmLv7QSzCttCFFKtKQd9FQm3 Pc0LpFwt60z6sTBKpTe1dsikrVLn/GtPX9GFHpGhMT+L/PVraJKymyMRue2NUqFM /aID5CyCig== -----END CERTIFICATE-----Generated at Sun Jan 25 11:07:13 2026 by rpki-client