This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer (raw, json) Hash identifier: CsU61XQRmwirjj81X6R4xmD+6jsHBznOyng761dMOpI= Subject key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D1270CDAEAC03EA48C59E9D42871 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.206.171.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d1:27:0c:da:ea:c0:3e:a4:8c:59:e9:d4:28:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:b8:52:2d:68:f8:51:be:c2:14:a4:07:13: cb:97:53:44:65:7b:1a:9d:5f:ea:d5:9c:7b:66:d5: 42:80:8b:b3:fc:e1:12:17:36:a7:8e:db:d7:61:3c: 1c:69:db:f2:cd:35:14:31:c7:7c:9b:1f:c2:20:d9: 00:86:2b:cc:97:5a:2f:62:18:f8:ed:8d:ef:30:db: ae:ec:66:18:96:83:b8:90:5c:a2:bd:b0:77:73:1f: 7e:66:40:cc:0a:fc:cf:6b:07:d2:e0:d2:b5:40:fe: ba:16:1e:c8:ad:de:35:95:13:4c:af:ca:68:15:43: d7:c6:1d:16:80:9a:99:27:90:e3:3a:11:8b:35:a8: 44:76:3c:1b:bd:d9:f5:9e:48:d0:b2:07:47:e5:2c: e5:d2:d6:13:49:6e:5e:fc:22:81:62:0e:90:d4:cb: c9:21:e5:8c:5d:76:13:49:bd:ad:1a:5c:11:d9:b8: 8e:67:c0:73:3b:f9:47:31:92:d3:a1:40:d2:fa:90: de:11:81:45:79:46:25:f0:f3:55:d1:5d:bb:01:39: 8a:78:94:92:bc:54:6b:68:94:96:a7:41:ca:e6:6a: 7c:f2:8b:e0:eb:11:7b:3d:55:f5:cc:8c:01:da:a7: 4c:f1:e5:45:68:25:5e:2f:80:31:49:e8:76:a8:1f: b4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.171.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:40:ad:92:26:8a:cc:72:57:55:dc:16:c6:21:76:24:cf:09: e4:11:7d:63:eb:b6:f8:d5:e2:92:d5:02:67:0c:80:e3:74:51: 19:9b:b2:25:d2:3a:93:2a:d2:b4:82:b5:fe:1a:eb:b8:ec:18: e4:c8:4b:83:ce:ad:75:66:7a:20:e1:2f:ad:a6:09:20:ec:48: 3f:24:07:d2:ec:9f:88:63:23:13:25:d9:01:53:c6:13:b7:b3: 0b:96:6e:5d:8a:7c:cf:a1:84:4c:49:65:af:dd:b7:e8:0d:00: 3c:9e:40:c2:de:65:54:a4:bd:83:53:ee:d6:79:c4:50:96:ed: e8:ca:17:4b:d6:24:3a:af:fc:05:b9:d9:59:26:aa:a0:60:03: 18:9f:2c:5d:f6:83:5a:59:21:c5:af:34:0d:6b:dc:5b:16:29: ac:ed:c3:b1:cd:64:ae:03:56:fc:09:a3:e3:33:78:50:35:f8: 9c:72:e8:01:56:cc:ec:09:80:5e:f2:51:31:dc:b9:43:1f:d9: c5:23:58:f3:24:c2:83:8e:87:67:72:09:83:fb:23:57:fb:59: a5:b3:27:9e:3b:66:31:4c:0f:0c:f8:32:a2:dc:59:bc:50:d3: f7:02:bb:e9:7d:82:90:26:ec:02:90:96:ce:0a:bb:1a:cd:c8: 05:4f:32:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NNEnDNrqwD6kjFnp1ChxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWQwMWY3MGNmNWY0ZGVlZDkzYThjMTVlNDk0MDI5ZTkzYWJlZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjC4Ui1o+FG+whSkBxPLl1NEZXsa nV/q1Zx7ZtVCgIuz/OESFzanjtvXYTwcadvyzTUUMcd8mx/CINkAhivMl1ovYhj4 7Y3vMNuu7GYYloO4kFyivbB3cx9+ZkDMCvzPawfS4NK1QP66Fh7Ird41lRNMr8po FUPXxh0WgJqZJ5DjOhGLNahEdjwbvdn1nkjQsgdH5Szl0tYTSW5e/CKBYg6Q1MvJ IeWMXXYTSb2tGlwR2biOZ8BzO/lHMZLToUDS+pDeEYFFeUYl8PNV0V27ATmKeJSS vFRraJSWp0HK5mp88ovg6xF7PVX1zIwB2qdM8eVFaCVeL4AxSeh2qB+0cQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEnQH3DPX03u2TqMFeSUAp6Tq+1VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzgyMTU3 Mi0zNDQ1LTQ5MTAtYTE1Yy1mNGMxNjZjODNmODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvODIxNTcy LTM0NDUtNDkxMC1hMTVjLWY0YzE2NmM4M2Y4OC8xL1NkQWZjTTlmVGU3Wk9vd1Y1 SlFDbnBPcjdWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW86rMA0GCSqGSIb3DQEBCwUAA4IBAQBNQK2S JorMcldV3BbGIXYkzwnkEX1j67b41eKS1QJnDIDjdFEZm7Il0jqTKtK0grX+Guu4 7BjkyEuDzq11Znog4S+tpgkg7Eg/JAfS7J+IYyMTJdkBU8YTt7MLlm5dinzPoYRM SWWv3bfoDQA8nkDC3mVUpL2DU+7WecRQlu3oyhdL1iQ6r/wFudlZJqqgYAMYnyxd 9oNaWSHFrzQNa9xbFims7cOxzWSuA1b8CaPjM3hQNficcugBVszsCYBe8lEx3LlD H9nFI1jzJMKDjodncgmD+yNX+1mlsyeeO2YxTA8M+DKi3Fm8UNP3ArvpfYKQJuwC kJbOCrsazcgFTzIq -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:01 2026 by rpki-client