This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer (raw, json) Hash identifier: H/6WqQ6eHKktEK2E2CR1WUAnHQUy3m36MaUcRQxJ0FI= Subject key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF21CD1413440881F858693084CE64C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208789 IP: 45.85.52.0/22 IP: 2a0e:b880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1c:d1:41:34:40:88:1f:85:86:93:08:4c:e6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:3f:ef:81:d7:3a:30:24:8f:f8:c5:99:32: 02:28:6f:db:f2:58:a2:fa:67:fb:70:f2:86:ec:dd: 7e:91:12:6a:21:72:c3:80:44:4b:36:fd:f6:be:a5: e4:2b:98:9b:e1:9a:95:3d:02:f7:75:74:55:d4:b0: 9b:61:8f:69:45:f5:a8:97:11:73:a1:00:bb:ad:07: 26:5d:9c:ee:93:e8:d2:94:47:6a:08:3a:b9:14:61: 6e:db:44:ad:1e:7f:58:56:66:33:8c:62:ec:37:d5: bf:cb:71:17:d1:65:41:94:31:4a:d9:78:92:7b:fb: b5:7e:39:47:fd:75:b5:af:11:cd:4f:fd:85:f4:1d: 28:e4:fd:c7:e3:28:4a:23:7d:07:8b:5f:14:69:89: d7:96:cc:28:79:ad:25:9c:06:6e:a1:1e:03:c8:54: 2d:b9:65:0d:73:a0:e0:44:ec:3b:fb:e6:89:f9:67: 9a:3b:4c:0f:87:3d:f6:c8:2f:61:2e:9a:1b:1f:63: 56:a9:cc:72:a1:31:37:89:d5:9f:a4:d2:b7:e5:4f: ad:e0:6d:d9:31:88:b8:59:ee:ab:46:0a:e0:69:2d: 0f:f7:71:c7:09:bd:65:de:97:be:2b:42:69:c3:6a: 16:0f:e2:30:74:fa:18:d9:2f:bc:f4:6a:80:4f:ae: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.52.0/22 IPv6: 2a0e:b880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208789 Signature Algorithm: sha256WithRSAEncryption 2d:81:9e:50:8e:6c:e4:e9:b0:bb:0d:6b:8d:37:89:3d:d9:09: 85:e1:54:df:c4:58:d7:78:50:b5:76:12:9b:e6:49:69:e1:0d: 0a:c5:78:22:cb:79:af:3c:a6:17:55:85:70:df:19:df:20:5a: cc:9f:74:c3:1b:ff:be:76:08:df:52:ec:30:2e:4e:ba:05:94: 30:ba:d5:fb:03:75:98:ed:32:9a:af:0c:a9:1c:91:28:cb:07: 52:53:a0:99:cb:e0:7c:cd:0e:52:a6:c2:87:db:0b:61:56:0d: cb:31:dc:32:c9:b6:b4:27:52:87:5c:d4:4d:00:ac:06:4e:65: eb:3e:d5:c4:9f:f1:1a:a6:81:8b:81:e9:26:21:c8:92:e8:7d: 74:3f:92:cc:f4:c6:35:82:4a:53:0a:d2:80:8c:94:3b:bd:06: c1:22:42:0b:94:10:75:74:5e:b6:4c:92:2e:6f:1f:d6:ee:da: 0e:e4:08:cb:3d:d5:84:ed:96:40:c7:6e:99:3b:70:4e:54:7f: 73:4b:40:c4:81:a1:1b:d7:4d:02:08:74:97:09:23:6a:43:48: 98:f4:f2:3f:95:73:37:fa:4a:40:3b:c7:88:7e:c7:34:fd:db: 72:c6:11:af:fc:57:43:f4:7b:7d:9b:ba:bb:fb:96:64:03:cb: a6:4e:47:28 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8hzRQTRAiB+FhpMITOZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWYzOWQ2YzhiMjNmY2RjMjBlNTMxNzRlOTJmYjNmNTZjYWE4YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZQ/74HXOjAkj/jFmTICKG/b8lii +mf7cPKG7N1+kRJqIXLDgERLNv32vqXkK5ib4ZqVPQL3dXRV1LCbYY9pRfWolxFz oQC7rQcmXZzuk+jSlEdqCDq5FGFu20StHn9YVmYzjGLsN9W/y3EX0WVBlDFK2XiS e/u1fjlH/XW1rxHNT/2F9B0o5P3H4yhKI30Hi18UaYnXlswoea0lnAZuoR4DyFQt uWUNc6DgROw7++aJ+WeaO0wPhz32yC9hLpobH2NWqcxyoTE3idWfpNK35U+t4G3Z MYi4We6rRgrgaS0P93HHCb1l3pe+K0Jpw2oWD+IwdPoY2S+89GqAT65zzQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEnznWyLI/zcIOUxdOkvs/VsqothMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzE2NDYw Zi1lNDk4LTRmN2ItOWI5MC03YTUwNDNjOTE4ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMTY0NjBm LWU0OTgtNGY3Yi05YjkwLTdhNTA0M2M5MThmOS8xL1NmT2RiSXNqX053ZzVURjA2 Uy16OVd5cWkyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVU0MA0EAgACMAcDBQMqDriAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvlTANBgkqhkiG9w0BAQsFAAOCAQEALYGeUI5s5Omw uw1rjTeJPdkJheFU38RY13hQtXYSm+ZJaeENCsV4Ist5rzymF1WFcN8Z3yBazJ90 wxv/vnYI31LsMC5OugWUMLrV+wN1mO0ymq8MqRyRKMsHUlOgmcvgfM0OUqbCh9sL YVYNyzHcMsm2tCdSh1zUTQCsBk5l6z7VxJ/xGqaBi4HpJiHIkuh9dD+SzPTGNYJK UwrSgIyUO70GwSJCC5QQdXRetkySLm8f1u7aDuQIyz3VhO2WQMdumTtwTlR/c0tA xIGhG9dNAgh0lwkjakNImPTyP5VzN/pKQDvHiH7HNP3bcsYRr/xXQ/R7fZu6u/uW ZAPLpk5HKA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:49 2026 by rpki-client