This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer File: Sq5Con57wsw1B--n48vCnTLuoTM.cer (raw, json) Hash identifier: z1WRkreB151QyjdyF0hfhApRXE+s5q2VIFxBzM09qeA= Subject key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5095A3AF79AB61C00BD842ECEDE52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212531 IP: 31.14.176.0/22 IP: 62.77.152.0/21 IP: 79.98.24.0/21 IP: 80.208.224.0/21 IP: 80.209.224.0/20 IP: 89.40.0.0/20 IP: 89.47.160.0 -- 89.47.170.255 IP: 89.47.172.0/22 IP: 94.176.232.0/21 IP: 109.235.64.0/21 IP: 176.223.128.0/20 IP: 185.5.52.0/22 IP: 185.69.52.0/22 IP: 185.81.164.0/22 IP: 194.135.80.0/20 IP: 195.181.240.0/21 IP: 212.24.96.0/20 IP: 212.237.232.0/22 IP: 2a02:7b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:09:5a:3a:f7:9a:b6:1c:00:bd:84:2e:ce:de:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:d2:b5:5c:13:aa:86:76:c9:98:8d:14:66: 28:c0:9f:bc:c6:00:b5:82:4b:30:13:bf:67:c1:57: d7:c3:0e:a5:1a:5d:6f:22:bd:8f:0e:38:65:6c:45: 24:ae:5d:f5:77:68:16:ff:54:81:e6:48:7a:bc:f9: 85:4f:63:6c:f5:8d:ed:d7:1b:ff:f4:ac:d8:11:c0: 8f:8f:bc:39:3d:2c:cd:84:1d:46:00:8a:fa:7b:d2: 1f:26:cd:16:7a:51:5e:8f:c9:5a:1c:3c:94:22:ba: b7:d5:10:f7:fc:82:a0:81:a6:d8:9f:c7:5a:7b:fa: 82:0b:65:cc:6e:33:ea:5c:6d:c8:70:91:ce:b1:5f: f7:1b:17:b7:74:33:60:2f:f6:92:87:34:ef:21:5c: 6f:50:30:e0:eb:24:0d:77:13:89:ba:39:e8:f1:e7: 0f:9c:a7:92:38:96:2f:0f:29:9e:f7:af:53:96:ae: 84:89:3f:5a:4e:1f:f2:dc:d6:1a:f9:34:c4:3e:b2: 55:06:a6:09:f8:63:98:1f:f1:98:93:03:cb:41:87: ed:ca:59:a5:2e:d1:04:5e:a5:a7:42:87:ed:0a:24: 51:0a:2d:36:cf:f5:6b:c3:02:23:b4:bb:9d:87:c0: 23:12:da:20:ef:b8:25:83:4d:10:7e:28:09:0c:b8: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.176.0/22 62.77.152.0/21 79.98.24.0/21 80.208.224.0/21 80.209.224.0/20 89.40.0.0/20 89.47.160.0-89.47.170.255 89.47.172.0/22 94.176.232.0/21 109.235.64.0/21 176.223.128.0/20 185.5.52.0/22 185.69.52.0/22 185.81.164.0/22 194.135.80.0/20 195.181.240.0/21 212.24.96.0/20 212.237.232.0/22 IPv6: 2a02:7b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212531 Signature Algorithm: sha256WithRSAEncryption 7b:7e:24:a2:6f:82:b4:9c:a6:69:32:7b:e7:7d:ee:8a:9d:e5: 42:6e:df:77:72:f7:d9:c9:44:86:08:19:42:c2:c2:5b:88:3e: 33:d8:f4:ae:35:ee:82:44:a9:21:ef:0a:39:28:91:e6:bf:ff: c0:06:f4:89:8b:41:03:7b:56:c0:4c:ac:30:69:87:72:65:ce: cb:9d:0a:29:a4:fb:92:ad:3f:74:39:c7:2f:28:96:1c:80:fd: 40:c1:0f:00:7d:b9:38:cb:50:86:88:0a:78:ee:eb:23:95:0d: 87:fa:bd:eb:39:e0:b0:9c:4a:0b:2e:6c:e2:d5:57:02:a8:68: 9d:40:eb:78:21:47:72:c3:07:f6:ed:33:a5:ef:ed:c7:9d:c5: 01:6a:54:9c:8e:73:a2:ed:be:96:71:44:a3:6e:4d:39:ef:14: 67:cb:ed:93:47:9f:e3:59:a8:22:6f:5d:fe:9a:49:ad:55:30: 01:09:53:ac:be:2d:a5:2b:f4:e2:07:c7:ae:ac:fa:15:a2:90: c5:53:89:c4:fb:5d:d8:40:ba:fe:1a:2a:dc:de:3d:8e:0a:0f: d8:e1:3d:50:8c:10:a4:27:3b:79:61:57:03:3c:d0:cc:e7:25: 16:d7:6f:20:01:7e:6d:23:40:75:33:f5:81:8e:ac:45:93:cc: 52:60:f5:20 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgISAZt7pQlaOveathwAvYQuzt5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFlNDJhMjdlN2JjMmNjMzUwN2VmYTdlM2NiYzI5ZDMyZWVhMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy17StVwTqoZ2yZiNFGYowJ+8xgC1 gkswE79nwVfXww6lGl1vIr2PDjhlbEUkrl31d2gW/1SB5kh6vPmFT2Ns9Y3t1xv/ 9KzYEcCPj7w5PSzNhB1GAIr6e9IfJs0WelFej8laHDyUIrq31RD3/IKggabYn8da e/qCC2XMbjPqXG3IcJHOsV/3Gxe3dDNgL/aShzTvIVxvUDDg6yQNdxOJujno8ecP nKeSOJYvDyme969Tlq6EiT9aTh/y3NYa+TTEPrJVBqYJ+GOYH/GYkwPLQYftylml LtEEXqWnQoftCiRRCi02z/VrwwIjtLudh8AjEtog77glg00QfigJDLguCQIDAQAB o4IDIDCCAxwwHQYDVR0OBBYEFEquQqJ+e8LMNQfvp+PLwp0y7qEzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzYyZjI1 Zi04YjFiLTQxNWItOWZjOC1jYzkzNWNkNzM2MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNjJmMjVm LThiMWItNDE1Yi05ZmM4LWNjOTM1Y2Q3MzYzMi8xL1NxNUNvbjU3d3N3MUItLW40 OHZDblRMdW9UTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGeBggrBgEF BQcBBwEB/wSBjjCBizB6BAIAATB0AwQCHw6wAwQDPk2YAwQDT2IYAwQDUNDgAwQE UNHgAwQEWSgAMAwDBAVZL6ADBABZL6oDBAJZL6wDBANesOgDBANt60ADBASw34AD BAK5BTQDBAK5RTQDBAK5UaQDBATCh1ADBAPDtfADBATUGGADBALU7egwDQQCAAIw BwMFACoCe0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAz4zMA0GCSqGSIb3DQEB CwUAA4IBAQB7fiSib4K0nKZpMnvnfe6KneVCbt93cvfZyUSGCBlCwsJbiD4z2PSu Ne6CRKkh7wo5KJHmv//ABvSJi0EDe1bATKwwaYdyZc7LnQoppPuSrT90OccvKJYc gP1AwQ8Afbk4y1CGiAp47usjlQ2H+r3rOeCwnEoLLmzi1VcCqGidQOt4IUdywwf2 7TOl7+3HncUBalScjnOi7b6WcUSjbk057xRny+2TR5/jWagib13+mkmtVTABCVOs vi2lK/TiB8eurPoVopDFU4nE+13YQLr+Girc3j2OCg/Y4T1QjBCkJzt5YVcDPNDM 5yUW128gAX5tI0B1M/WBjqxFk8xSYPUg -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:57 2026 by rpki-client