This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer File: SrfcA3ifWGIbJejdDZJdyRtKWqI.cer (raw, json) Hash identifier: tUpEuKcrmHRSPk8dXMZ1ULCp5g/opz/qaSj7vAxkBKU= Subject key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77595B9340F2543C2A859E44DEFCCECD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49409 IP: 45.93.140.0/22 IP: 95.141.80.0/20 IP: 185.134.124.0/22 IP: 2a02:f58::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5b:93:40:f2:54:3c:2a:85:9e:44:de:fc:ce:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:84:39:a0:48:71:10:52:35:bf:86:87:22: 4f:ac:0e:2a:5b:32:4a:c8:5a:3e:dc:ce:0a:46:a9: 87:db:c7:07:d2:fa:88:37:f5:71:ea:d2:28:f1:b4: 56:f4:dc:10:c7:7b:32:1b:9c:fa:18:44:24:dc:63: bd:f9:24:a4:be:ad:e0:05:3d:2e:7c:0d:18:0c:27: f4:8e:84:99:e5:ee:71:46:71:40:d3:f5:72:0c:5b: e9:05:8e:77:21:01:f3:97:43:74:94:23:36:ff:af: f6:5f:94:42:73:f1:33:43:93:41:63:f0:38:e5:0b: 93:0a:01:c6:5c:5f:d3:96:c2:56:4c:8c:d4:73:e4: 32:7b:c1:e8:be:73:23:50:d2:25:b4:ef:5f:3a:86: d4:69:8b:c2:73:2b:e9:c1:e8:78:34:82:0d:20:c1: 7e:ea:80:5e:71:6c:04:8f:4e:cc:44:29:c8:78:77: c8:b1:ce:a5:48:c8:4a:9f:a0:f9:58:1b:f2:24:98: 13:dc:9a:97:1a:c7:b0:02:cb:01:33:b8:67:9e:09: de:27:fe:70:3b:4b:61:53:5c:d3:be:2c:27:04:a0: bd:49:bb:53:92:5d:e3:8d:9d:c9:de:92:33:36:7e: b3:ac:91:b8:e5:19:a4:b8:07:1d:2e:b1:4d:cd:30: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.140.0/22 95.141.80.0/20 185.134.124.0/22 IPv6: 2a02:f58::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49409 Signature Algorithm: sha256WithRSAEncryption 48:5a:b9:38:83:e2:14:2f:ac:9d:f4:e4:e1:4c:f9:0c:95:65: fc:13:08:66:cb:56:4c:04:96:c0:11:f2:ef:fb:26:15:93:3e: 5a:e6:20:94:9d:cc:70:66:6a:24:2b:33:04:45:79:d0:99:e4: 04:60:e8:b5:05:08:b7:e6:02:4b:12:d2:7e:12:e0:f2:43:2c: f0:12:ba:41:d2:39:83:1f:ce:31:96:49:56:22:2d:fc:d6:7e: a9:b1:12:b8:c6:8b:7b:92:fd:f3:73:c1:d8:32:62:31:d0:66: f4:f0:97:72:e5:eb:9e:6b:58:92:df:bd:15:b9:64:54:34:f8: 4a:94:84:fc:1e:c7:a8:37:8c:de:f1:06:a2:39:66:a7:4a:79: 6a:4e:c1:8f:bf:96:37:97:4a:de:56:a1:5d:48:7a:89:3b:ee: 94:99:eb:78:30:ee:3d:76:ce:6c:88:c1:ca:a8:dd:45:5c:84: 16:88:a1:f4:9f:35:06:00:d1:9b:1c:b3:08:d4:8b:a2:0b:70: 37:f5:ed:9b:49:50:4a:3a:53:1b:b6:f1:53:41:c1:1e:01:41: 70:ee:f6:3c:ab:e1:6e:17:ff:b7:a6:ed:08:5f:65:93:74:a8: 07:71:79:41:83:7d:8f:88:ad:80:70:ca:bd:78:9d:80:4d:66: b7:92:43:c8 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt3WVuTQPJUPCqFnkTe/M7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWI3ZGMwMzc4OWY1ODYyMWIyNWU4ZGQwZDkyNWRjOTFiNGE1YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPqEOaBIcRBSNb+GhyJPrA4qWzJK yFo+3M4KRqmH28cH0vqIN/Vx6tIo8bRW9NwQx3syG5z6GEQk3GO9+SSkvq3gBT0u fA0YDCf0joSZ5e5xRnFA0/VyDFvpBY53IQHzl0N0lCM2/6/2X5RCc/EzQ5NBY/A4 5QuTCgHGXF/TlsJWTIzUc+Qye8HovnMjUNIltO9fOobUaYvCcyvpweh4NIINIMF+ 6oBecWwEj07MRCnIeHfIsc6lSMhKn6D5WBvyJJgT3JqXGsewAssBM7hnngneJ/5w O0thU1zTviwnBKC9SbtTkl3jjZ3J3pIzNn6zrJG45RmkuAcdLrFNzTALhwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFEq33AN4n1hiGyXo3Q2SXckbSlqiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzhhNTlk Yi01YWQ4LTRmM2YtOTdjMi1mMzhiY2JkOTMzOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvOGE1OWRi LTVhZDgtNGYzZi05N2MyLWYzOGJjYmQ5MzM5MC8xL1NyZmNBM2lmV0dJYkplamRE WkpkeVJ0S1dxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLV2MAwQEX41QAwQCuYZ8MA0EAgACMAcDBQMq Ag9YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDBATANBgkqhkiG9w0BAQsFAAOC AQEASFq5OIPiFC+snfTk4Uz5DJVl/BMIZstWTASWwBHy7/smFZM+WuYglJ3McGZq JCszBEV50JnkBGDotQUIt+YCSxLSfhLg8kMs8BK6QdI5gx/OMZZJViIt/NZ+qbES uMaLe5L983PB2DJiMdBm9PCXcuXrnmtYkt+9FblkVDT4SpSE/B7HqDeM3vEGojlm p0p5ak7Bj7+WN5dK3lahXUh6iTvulJnreDDuPXbObIjByqjdRVyEFoih9J81BgDR mxyzCNSLogtwN/Xtm0lQSjpTG7bxU0HBHgFBcO72PKvhbhf/t6btCF9lk3SoB3F5 QYN9j4itgHDKvXidgE1mt5JDyA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:13 2026 by rpki-client