This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer (raw, json) Hash identifier: lAQXieWAaG5TFlIDD2BCSDba+7EBIIBV/fLlMfCgvKo= Subject key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB733DE69393BC5730B93E22D1518B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.247.107.0 -- 193.247.108.255 IP: 193.247.110.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:73:3d:e6:93:93:bc:57:30:b9:3e:22:d1:51:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b1a238e043fe063a723b63159015393a64afceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:df:44:1d:2c:d3:18:dd:71:84:89:e9:1e:29: 5f:44:4d:aa:49:67:35:b8:66:69:5d:a1:fa:42:98: 8c:a3:7b:4c:3a:9b:af:35:77:2c:4d:c5:89:9c:a8: 88:9d:7f:11:b4:72:45:da:be:17:d1:37:db:0d:1b: 6f:1f:2a:e3:2f:86:18:d5:bc:63:fb:63:a6:3d:f2: b8:46:63:57:8b:f6:99:47:0c:27:1e:67:72:3f:71: 48:9b:df:ae:13:f1:1f:f3:d4:83:f8:ec:bc:f2:29: b4:79:5f:d2:d2:c7:bf:34:32:50:ec:2e:5f:05:28: 54:28:3b:3e:6a:ca:d1:1d:9a:db:2d:6a:6e:6c:e9: 81:fd:f3:b3:b7:fc:a1:6d:40:78:ac:e5:85:df:94: 1a:54:c4:5f:01:b0:0a:45:a6:fd:7c:a1:a8:bc:0e: de:db:14:40:1f:1a:71:9d:3c:29:09:b6:d0:7e:30: 41:51:2f:8f:da:60:b0:6d:b7:69:18:43:97:de:e3: 1d:5d:fc:17:08:41:41:cf:f3:d0:0b:4d:f3:54:5f: 00:39:15:e4:66:92:24:c2:5a:95:94:1b:ac:be:1d: 24:ed:61:28:6c:9d:07:c0:5d:c8:76:2a:7e:18:fc: 06:67:e9:68:85:bf:10:c6:8e:35:4a:d7:e5:f5:9c: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.107.0-193.247.108.255 193.247.110.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:79:2a:35:d4:61:29:f9:8f:bb:c3:da:0d:23:30:00:b1:b5: dd:53:b4:94:a2:d3:db:df:86:a3:a9:74:a9:e7:7e:83:97:c3: c1:ee:80:64:e1:6e:16:62:56:6d:4d:b6:57:97:82:68:a2:9a: 5a:cb:5a:74:d1:3d:cb:1a:32:14:a9:ae:41:9d:d0:78:49:64: b9:bb:74:e4:58:9d:12:43:71:9d:0d:ea:59:96:9a:d6:2a:73: 86:5a:38:04:5d:28:a9:c4:23:c0:1f:f2:3d:45:b8:8d:12:8e: 76:90:46:6b:f1:24:c3:50:14:b3:5a:77:bd:28:8e:f0:b5:e0: 75:b7:e3:e5:7d:b0:c5:97:ad:a8:f7:71:2c:e4:29:22:cb:80: 44:9e:50:34:96:4b:ea:4c:f2:c1:50:41:32:12:1a:83:96:ab: 67:76:08:96:f4:ac:d9:a4:88:a9:23:cc:62:24:77:eb:e4:4e: 81:8f:43:39:67:d1:16:7e:6b:f7:1f:3c:4d:df:55:4a:2d:e7: a7:0d:41:0f:59:2e:1e:f0:65:96:e3:fa:dc:71:9c:51:ea:3f: 10:bb:e3:56:4f:7d:03:2f:8b:e5:ce:5b:81:5a:d6:82:78:a7: 6c:a4:e9:fa:e3:a6:a4:ed:9f:82:72:9b:7b:fc:1b:ab:6d:f3: c2:0c:dc:13 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt263M95pOTvFcwuT4i0VGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjFhMjM4ZTA0M2ZlMDYzYTcyM2I2MzE1OTAxNTM5M2E2NGFmY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d9EHSzTGN1xhInpHilfRE2qSWc1 uGZpXaH6QpiMo3tMOpuvNXcsTcWJnKiInX8RtHJF2r4X0TfbDRtvHyrjL4YY1bxj +2OmPfK4RmNXi/aZRwwnHmdyP3FIm9+uE/Ef89SD+Oy88im0eV/S0se/NDJQ7C5f BShUKDs+asrRHZrbLWpubOmB/fOzt/yhbUB4rOWF35QaVMRfAbAKRab9fKGovA7e 2xRAHxpxnTwpCbbQfjBBUS+P2mCwbbdpGEOX3uMdXfwXCEFBz/PQC03zVF8AORXk ZpIkwlqVlBusvh0k7WEobJ0HwF3Idip+GPwGZ+lohb8Qxo41Stfl9ZyMLQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFEsaI44EP+BjpyO2MVkBU5OmSvzrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzlhMWU2 Zi0yZTFjLTQ3NDMtYTdhNi0wNmYzNjYyOGM4YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvOWExZTZm LTJlMWMtNDc0My1hN2E2LTA2ZjM2NjI4YzhhMS8xL1N4b2pqZ1FfNEdPbkk3WXhX UUZUazZaS19Pcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBADB92sDBADB92wDBAHB924wDQYJKoZIhvcN AQELBQADggEBAF55KjXUYSn5j7vD2g0jMACxtd1TtJSi09vfhqOpdKnnfoOXw8Hu gGThbhZiVm1NtleXgmiimlrLWnTRPcsaMhSprkGd0HhJZLm7dORYnRJDcZ0N6lmW mtYqc4ZaOARdKKnEI8Af8j1FuI0SjnaQRmvxJMNQFLNad70ojvC14HW34+V9sMWX raj3cSzkKSLLgESeUDSWS+pM8sFQQTISGoOWq2d2CJb0rNmkiKkjzGIkd+vkToGP Qzln0RZ+a/cfPE3fVUot56cNQQ9ZLh7wZZbj+txxnFHqPxC741ZPfQMvi+XOW4Fa 1oJ4p2yk6frjpqTtn4Jym3v8G6tt88IM3BM= -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:53 2026 by rpki-client