This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer File: SzMg4LtdviupcmkbddaPSPblf4g.cer (raw, json) Hash identifier: EYRiSc2cl+h/C2AWr5zuO6rTZ2YJYLoQ53dLi14ZURM= Subject key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E4C9250FAF40B5D93B8BECF6E10F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.3.183.0/24 IP: 212.104.128.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4c:92:50:fa:f4:0b:5d:93:b8:be:cf:6e:10:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:67:e3:da:46:61:92:93:34:40:d6:b0:55: f2:d0:cf:ed:cd:fa:da:27:a7:d5:ef:db:7c:e5:43: 8f:36:a5:87:30:8e:2c:66:c6:3f:c3:61:ed:5d:7e: f7:71:f4:23:d5:94:32:d1:de:c6:6e:51:06:08:cf: 33:f5:52:8d:ad:97:53:5c:63:8c:48:e3:87:cf:3f: 19:1a:b7:37:0b:c1:24:20:ab:05:4e:31:e5:b6:84: ef:05:e4:79:27:88:20:d5:88:cf:f9:6b:cd:2d:2b: b1:10:33:ce:4a:b2:b5:2f:6e:89:13:bd:53:05:83: 39:ef:86:39:db:ee:67:3a:b7:e1:7d:dd:ba:6d:c5: 8c:97:db:58:61:48:70:1f:37:5f:94:b9:4c:7a:17: 38:43:2b:d2:ce:a1:23:76:a7:a9:f2:8d:85:59:e4: d7:57:a6:8e:e6:36:eb:a5:fa:46:44:4f:c7:9c:c0: dc:21:09:eb:ec:a5:ae:e0:43:99:ac:4e:14:cd:31: 04:9f:fb:99:6b:a6:50:12:7c:3a:de:24:af:c7:ac: 2b:5e:18:b1:47:56:f7:4e:6d:9a:ad:84:81:f3:68: 93:12:06:d3:f0:3f:13:8b:18:d2:d9:4e:7b:34:4e: a4:a3:f3:62:b5:e0:da:aa:d7:6e:97:31:43:28:8f: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.183.0/24 212.104.128.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f2:0a:ae:5c:d3:8f:1c:26:a8:5b:c2:06:df:96:b1:fd:09: 80:c9:f4:ed:9b:f0:90:9d:70:81:22:7e:58:41:de:b6:44:6e: 82:88:e6:08:53:2e:bf:56:a8:02:7c:6f:12:87:65:07:13:e6: 42:46:60:dc:74:4c:39:9a:6f:54:24:57:ea:1e:47:0d:b4:f2: 71:48:19:0e:61:09:88:90:94:6f:6e:36:c3:55:1e:45:e4:50: 2a:63:03:39:09:0b:51:f2:87:15:89:d8:00:93:61:c4:d3:d4: 13:57:8c:a8:22:8d:c4:43:29:42:da:e4:39:91:7b:2d:b1:d1: 86:7c:f5:93:1e:93:a7:c1:6e:40:de:45:74:50:06:e0:61:08: 7e:27:ff:75:2b:43:5e:96:24:65:41:13:6e:99:03:7f:73:f4: 59:6a:c0:e6:4e:7a:84:cd:27:97:9d:43:b8:80:02:e7:bb:66: e3:4c:1e:12:f7:3b:b3:ad:71:44:61:82:de:85:1a:f7:74:82: bd:97:5f:cd:01:32:ae:97:57:8e:5a:61:75:09:9f:69:39:1d: 3c:91:67:6f:bf:d9:d4:75:ce:5b:ae:b0:a4:1d:5a:73:aa:12: 0e:f2:a3:49:13:fd:06:f5:1d:fb:ee:b9:f7:c4:c1:b6:33:fe: e9:ba:a4:45 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt5fkySUPr0C12TuL7PbhDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjMzMjBlMGJiNWRiZTJiYTk3MjY5MWI3NWQ2OGY0OGY2ZTU3Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLdn49pGYZKTNEDWsFXy0M/tzfra J6fV79t85UOPNqWHMI4sZsY/w2HtXX73cfQj1ZQy0d7GblEGCM8z9VKNrZdTXGOM SOOHzz8ZGrc3C8EkIKsFTjHltoTvBeR5J4gg1YjP+WvNLSuxEDPOSrK1L26JE71T BYM574Y52+5nOrfhfd26bcWMl9tYYUhwHzdflLlMehc4QyvSzqEjdqep8o2FWeTX V6aO5jbrpfpGRE/HnMDcIQnr7KWu4EOZrE4UzTEEn/uZa6ZQEnw63iSvx6wrXhix R1b3Tm2arYSB82iTEgbT8D8TixjS2U57NE6ko/NiteDaqtdulzFDKI+1IwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFEszIOC7Xb4rqXJpG3XWj0j25X+IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzdmMDY2 Yy05NGE5LTQ3OGQtODA3ZS1hODk3NTlkNzA3MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvN2YwNjZj LTk0YTktNDc4ZC04MDdlLWE4OTc1OWQ3MDcxYy8xL1N6TWc0THRkdml1cGNta2Jk ZGFQU1BibGY0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwQO3AwQA1GiAMA0GCSqGSIb3DQEBCwUAA4IB AQBS8gquXNOPHCaoW8IG35ax/QmAyfTtm/CQnXCBIn5YQd62RG6CiOYIUy6/VqgC fG8Sh2UHE+ZCRmDcdEw5mm9UJFfqHkcNtPJxSBkOYQmIkJRvbjbDVR5F5FAqYwM5 CQtR8ocVidgAk2HE09QTV4yoIo3EQylC2uQ5kXstsdGGfPWTHpOnwW5A3kV0UAbg YQh+J/91K0NeliRlQRNumQN/c/RZasDmTnqEzSeXnUO4gALnu2bjTB4S9zuzrXFE YYLehRr3dIK9l1/NATKul1eOWmF1CZ9pOR08kWdvv9nUdc5brrCkHVpzqhIO8qNJ E/0G9R377rn3xMG2M/7puqRF -----END CERTIFICATE-----Generated at Sun Jan 25 13:44:48 2026 by rpki-client