This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer (raw, json) Hash identifier: 4uLmQtSGCffEUcxQqG3FKs7Uruewy8jf7aMQqplCxn4= Subject key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D52A854991E332B282C0FA9A921C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28725 AS: 197197 IP: 80.74.32.0/20 IP: 85.162.0.0/15 IP: 109.224.64.0/18 IP: 194.147.12.0/22 IP: 2a00:7e80::/32 IP: 2a07:1f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d5:2a:85:49:91:e3:32:b2:82:c0:fa:9a:92:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2c:5a:49:7a:ea:c7:0c:71:71:d6:b0:0f:e8: 85:67:10:b3:fc:44:b0:8b:7b:16:d7:a9:17:66:5f: dd:7b:ac:01:5f:7c:e4:a7:46:30:be:f2:5b:19:e7: d3:24:7c:c8:07:7c:90:68:e1:9d:be:2f:56:1a:7b: 50:38:33:1a:6f:17:8c:c2:7f:99:b1:e5:a8:fc:32: 04:63:72:6a:e1:20:72:ab:63:c9:f5:13:17:0d:e9: a5:5e:73:a7:40:3c:89:47:24:47:a3:57:91:ff:d9: 8f:27:dc:51:1c:f3:c9:f6:9f:e6:02:bf:53:f9:dc: 20:b3:65:7a:27:cb:9a:7a:5a:66:a3:62:4e:ab:b8: 84:76:38:b0:57:ee:52:a1:dc:b3:60:21:4d:b2:0d: 7c:32:00:00:06:3a:73:61:95:4b:cb:2f:f8:c0:51: 13:ed:a5:fc:c9:aa:da:e9:ed:4a:f8:c2:c0:b5:83: fa:84:1a:57:00:d4:d5:ed:dd:51:5a:17:cc:f7:5a: 87:16:c5:a5:b7:a4:7d:1c:70:cd:49:40:a9:1e:bb: b0:8a:d9:77:1c:b9:54:ba:3b:3d:cf:46:1b:56:e7: dd:c1:04:98:85:16:11:38:5f:13:23:74:d0:44:8e: 8e:b6:dc:29:17:80:39:40:69:d3:11:5c:5c:f6:53: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.74.32.0/20 85.162.0.0/15 109.224.64.0/18 194.147.12.0/22 IPv6: 2a00:7e80::/32 2a07:1f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28725 197197 Signature Algorithm: sha256WithRSAEncryption 8d:f2:45:2f:9f:03:aa:2b:97:99:fc:d7:f7:bf:04:90:de:66: 70:8d:e2:ac:07:b8:ba:58:26:a0:fe:9a:a6:77:16:8d:c6:0c: d3:5e:c4:43:bc:51:a5:94:ae:5a:47:15:a7:89:88:4f:c8:b2: a8:3f:48:a5:1c:54:26:f6:77:92:bd:c1:56:ed:09:99:d5:64: 01:5d:3d:3d:d0:12:93:83:1c:8b:c4:29:63:a6:51:6e:86:62: 1f:42:07:fe:b7:ad:89:63:92:c7:d7:61:46:2f:3c:5d:7f:3e: 2c:21:ec:54:0b:e0:d1:ea:63:b4:59:e0:71:98:0b:cd:31:e8: 26:e7:e0:7f:5f:26:59:b1:51:29:f4:74:0d:f2:74:11:15:1e: 88:0b:a3:a1:bb:8a:70:8f:01:8c:af:da:2b:cb:f7:71:ca:ba: 37:3c:71:af:ea:5c:b6:00:03:dd:31:49:65:58:2d:59:3b:0d: b4:2f:93:c3:3b:58:c5:fd:eb:da:32:cd:df:bc:9c:8b:0d:31: 85:eb:2d:3e:7c:2f:97:46:b0:21:94:8e:50:f2:0b:4f:a7:c7: 87:8f:e7:62:d8:99:9b:9b:b7:c1:6b:f9:59:b7:3c:f6:63:90: 4e:e0:0b:f7:d3:a0:cd:a3:09:2a:fc:1f:62:2b:3e:80:0b:59: 5c:75:b8:86 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt/FdUqhUmR4zKygsD6mpIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDJhZjkwNjBjMWY0MmM2MjhmY2ZiOGYwNzgxZDdhNWJjMjFmYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yxaSXrqxwxxcdawD+iFZxCz/ESw i3sW16kXZl/de6wBX3zkp0YwvvJbGefTJHzIB3yQaOGdvi9WGntQODMabxeMwn+Z seWo/DIEY3Jq4SByq2PJ9RMXDemlXnOnQDyJRyRHo1eR/9mPJ9xRHPPJ9p/mAr9T +dwgs2V6J8uaelpmo2JOq7iEdjiwV+5SodyzYCFNsg18MgAABjpzYZVLyy/4wFET 7aX8yara6e1K+MLAtYP6hBpXANTV7d1RWhfM91qHFsWlt6R9HHDNSUCpHruwitl3 HLlUujs9z0YbVufdwQSYhRYROF8TI3TQRI6OttwpF4A5QGnTEVxc9lPq5QIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFP0q+QYMH0LGKPz7jweB16W8IfwCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2E5OGU0 YS00NWFhLTQwOGMtYjgwNy1iZmNmOWE5MjJhOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvYTk4ZTRh LTQ1YWEtNDA4Yy1iODA3LWJmY2Y5YTkyMmE4Yi8xL19TcjVCZ3dmUXNZb19QdVBC NEhYcGJ3aF9BSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAdBAIAATAXAwQEUEogAwMBVaIDBAZt4EADBALCkwwwFAQCAAIw DgMFACoAfoADBQMqBx9AMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAnA1AgMDAk0w DQYJKoZIhvcNAQELBQADggEBAI3yRS+fA6orl5n81/e/BJDeZnCN4qwHuLpYJqD+ mqZ3Fo3GDNNexEO8UaWUrlpHFaeJiE/Isqg/SKUcVCb2d5K9wVbtCZnVZAFdPT3Q EpODHIvEKWOmUW6GYh9CB/63rYljksfXYUYvPF1/Piwh7FQL4NHqY7RZ4HGYC80x 6Cbn4H9fJlmxUSn0dA3ydBEVHogLo6G7inCPAYyv2ivL93HKujc8ca/qXLYAA90x SWVYLVk7DbQvk8M7WMX969oyzd+8nIsNMYXrLT58L5dGsCGUjlDyC0+nx4eP52LY mZubt8Fr+Vm3PPZjkE7gC/fToM2jCSr8H2IrPoALWVx1uIY= -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:38 2026 by rpki-client