This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer File: sA4l9V67rLBp8QOssIZnA4Nc_M0.cer (raw, json) Hash identifier: doaSh6Vy/z0Qzo+0YlvYY8TJ+K7fPkYWhmCjBLd0N8w= Subject key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB62595B4DF10FB8803E5423D426E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.197.181.0/24 IP: 2a10:8940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:62:59:5b:4d:f1:0f:b8:80:3e:54:23:d4:26:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b00e25f55ebbacb069f103acb0866703835cfccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:92:9d:f6:2e:7f:05:80:6a:d3:68:f7:da: 57:bb:ba:51:0d:79:2e:68:26:db:d2:fb:63:f2:df: 49:32:81:4d:56:06:6b:e4:15:58:a3:7e:13:31:28: e4:c8:c0:d0:99:a7:3f:53:b4:0b:59:d4:17:58:54: d7:90:a2:6c:a5:25:d2:55:7d:5c:f4:54:0b:c6:d6: 58:6d:94:79:58:5f:b9:08:90:bd:3b:26:6a:b6:39: d9:ab:4b:27:64:ba:94:83:15:80:4d:8f:35:0b:ac: 93:f1:ed:13:ce:ce:fe:b7:ff:da:1a:3a:84:fe:43: aa:26:48:2a:60:a4:08:8b:d8:3d:4d:cb:0f:49:dd: e0:c4:14:fe:03:08:9b:b6:82:94:25:8e:88:f0:a3: 2b:3c:33:de:04:97:76:d0:bd:c8:15:f0:bf:9b:03: fa:36:9f:45:6b:44:6c:8d:60:5e:a3:b1:1e:e2:0b: 5f:92:b5:3b:23:f0:48:c8:82:82:d7:15:20:59:52: 72:ee:37:17:89:d9:84:63:82:c1:b4:03:79:f4:c5: 12:aa:b5:87:16:4b:d1:43:fb:da:36:9a:0d:b7:53: d8:b5:e8:cc:ce:81:a2:ac:fc:26:33:c8:c1:53:83: cb:e0:b2:ef:a5:2e:74:58:35:78:3e:f0:0b:b4:6d: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.181.0/24 IPv6: 2a10:8940::/29 Signature Algorithm: sha256WithRSAEncryption 42:14:d3:55:19:7f:3d:c2:cb:0a:c6:38:43:25:3f:bd:9c:0d: ab:ea:b6:6c:6c:64:e1:d2:c2:fe:c5:db:06:8a:22:3a:1b:b2: 5a:0c:0c:f9:09:23:b4:03:1b:b1:9f:51:5b:03:d0:b5:3b:50: 8b:80:fa:04:92:83:be:fa:7e:67:1b:4c:0b:bb:f3:8a:40:e0: 8f:3e:e8:3c:3d:b0:a8:2d:ee:f3:f4:a5:cd:e9:70:c8:bc:fa: 18:5c:7a:6d:cd:c0:6b:82:55:9d:6a:25:2a:61:eb:26:c5:b7: 6b:4a:11:e0:a0:d2:91:66:b2:4a:cd:45:02:c0:10:53:8a:2b: fe:6e:41:52:cb:07:0f:6d:6d:6b:b0:97:60:47:3e:40:a3:d1: e5:c5:c2:03:13:64:e6:79:ae:0f:73:94:50:58:1a:8b:7b:b9: 7c:3d:4c:c6:4a:2d:a0:7f:71:72:4f:e4:6d:ee:9d:97:74:51: 46:f9:37:25:bd:61:ae:8b:fa:3e:73:81:a8:0a:3d:9b:eb:c8: a3:fd:ba:83:58:03:b0:11:41:f6:f9:5a:85:8d:97:81:ca:f8: ed:08:43:4a:5e:4d:b0:58:c3:b9:1e:69:d3:82:f2:be:76:3e: c5:1c:96:bd:39:a9:9c:76:6a:4e:87:ac:d0:a8:e6:87:dc:06: b7:c2:99:7b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt262JZW03xD7iAPlQj1CbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDBlMjVmNTVlYmJhY2IwNjlmMTAzYWNiMDg2NjcwMzgzNWNmY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6SnfYufwWAatNo99pXu7pRDXku aCbb0vtj8t9JMoFNVgZr5BVYo34TMSjkyMDQmac/U7QLWdQXWFTXkKJspSXSVX1c 9FQLxtZYbZR5WF+5CJC9OyZqtjnZq0snZLqUgxWATY81C6yT8e0Tzs7+t//aGjqE /kOqJkgqYKQIi9g9TcsPSd3gxBT+AwibtoKUJY6I8KMrPDPeBJd20L3IFfC/mwP6 Np9Fa0RsjWBeo7Ee4gtfkrU7I/BIyIKC1xUgWVJy7jcXidmEY4LBtAN59MUSqrWH FkvRQ/vaNpoNt1PYtejMzoGirPwmM8jBU4PL4LLvpS50WDV4PvALtG02wQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLAOJfVeu6ywafEDrLCGZwODXPzNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzMxYTBl Yy1kOWI4LTQ5ZTQtYjQzNi04YjQyMTVlNTgwMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvMzFhMGVj LWQ5YjgtNDllNC1iNDM2LThiNDIxNWU1ODAyOC8xL3NBNGw5VjY3ckxCcDhRT3Nz SVpuQTROY19NMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAucW1MA0EAgACMAcDBQMqEIlAMA0GCSqGSIb3 DQEBCwUAA4IBAQBCFNNVGX89wssKxjhDJT+9nA2r6rZsbGTh0sL+xdsGiiI6G7Ja DAz5CSO0Axuxn1FbA9C1O1CLgPoEkoO++n5nG0wLu/OKQOCPPug8PbCoLe7z9KXN 6XDIvPoYXHptzcBrglWdaiUqYesmxbdrShHgoNKRZrJKzUUCwBBTiiv+bkFSywcP bW1rsJdgRz5Ao9HlxcIDE2Tmea4Pc5RQWBqLe7l8PUzGSi2gf3FyT+Rt7p2XdFFG +TclvWGui/o+c4GoCj2b68ij/bqDWAOwEUH2+VqFjZeByvjtCENKXk2wWMO5HmnT gvK+dj7FHJa9OamcdmpOh6zQqOaH3Aa3wpl7 -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:13 2026 by rpki-client