This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer File: sBECIYfjOVoVJPoadUHqeTKFr8I.cer (raw, json) Hash identifier: JZqUkrvquNCJSHXuti6JnfOLV69pWDPfWmUhVsv7ROg= Subject key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA74242AE02BED8D78FE447FF51A6FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39308 IP: 89.144.128.0/18 IP: 109.109.32.0/19 IP: 159.20.96.0/20 IP: 185.56.96.0/22 IP: 2a00:1570::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:42:42:ae:02:be:d8:d7:8f:e4:47:ff:51:a6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b011022187e3395a1524fa1a7541ea793285afc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:92:9b:58:b1:d1:bd:31:ad:fa:37:96:f3: 9c:44:9f:53:c1:6f:cd:5c:64:d7:ae:4e:6c:df:4f: 3e:18:bd:b0:4a:69:e5:b4:62:f2:a3:0f:ea:82:1e: 3f:e6:f5:9b:7f:c2:cb:65:48:8c:be:f6:77:23:4d: c0:50:bb:15:a8:4a:99:d1:7c:ac:34:00:7a:b1:fa: 0b:f5:8e:42:03:42:01:cc:fd:a8:9d:ba:7e:88:05: e6:21:e8:14:2a:5f:9e:4f:1e:19:32:45:6e:cc:19: 96:5a:76:39:d1:28:03:c8:10:4b:a7:ff:34:29:2e: e2:b0:d9:09:69:a1:27:a3:51:93:42:21:99:5f:ad: f0:19:69:46:11:e2:2a:9e:a8:bb:f6:e6:0a:ed:a2: 52:88:8f:12:70:92:06:31:a5:b5:8f:fb:26:a4:8d: 86:56:2c:12:dc:fa:34:77:b9:c2:88:ba:31:c0:8e: d7:0a:b2:ff:b1:4c:1c:b5:bf:03:fe:f3:af:9c:81: 47:36:2f:c1:7b:fa:0b:5e:d6:df:bd:d0:ff:f0:96: 50:dc:e8:3d:a2:9d:73:a2:0e:f2:46:bf:bb:99:73: 46:c8:d3:79:eb:54:b9:f0:b2:3f:69:e2:2b:27:5f: e1:80:88:ac:0c:e3:97:1f:b9:01:4b:b7:eb:8f:6c: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.128.0/18 109.109.32.0/19 159.20.96.0/20 185.56.96.0/22 IPv6: 2a00:1570::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39308 Signature Algorithm: sha256WithRSAEncryption 57:82:e3:83:9a:ac:96:96:d2:4b:7b:e8:5b:8e:9d:55:81:4c: cf:28:90:7c:8b:f0:15:2b:be:d0:0b:d3:77:99:8b:a6:da:73: 4c:c8:89:e3:4d:02:2f:90:77:47:37:43:49:4b:8d:61:a6:46: 53:ff:76:d3:ca:ff:1b:54:9e:6b:f1:8d:4b:a5:54:a3:5e:69: 57:09:bb:b1:15:c7:29:47:54:6a:b7:55:87:4b:27:bc:53:b2: 68:ea:52:71:3e:5f:cc:a9:b1:2c:9c:d5:6c:fc:24:cb:81:69: b8:3e:9f:89:70:5e:43:d1:5d:46:b4:71:fa:df:e6:f4:8e:8f: ac:f6:b0:32:f9:26:ec:00:8a:fa:4f:0d:1f:d4:6d:84:e9:5a: d4:7b:50:77:eb:82:22:11:ea:4a:04:b7:8e:ba:18:00:c8:e5: f3:5b:21:87:22:d4:d5:56:b8:e2:5f:57:64:15:7b:ac:f2:d3: 3c:ae:fd:3c:1c:1c:14:59:a0:84:fe:b2:8a:0f:c4:16:02:1f: 27:8d:2d:0c:a0:56:ff:04:89:83:6c:82:86:ac:61:9a:a3:82: 81:7f:18:fe:49:63:01:1c:02:c9:46:f5:13:73:b8:e5:75:82: 06:d1:2e:2b:a1:d6:03:8c:1b:bb:d4:07:a8:52:44:c0:b6:95: 3e:f6:a4:fd -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+p0JCrgK+2NeP5Ef/Uab6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDExMDIyMTg3ZTMzOTVhMTUyNGZhMWE3NTQxZWE3OTMyODVhZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wWSm1ix0b0xrfo3lvOcRJ9TwW/N XGTXrk5s308+GL2wSmnltGLyow/qgh4/5vWbf8LLZUiMvvZ3I03AULsVqEqZ0Xys NAB6sfoL9Y5CA0IBzP2onbp+iAXmIegUKl+eTx4ZMkVuzBmWWnY50SgDyBBLp/80 KS7isNkJaaEno1GTQiGZX63wGWlGEeIqnqi79uYK7aJSiI8ScJIGMaW1j/smpI2G ViwS3Po0d7nCiLoxwI7XCrL/sUwctb8D/vOvnIFHNi/Be/oLXtbfvdD/8JZQ3Og9 op1zog7yRr+7mXNGyNN561S58LI/aeIrJ1/hgIisDOOXH7kBS7frj2zbGQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLARAiGH4zlaFST6GnVB6nkyha/CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2U4YmJk Mi0xMzYxLTQxYTMtOTBmMC01MzM0ZTZiOGM1ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZThiYmQy LTEzNjEtNDFhMy05MGYwLTUzMzRlNmI4YzVmZS8xL3NCRUNJWWZqT1ZvVkpQb2Fk VUhxZVRLRnI4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQGWZCAAwQFbW0gAwQEnxRgAwQCuThgMA0EAgAC MAcDBQAqABVwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCZjDANBgkqhkiG9w0B AQsFAAOCAQEAV4Ljg5qslpbSS3voW46dVYFMzyiQfIvwFSu+0AvTd5mLptpzTMiJ 400CL5B3RzdDSUuNYaZGU/9208r/G1Sea/GNS6VUo15pVwm7sRXHKUdUardVh0sn vFOyaOpScT5fzKmxLJzVbPwky4FpuD6fiXBeQ9FdRrRx+t/m9I6PrPawMvkm7ACK +k8NH9RthOla1HtQd+uCIhHqSgS3jroYAMjl81shhyLU1Va44l9XZBV7rPLTPK79 PBwcFFmghP6yig/EFgIfJ40tDKBW/wSJg2yChqxhmqOCgX8Y/kljARwCyUb1E3O4 5XWCBtEuK6HWA4wbu9QHqFJEwLaVPvak/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 13:39:26 2026 by rpki-client