This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer File: sDHiyoJMqNVWJAanAhrjwToUJdg.cer (raw, json) Hash identifier: 2Uxuv7l2e0g8RtA5Lc1S80M/MPPYiSd7slyd0ZZ6isQ= Subject key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35A62A87437A5357027067421C8412 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206901 IP: 185.72.140.0/22 IP: 2a03:3fa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a6:2a:87:43:7a:53:57:02:70:67:42:1c:84:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:e4:9c:35:ff:31:e8:97:4b:df:49:65:34: bb:71:a4:0c:f7:37:e6:3f:f3:e9:b4:a3:00:d4:7a: 07:cf:35:d1:d0:16:bb:15:ed:c5:5d:34:c4:a4:09: 16:b3:95:18:91:52:43:1d:39:df:a5:36:ca:fd:26: 1e:15:3e:eb:45:95:2b:62:59:c9:72:6f:42:c5:40: 79:b0:2a:e0:6c:33:e8:9c:75:28:11:21:52:d2:a9: b5:db:d7:ae:27:5e:b0:e7:1a:72:70:47:2a:eb:bd: d2:16:30:a7:73:2a:67:54:a5:9b:15:33:a9:b5:29: 92:53:99:82:ac:db:10:f6:57:a9:14:b4:ee:1a:d9: e4:2b:e6:96:ff:5b:c9:85:36:89:41:1b:07:e2:29: 66:92:2b:0c:a8:70:09:72:96:75:57:c5:a6:57:f2: 90:6b:c9:b3:11:fd:76:c7:bb:9b:b6:d9:bd:c9:f3: af:13:94:ff:a7:22:7a:ef:1f:5a:b1:b7:3d:ff:a8: 74:d8:34:13:19:ab:00:37:c8:76:fd:d9:e3:b7:35: c1:43:ad:a9:97:5a:4c:ef:a0:ae:51:bb:e0:de:ff: 8e:57:c8:58:29:50:44:f5:11:ea:f6:a2:11:fa:70: 81:be:78:af:7b:66:4d:01:67:0c:7c:42:88:1a:35: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.140.0/22 IPv6: 2a03:3fa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206901 Signature Algorithm: sha256WithRSAEncryption 80:bd:48:21:41:8d:4c:81:74:fa:24:70:b5:1b:9a:79:64:08: 84:fa:cd:fd:0a:5a:40:e3:9a:d3:30:6d:54:e1:e4:03:22:5d: 16:1c:d1:28:a9:b2:b1:6c:c5:c0:61:a7:e9:6d:61:32:c7:ab: a8:15:fb:e5:2f:6d:58:5b:cd:98:fa:e7:e8:26:61:dd:2b:3f: 33:14:62:d2:24:64:dc:d5:c1:f2:71:c3:73:17:31:70:d6:3f: 63:bc:bb:f7:a1:e4:2a:84:be:c6:e9:dd:b4:37:ed:bc:3d:42: 60:53:54:1e:98:b6:4f:c3:2a:46:06:71:fa:6f:02:d8:dc:0e: b0:51:c2:09:72:11:2e:7e:96:ef:c8:b1:39:69:3b:a0:73:49: b9:05:ff:59:b4:b4:4b:53:47:c7:02:23:7c:c5:2a:30:94:80: 4c:cb:99:23:f6:33:97:14:03:8f:26:eb:6c:8b:d2:d3:98:70: 10:dd:ae:2d:e0:0a:89:60:e9:ff:56:66:cf:80:fd:0a:30:d7: 69:ae:2d:52:96:6a:2b:1c:22:33:5e:e7:15:bf:5f:d6:60:66: b0:d7:af:53:06:ad:42:b1:fa:f8:c2:e9:6d:71:25:e7:35:85: 42:df:ac:af:d2:6f:d9:67:58:54:ef:36:95:63:b6:0e:0a:1f: a9:bd:cc:fa -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NaYqh0N6U1cCcGdCHIQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDMxZTJjYTgyNGNhOGQ1NTYyNDA2YTcwMjFhZTNjMTNhMTQyNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CLknDX/MeiXS99JZTS7caQM9zfm P/PptKMA1HoHzzXR0Ba7Fe3FXTTEpAkWs5UYkVJDHTnfpTbK/SYeFT7rRZUrYlnJ cm9CxUB5sCrgbDPonHUoESFS0qm129euJ16w5xpycEcq673SFjCncypnVKWbFTOp tSmSU5mCrNsQ9lepFLTuGtnkK+aW/1vJhTaJQRsH4ilmkisMqHAJcpZ1V8WmV/KQ a8mzEf12x7ubttm9yfOvE5T/pyJ67x9asbc9/6h02DQTGasAN8h2/dnjtzXBQ62p l1pM76CuUbvg3v+OV8hYKVBE9RHq9qIR+nCBvnive2ZNAWcMfEKIGjVbuwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLAx4sqCTKjVViQGpwIa48E6FCXYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2I3Yjkz My03ZTgwLTRiMzctYTI4NS0xMzBlNGRjMDE1YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYjdiOTMz LTdlODAtNGIzNy1hMjg1LTEzMGU0ZGMwMTVhYi8xL3NESGl5b0pNcU5WV0pBYW5B aHJqd1RvVUpkZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUiMMA0EAgACMAcDBQAqAz+gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMoNTANBgkqhkiG9w0BAQsFAAOCAQEAgL1IIUGNTIF0 +iRwtRuaeWQIhPrN/QpaQOOa0zBtVOHkAyJdFhzRKKmysWzFwGGn6W1hMserqBX7 5S9tWFvNmPrn6CZh3Ss/MxRi0iRk3NXB8nHDcxcxcNY/Y7y796HkKoS+xundtDft vD1CYFNUHpi2T8MqRgZx+m8C2NwOsFHCCXIRLn6W78ixOWk7oHNJuQX/WbS0S1NH xwIjfMUqMJSATMuZI/YzlxQDjybrbIvS05hwEN2uLeAKiWDp/1Zmz4D9CjDXaa4t UpZqKxwiM17nFb9f1mBmsNevUwatQrH6+MLpbXEl5zWFQt+sr9Jv2WdYVO82lWO2 Dgofqb3M+g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:47:23 2026 by rpki-client