This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer File: sDwwLC9SJ349CraEL2iqX40Nd4c.cer (raw, json) Hash identifier: hjbCl7RUtqeVZ94d+jian11jk8TWx3KKCF9VJ40whIk= Subject key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8066B96E0B4C78ED24FAFD5AF732B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8923 AS: 9152 AS: 25454 AS: 31204 AS: 35210 AS: 48331 IP: 46.166.0.0/18 IP: 77.89.192.0/18 IP: 83.218.192.0/19 IP: 89.149.64.0/18 IP: 91.250.245.0/24 IP: 94.243.64.0/18 IP: 185.8.68.0/22 IP: 185.167.132.0/22 IP: 188.131.0.0/17 IP: 193.239.182.0/23 IP: 195.22.224.0/19 IP: 212.56.192.0/19 IP: 217.12.112.0/20 IP: 2a00:1858::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:66:b9:6e:0b:4c:78:ed:24:fa:fd:5a:f7:32:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dc:94:fc:2e:46:35:5a:60:ee:b3:d2:da:4a: 81:80:0b:42:0b:e1:57:3c:5a:23:8e:46:44:18:86: 03:e4:83:fd:c8:a7:27:d9:2f:72:23:30:91:ba:95: b2:c6:e1:50:1d:4d:9e:94:12:75:7a:35:39:23:58: 4d:fa:97:79:12:88:62:08:f0:00:d6:43:2b:8a:b8: c7:8c:2d:e4:3c:bc:3a:d0:d6:2f:14:5d:62:b3:02: a9:74:72:63:d6:7b:38:2c:8e:16:1e:83:b8:38:00: dd:a9:ae:2c:e5:bb:92:cf:05:ac:12:2a:c4:a2:ad: 35:b5:ae:26:8b:b6:65:07:7a:94:46:27:10:3d:86: c5:7f:04:8e:93:be:af:ec:45:40:3d:29:39:0c:e1: ff:fe:3c:55:c4:0f:5b:03:04:67:e1:75:53:4a:44: 05:29:b5:e5:d7:19:b4:b7:eb:69:e1:79:9f:81:09: 44:e9:a6:2d:8b:b6:e8:95:1e:70:76:78:2e:7f:7c: 21:97:03:3c:22:ee:90:27:88:68:ee:5a:f6:3c:f3: 51:e3:26:26:71:1a:85:de:8c:43:ce:de:06:63:28: bf:8d:36:74:f1:ef:c4:10:08:d1:e4:a5:d5:e1:a9: 6a:4d:bc:cc:e8:ce:69:b5:76:fd:65:a2:3c:9f:2c: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.166.0.0/18 77.89.192.0/18 83.218.192.0/19 89.149.64.0/18 91.250.245.0/24 94.243.64.0/18 185.8.68.0/22 185.167.132.0/22 188.131.0.0/17 193.239.182.0/23 195.22.224.0/19 212.56.192.0/19 217.12.112.0/20 IPv6: 2a00:1858::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8923 9152 25454 31204 35210 48331 Signature Algorithm: sha256WithRSAEncryption 60:b7:9d:a9:8d:a7:df:dc:d0:13:b3:4c:81:9b:f6:25:44:fd: 99:27:c4:be:28:f7:51:f8:fb:d6:79:1f:cc:cc:84:86:db:a9: 0a:2f:49:b8:3a:36:4a:f9:b9:42:d6:9e:79:81:c1:e7:c1:32: c3:a8:75:10:de:42:ec:f9:2e:2c:d5:73:36:e3:5d:14:2c:34: 4a:e1:6f:69:aa:37:bd:60:5e:05:ec:2f:1f:79:54:47:ca:ac: 0d:3e:e1:97:bb:ec:b7:83:66:1d:d7:c4:3f:79:e2:48:88:4a: cb:2f:11:c9:de:55:84:85:25:df:8f:2f:c0:2b:81:b0:37:8d: 62:69:19:ba:59:4b:8b:f5:60:de:6f:50:8e:90:48:57:a0:be: 9e:f9:7e:41:3f:3f:61:4e:67:05:7c:e2:4a:b2:8a:50:13:4d: f8:6a:48:9e:54:90:49:a9:f4:90:f9:ed:8c:f1:4d:1a:f3:2b: ce:9b:cc:ba:74:3f:46:7a:33:b6:8c:f8:2b:0f:ac:0b:18:47: 66:ae:81:c9:52:77:2e:11:05:a8:66:e2:0f:3d:dc:9c:32:3a: af:1c:28:f5:42:a1:97:fc:f8:51:c2:2f:48:40:a7:50:89:7b: 3d:ad:e8:ef:63:ec:57:a4:9f:d2:a4:3b:d5:d8:42:51:e2:a2: 05:c2:5a:68 -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAZt8gGa5bgtMeO0k+v1a9zK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDNjMzAyYzJmNTIyNzdlM2QwYWI2ODQyZjY4YWE1ZjhkMGQ3Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtyU/C5GNVpg7rPS2kqBgAtCC+FX PFojjkZEGIYD5IP9yKcn2S9yIzCRupWyxuFQHU2elBJ1ejU5I1hN+pd5EohiCPAA 1kMrirjHjC3kPLw60NYvFF1iswKpdHJj1ns4LI4WHoO4OADdqa4s5buSzwWsEirE oq01ta4mi7ZlB3qURicQPYbFfwSOk76v7EVAPSk5DOH//jxVxA9bAwRn4XVTSkQF KbXl1xm0t+tp4XmfgQlE6aYti7bolR5wdnguf3whlwM8Iu6QJ4ho7lr2PPNR4yYm cRqF3oxDzt4GYyi/jTZ08e/EEAjR5KXV4alqTbzM6M5ptXb9ZaI8nyyM6QIDAQAB o4IDDDCCAwgwHQYDVR0OBBYEFLA8MCwvUid+PQq2hC9oql+NDXeHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2EyZWM5 Yy05ZDc2LTRlOTQtOWUzYS02ZjcwMjRjM2FhZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvYTJlYzlj LTlkNzYtNGU5NC05ZTNhLTZmNzAyNGMzYWFkNy8xL3NEd3dMQzlTSjM0OUNyYUVM MmlxWDQwTmQ0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUF BwEHAQH/BGcwZTBUBAIAATBOAwQGLqYAAwQGTVnAAwQFU9rAAwQGWZVAAwQAW/r1 AwQGXvNAAwQCuQhEAwQCuaeEAwQHvIMAAwQBwe+2AwQFwxbgAwQF1DjAAwQE2Qxw MA0EAgACMAcDBQAqABhYMC8GCCsGAQUFBwEIAQH/BCAwHqAcMBoCAiLbAgIjwAIC Y24CAnnkAgMAiYoCAwC8yzANBgkqhkiG9w0BAQsFAAOCAQEAYLedqY2n39zQE7NM gZv2JUT9mSfEvij3Ufj71nkfzMyEhtupCi9JuDo2Svm5QtaeeYHB58Eyw6h1EN5C 7PkuLNVzNuNdFCw0SuFvaao3vWBeBewvH3lUR8qsDT7hl7vst4NmHdfEP3niSIhK yy8Ryd5VhIUl348vwCuBsDeNYmkZullLi/Vg3m9QjpBIV6C+nvl+QT8/YU5nBXzi SrKKUBNN+GpInlSQSan0kPntjPFNGvMrzpvMunQ/Rnoztoz4Kw+sCxhHZq6ByVJ3 LhEFqGbiDz3cnDI6rxwo9UKhl/z4UcIvSECnUIl7Pa3o72PsV6Sf0qQ71dhCUeKi BcJaaA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:02 2026 by rpki-client