This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer File: sHATRrrVXff13IGLu7z7t9sQcKs.cer (raw, json) Hash identifier: NLbwa4yCb2P1laHgMUgJGRbEXkHDG0LUP1wnGsTYQFM= Subject key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F150F6AE38240485A6611952889AE23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215978 IP: 195.38.19.0/24 IP: 2a13:a340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0f:6a:e3:82:40:48:5a:66:11:95:28:89:ae:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:97:e8:c6:fa:bb:29:6d:c1:2d:0c:3b:f1: 75:ba:de:16:38:d5:2e:94:b3:ac:a0:97:be:38:66: e0:90:24:f3:1e:d9:a6:d7:45:70:01:b2:dc:17:3d: 11:69:a1:24:83:af:a9:73:3d:06:36:3f:bd:4e:b2: db:18:0f:38:b0:31:7e:a9:66:b5:98:5a:6b:36:a0: 79:d0:5f:95:88:4f:7e:97:7e:c6:45:64:55:d8:a8: fd:93:2d:c9:dc:bb:28:7f:32:b9:44:fc:c3:c1:2b: 36:09:ec:78:46:79:0e:63:15:80:68:a8:d9:53:62: 68:6d:2a:15:fa:f3:73:40:d4:f6:bc:68:43:76:3c: 0e:90:6f:f7:fd:fd:a0:5e:bb:ba:e4:ee:74:48:63: 19:29:bf:e5:06:98:fa:c6:a1:c8:ec:4b:ec:3d:29: 54:ee:04:ab:c4:0b:3c:99:cd:0c:8c:ce:35:86:ef: df:0a:cb:7e:19:4e:c2:d1:90:21:a1:68:a2:83:43: 26:37:fb:8f:d2:cc:62:bb:d2:1e:da:49:45:38:4f: 9a:bc:bc:40:e4:3a:71:69:04:59:ce:63:01:4f:33: ef:7b:d6:2b:c3:32:55:05:1b:d4:94:ee:b8:3b:db: aa:04:12:44:6e:f5:07:af:1d:e0:27:0f:c8:1e:c1: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.38.19.0/24 IPv6: 2a13:a340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215978 Signature Algorithm: sha256WithRSAEncryption 37:5b:ad:fc:1c:05:ed:6e:76:7b:5b:a0:39:7c:af:f8:c5:9c: 6d:d9:e5:fe:c9:39:f7:3d:7a:50:42:7c:99:88:6d:57:36:a5: 7d:82:bb:df:8d:db:fe:75:4e:84:bd:9f:e0:be:3e:54:29:fc: 3d:68:3a:32:c8:cd:e6:15:7e:59:1e:10:69:f0:24:1e:e0:f6: 4f:e6:57:b3:e4:4e:c5:42:76:d1:95:28:5a:e8:60:61:bd:4c: a2:87:2b:78:62:2c:29:08:8d:0d:b4:47:7f:ef:97:49:10:c9: ef:0c:30:66:b9:fb:f2:11:1c:b2:cf:be:70:22:7f:2c:ef:18: 1b:f2:27:7c:08:9d:67:f5:b7:1a:b6:51:31:fa:07:f3:15:9c: 87:21:17:ee:09:b5:e5:09:56:7b:a5:69:c1:fe:25:11:54:0e: 25:a2:b2:9c:a0:85:5b:72:7c:96:b4:ee:bb:a7:b2:6a:6c:62: 93:04:58:12:0b:58:65:ea:f3:0c:3b:4b:16:d4:a3:35:4f:8a: c7:7a:42:b7:47:01:5b:d8:30:7a:b7:ad:98:0b:b6:5d:76:5a: c2:ba:5e:88:b3:8b:0b:48:5f:57:c1:24:b5:37:11:08:be:4b: 8c:4d:db:d7:f5:50:47:b8:87:8b:59:3e:59:43:82:f7:3d:1b: 4b:1e:5a:8f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FQ9q44JASFpmEZUoia4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDcwMTM0NmJhZDU1ZGY3ZjVkYzgxOGJiYmJjZmJiN2RiMTA3MGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhKX6Mb6uyltwS0MO/F1ut4WONUu lLOsoJe+OGbgkCTzHtmm10VwAbLcFz0RaaEkg6+pcz0GNj+9TrLbGA84sDF+qWa1 mFprNqB50F+ViE9+l37GRWRV2Kj9ky3J3LsofzK5RPzDwSs2Cex4RnkOYxWAaKjZ U2JobSoV+vNzQNT2vGhDdjwOkG/3/f2gXru65O50SGMZKb/lBpj6xqHI7EvsPSlU 7gSrxAs8mc0MjM41hu/fCst+GU7C0ZAhoWiig0MmN/uP0sxiu9Ie2klFOE+avLxA 5DpxaQRZzmMBTzPve9YrwzJVBRvUlO64O9uqBBJEbvUHrx3gJw/IHsG4fwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLBwE0a61V339dyBi7u8+7fbEHCrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzJmNWYy Mi03NDM5LTQyMDgtOGIzOS03ZDExZmNmMTcxMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMmY1ZjIy LTc0MzktNDIwOC04YjM5LTdkMTFmY2YxNzEyMy8xL3NIQVRScnJWWGZmMTNJR0x1 N3o3dDlzUWNLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwyYTMA0EAgACMAcDBQMqE6NAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLqjANBgkqhkiG9w0BAQsFAAOCAQEAN1ut/BwF7W52 e1ugOXyv+MWcbdnl/sk59z16UEJ8mYhtVzalfYK7343b/nVOhL2f4L4+VCn8PWg6 MsjN5hV+WR4QafAkHuD2T+ZXs+ROxUJ20ZUoWuhgYb1MoocreGIsKQiNDbRHf++X SRDJ7wwwZrn78hEcss++cCJ/LO8YG/InfAidZ/W3GrZRMfoH8xWchyEX7gm15QlW e6Vpwf4lEVQOJaKynKCFW3J8lrTuu6eyamxikwRYEgtYZerzDDtLFtSjNU+Kx3pC t0cBW9gweretmAu2XXZawrpeiLOLC0hfV8EktTcRCL5LjE3b1/VQR7iHi1k+WUOC 9z0bSx5ajw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:45:48 2026 by rpki-client