This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer File: sK0iZDwtl71x-LY0-40dT58B9Kc.cer (raw, json) Hash identifier: DAQstTKAR/19/sF9NoYSU8XbprVPOcC4/3xxHEAD1X0= Subject key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D130D3E7F79DBF8118ADD1341DD7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.203.118.0/23 IP: 195.88.152.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:13:0d:3e:7f:79:db:f8:11:8a:dd:13:41:dd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:25:b9:c9:56:34:1e:ac:11:52:f1:fc:75: e4:34:f8:28:10:82:f9:2d:ba:82:a5:71:e6:e6:9a: 8b:79:a6:8c:48:39:48:b6:2a:1a:45:d6:cf:28:a0: 50:52:4c:54:dc:9c:8b:c3:4d:b6:70:e6:a8:b4:a5: 27:ba:34:e6:6f:ce:63:31:29:33:d8:bf:73:12:d1: 2a:fc:72:1d:58:dd:d4:19:5c:98:fe:33:dd:d1:40: 64:3d:eb:8d:95:c4:26:e6:22:88:a1:6b:da:59:b1: 45:08:a0:3e:be:6f:00:fc:6a:82:dd:5e:ce:9e:6c: 7e:9b:cc:70:55:15:c0:94:a9:5e:7a:5c:c5:51:19: 4b:7e:77:d0:79:46:cd:1b:c9:d5:53:55:c8:e4:f2: 75:dc:31:24:ee:a5:a5:d8:00:0b:3f:18:83:1c:f9: c4:e9:ec:16:2f:ae:df:dd:d1:a8:ee:f8:f2:65:2a: 98:7d:6e:93:6a:62:7a:24:d9:70:53:33:f1:14:3b: a2:f9:9c:6d:34:9d:88:af:f6:09:68:93:ac:b8:0f: fe:e9:19:db:85:81:5a:7b:dc:50:0d:22:aa:93:ce: f4:c4:53:49:ce:b1:da:9e:7c:db:b5:30:4b:1d:31: c3:db:4c:86:68:af:cf:aa:b6:28:46:e8:09:b1:d7: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.118.0/23 195.88.152.0/23 Signature Algorithm: sha256WithRSAEncryption a6:ba:3e:63:5c:f1:3e:c1:63:13:31:a2:47:02:84:d1:7a:e3: bd:ee:55:8b:ca:43:04:4b:8f:bb:55:22:fa:d2:f4:45:c4:be: b5:d6:c8:df:34:5c:63:c8:7e:6c:6e:ca:48:08:53:fc:bb:df: c0:9e:0b:45:66:ac:be:f4:74:8b:10:50:99:45:a8:2b:56:51: 43:32:1a:1d:ac:83:2e:21:68:29:0f:c5:2d:d5:de:ba:96:66: 16:50:ee:d9:96:41:f2:a6:4c:5a:38:8d:e4:93:d2:01:9c:a3: dc:12:a8:30:ee:f9:15:7a:66:dd:1a:40:aa:99:57:3f:30:2c: 1d:78:f3:8d:ba:06:c3:89:d3:f8:71:7c:d9:c1:1f:81:bb:6c: fe:98:7d:af:f5:66:2f:3b:ed:6b:27:53:c9:ce:c3:88:88:6c: 2b:49:10:17:8f:0d:63:cf:25:67:6d:8c:bc:13:e4:d3:0d:32: ce:c7:20:ad:ed:45:10:12:d3:d4:58:ec:96:59:82:2f:21:9b: 38:22:32:5e:b4:ac:4e:a3:61:ee:9d:96:ea:46:f2:04:0b:68: 11:68:e8:9d:bc:53:d9:08:aa:df:11:ee:17:4b:76:69:7e:27: b1:91:0b:f7:9e:84:70:f1:0b:68:ac:62:d5:64:97:f7:c8:7f: 9f:e0:83:67 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt9XRMNPn952/gRit0TQd1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGFkMjI2NDNjMmQ5N2JkNzFmOGI2MzRmYjhkMWQ0ZjlmMDFmNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+8luclWNB6sEVLx/HXkNPgoEIL5 LbqCpXHm5pqLeaaMSDlItioaRdbPKKBQUkxU3JyLw022cOaotKUnujTmb85jMSkz 2L9zEtEq/HIdWN3UGVyY/jPd0UBkPeuNlcQm5iKIoWvaWbFFCKA+vm8A/GqC3V7O nmx+m8xwVRXAlKleelzFURlLfnfQeUbNG8nVU1XI5PJ13DEk7qWl2AALPxiDHPnE 6ewWL67f3dGo7vjyZSqYfW6TamJ6JNlwUzPxFDui+ZxtNJ2Ir/YJaJOsuA/+6Rnb hYFae9xQDSKqk870xFNJzrHannzbtTBLHTHD20yGaK/PqrYoRugJsdeyxQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFLCtImQ8LZe9cfi2NPuNHU+fAfSnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzMwYjNm Zi03MDM2LTRhMmUtOGViNS0wNzRmZmI0MjNjMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvMzBiM2Zm LTcwMzYtNGEyZS04ZWI1LTA3NGZmYjQyM2MxMy8xL3NLMGlaRHd0bDcxeC1MWTAt NDBkVDU4QjlLYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwct2AwQBw1iYMA0GCSqGSIb3DQEBCwUAA4IB AQCmuj5jXPE+wWMTMaJHAoTReuO97lWLykMES4+7VSL60vRFxL611sjfNFxjyH5s bspICFP8u9/AngtFZqy+9HSLEFCZRagrVlFDMhodrIMuIWgpD8Ut1d66lmYWUO7Z lkHypkxaOI3kk9IBnKPcEqgw7vkVembdGkCqmVc/MCwdePONugbDidP4cXzZwR+B u2z+mH2v9WYvO+1rJ1PJzsOIiGwrSRAXjw1jzyVnbYy8E+TTDTLOxyCt7UUQEtPU WOyWWYIvIZs4IjJetKxOo2HunZbqRvIEC2gRaOidvFPZCKrfEe4XS3ZpfiexkQv3 noRw8QtorGLVZJf3yH+f4INn -----END CERTIFICATE-----Generated at Sun Jan 25 22:43:03 2026 by rpki-client