This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer File: sK3wWv729l-hmmHDCuT7EcfPJbY.cer (raw, json) Hash identifier: DOg21ToM8i8dvLWxz+QmBeiwOnnuqEBrB0rkDkFr9dg= Subject key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDAA8C9C9B09A4241C0DCD423AFB5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.67.40.0/22 IP: 2a05:c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:aa:8c:9c:9b:09:a4:24:1c:0d:cd:42:3a:fb:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:9f:c4:26:bf:5f:8c:8d:7f:24:60:a6:a2: 56:6d:46:29:a0:39:22:47:fd:81:ad:1d:cd:da:00: d4:c0:40:da:1f:c6:37:ed:78:e5:fd:e1:84:2c:c7: 18:6e:e4:f4:16:14:70:ad:f2:d9:18:59:c8:e9:fa: 8a:05:07:53:3a:22:dd:39:88:3e:f9:f6:94:2b:af: 14:12:f3:f9:5e:c6:8b:08:0a:39:04:a4:59:70:04: 6d:86:5c:7e:10:92:2e:28:5b:d0:8a:f3:e9:8a:9c: 2a:14:7c:e6:78:cd:a7:04:ea:89:62:0c:9e:b3:d3: 80:5d:cd:7d:4a:e4:3a:1e:00:ad:9b:8e:16:0d:6b: 34:e3:27:0e:2f:f7:69:2d:bb:5c:a7:a0:28:89:a3: 61:de:4c:3f:bb:47:0d:7b:20:1e:1e:8c:3d:6b:2e: 9e:b6:3e:d1:93:5f:0d:c6:1c:03:50:7d:5c:2b:91: 02:e1:53:9e:5e:31:c2:ce:a6:6f:11:47:7f:e0:4a: 36:65:30:d5:b5:a7:8d:4e:83:68:4b:4a:89:b4:36: e1:18:f8:bc:4e:eb:84:68:7e:32:d2:ed:07:d3:f7: 5a:33:14:10:bc:e0:1b:fb:af:a9:24:2b:28:68:7b: 2f:1d:05:7b:0c:2e:d1:40:4c:12:39:7f:e4:88:58: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.40.0/22 IPv6: 2a05:c00::/29 Signature Algorithm: sha256WithRSAEncryption 8e:e6:b7:0a:00:c8:90:49:9a:01:c3:83:f0:83:90:ae:45:0b: 17:fc:a6:f7:be:08:87:89:4a:4a:c7:39:d5:9e:c9:f4:30:c6: bb:b2:42:56:59:f0:d6:46:8c:16:5a:e8:f4:9c:93:da:e4:da: e6:2b:2a:23:ee:77:73:f3:cb:54:b1:b0:e3:55:d0:7f:0d:e1: bc:38:02:fa:3b:07:c9:85:2c:5c:1f:94:12:58:84:27:79:a4: 80:90:94:02:ca:4e:2a:ff:48:3b:1a:04:18:24:f2:d0:65:ff: 13:0d:c1:20:84:82:94:db:f9:1d:0c:16:47:99:10:d7:27:5d: ed:1b:33:0d:90:55:5a:0a:3d:98:fc:2b:48:5a:c2:f5:e6:7b: 5e:06:e4:aa:ee:a3:06:4a:b0:b7:5d:82:79:8d:86:f7:ab:7b: e8:0e:0a:e5:8f:a8:6f:b3:0c:a1:8a:99:17:c5:c1:4f:b3:c7: 84:83:fa:b7:7e:e3:a8:70:7b:ff:88:10:d4:96:03:6c:36:24: 4d:67:8c:14:b5:01:d7:23:73:0f:95:90:f7:e7:ec:0b:e2:06: 9f:38:2e:68:23:7a:36:44:43:da:7d:b7:0f:61:21:c2:90:b6: 98:f4:5d:39:cb:95:f8:28:6d:19:8d:e2:57:aa:ac:09:18:62: 09:08:d6:14 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87aqMnJsJpCQcDc1COvtbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGFkZjA1YWZlZjZmNjVmYTE5YTYxYzMwYWU0ZmIxMWM3Y2YyNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseCfxCa/X4yNfyRgpqJWbUYpoDki R/2BrR3N2gDUwEDaH8Y37Xjl/eGELMcYbuT0FhRwrfLZGFnI6fqKBQdTOiLdOYg+ +faUK68UEvP5XsaLCAo5BKRZcARthlx+EJIuKFvQivPpipwqFHzmeM2nBOqJYgye s9OAXc19SuQ6HgCtm44WDWs04ycOL/dpLbtcp6AoiaNh3kw/u0cNeyAeHow9ay6e tj7Rk18NxhwDUH1cK5EC4VOeXjHCzqZvEUd/4Eo2ZTDVtaeNToNoS0qJtDbhGPi8 TuuEaH4y0u0H0/daMxQQvOAb+6+pJCsoaHsvHQV7DC7RQEwSOX/kiFjOrQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLCt8Fr+9vZfoZphwwrk+xHHzyW2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzcwOTU5 Yi1kNzliLTQyZGMtYjg5My01ZjJkMGUyYWU3MTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNzA5NTli LWQ3OWItNDJkYy1iODkzLTVmMmQwZTJhZTcxNC8xL3NLM3dXdjcyOWwtaG1tSERD dVQ3RWNmUEpiWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUMoMA0EAgACMAcDBQMqBQwAMA0GCSqGSIb3 DQEBCwUAA4IBAQCO5rcKAMiQSZoBw4Pwg5CuRQsX/Kb3vgiHiUpKxznVnsn0MMa7 skJWWfDWRowWWuj0nJPa5NrmKyoj7ndz88tUsbDjVdB/DeG8OAL6OwfJhSxcH5QS WIQneaSAkJQCyk4q/0g7GgQYJPLQZf8TDcEghIKU2/kdDBZHmRDXJ13tGzMNkFVa Cj2Y/CtIWsL15nteBuSq7qMGSrC3XYJ5jYb3q3voDgrlj6hvswyhipkXxcFPs8eE g/q3fuOocHv/iBDUlgNsNiRNZ4wUtQHXI3MPlZD35+wL4gafOC5oI3o2REPafbcP YSHCkLaY9F05y5X4KG0ZjeJXqqwJGGIJCNYU -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:43 2026 by rpki-client