This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer File: sL0oE0WvbNVBVNTP908ZWjiP_8E.cer (raw, json) Hash identifier: AUsf3BI+5FzDOa2OsLTdVKfLEt/7TcijN8in6XV/loY= Subject key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6335A36044E227E855CD292AF8FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.93.73.0 -- 194.93.75.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:63:35:a3:60:44:e2:27:e8:55:cd:29:2a:f8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0bd281345af6cd54154d4cff74f195a388fffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:26:8a:4e:de:b2:13:ff:6a:ce:d3:7e:cf: 95:3d:1f:46:9b:7d:90:72:4d:d1:89:71:0b:b7:66: ba:b4:07:76:c5:33:3f:c6:23:7d:53:6c:90:63:d8: 05:d6:ec:17:94:21:a2:c0:d5:55:64:c3:2a:f0:77: 6f:d4:ed:b0:43:44:21:a7:ac:ab:c1:cb:3f:4a:82: ee:64:2b:21:95:8b:c2:6d:90:34:6f:19:6c:f7:b5: 99:79:2a:c0:25:a8:36:bb:df:e4:0c:77:13:b3:81: b6:09:49:4d:09:f2:15:74:ea:df:d2:a6:97:ee:63: 7f:2e:2e:31:c4:93:60:4d:e9:ea:30:9c:a0:f8:51: 5d:12:3e:57:da:e2:21:fc:8a:46:cf:ee:0d:0d:62: 61:ad:75:c0:45:c4:9e:a1:9e:6b:6c:12:99:ae:8c: 9a:32:8f:e5:b3:6f:7c:2f:56:79:a4:40:9b:e6:9e: b2:07:90:d0:88:42:cc:ed:4d:84:f9:cd:fa:ac:cd: 63:13:f3:6e:26:42:88:87:1e:cb:7e:3b:44:41:da: 5f:c8:7b:b2:4d:63:1e:7e:c0:27:14:7a:35:25:5b: 50:d6:88:34:d0:b0:0e:39:8b:df:fa:4d:1e:3f:c7: fb:b0:1c:4c:65:53:6c:ab:84:9f:3f:ac:5e:06:4d: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.73.0-194.93.75.255 Signature Algorithm: sha256WithRSAEncryption 70:57:13:fa:2d:7b:26:35:1d:34:1d:69:f7:52:cc:54:77:be: 68:00:74:c4:29:b1:21:1c:05:c3:6c:6b:28:32:31:b2:9a:96: 7b:31:b9:bd:cf:c1:97:02:36:6f:ec:a9:07:d3:d2:82:45:46: fb:e7:e3:a8:36:a0:42:40:70:99:27:8a:da:51:23:d4:b8:20: ad:10:3b:af:b3:c0:c2:18:79:6d:b4:47:00:96:e4:b9:0a:13: b2:77:a0:5c:88:7c:49:7a:cc:11:cf:d6:54:5f:db:e9:1b:a0: 26:54:53:91:8c:62:08:dc:3b:6b:52:8b:78:44:d4:38:32:65: 7a:15:b5:a4:7b:c8:7c:c9:61:d6:34:3c:0d:44:32:83:8b:6d: 6c:fb:b2:92:25:e6:3b:28:61:e9:92:0b:36:43:64:20:b3:45: 69:0d:02:a0:ae:ef:80:9f:18:60:e9:e9:8f:32:4a:c1:5c:63: 1d:f6:67:3e:21:57:18:c7:e9:09:c7:ce:02:cc:04:73:2c:74: 79:b6:28:50:38:04:f2:cd:60:92:8d:85:26:d8:6a:2d:5d:e8: 3c:93:e4:f3:6a:9e:fb:5a:08:44:91:ca:13:25:32:86:62:5e: c8:49:25:01:9a:b9:09:9b:c8:44:aa:8f:9b:9a:b9:61:0b:55: d2:f7:5c:bd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt262M1o2BE4ifoVc0pKvj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGJkMjgxMzQ1YWY2Y2Q1NDE1NGQ0Y2ZmNzRmMTk1YTM4OGZmZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE0mik7eshP/as7Tfs+VPR9Gm32Q ck3RiXELt2a6tAd2xTM/xiN9U2yQY9gF1uwXlCGiwNVVZMMq8Hdv1O2wQ0Qhp6yr wcs/SoLuZCshlYvCbZA0bxls97WZeSrAJag2u9/kDHcTs4G2CUlNCfIVdOrf0qaX 7mN/Li4xxJNgTenqMJyg+FFdEj5X2uIh/IpGz+4NDWJhrXXARcSeoZ5rbBKZroya Mo/ls298L1Z5pECb5p6yB5DQiELM7U2E+c36rM1jE/NuJkKIhx7LfjtEQdpfyHuy TWMefsAnFHo1JVtQ1og00LAOOYvf+k0eP8f7sBxMZVNsq4SfP6xeBk1PjQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFLC9KBNFr2zVQVTUz/dPGVo4j//BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2Y1ZmRl Yi0zYTE0LTRhOWUtODgxNS1lNTZiNjkwZmQzMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvZjVmZGVi LTNhMTQtNGE5ZS04ODE1LWU1NmI2OTBmZDMwZS8xL3NMMG9FMFd2Yk5WQlZOVFA5 MDhaV2ppUF84RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADCXUkDBALCXUgwDQYJKoZIhvcNAQELBQAD ggEBAHBXE/oteyY1HTQdafdSzFR3vmgAdMQpsSEcBcNsaygyMbKalnsxub3PwZcC Nm/sqQfT0oJFRvvn46g2oEJAcJknitpRI9S4IK0QO6+zwMIYeW20RwCW5LkKE7J3 oFyIfEl6zBHP1lRf2+kboCZUU5GMYgjcO2tSi3hE1DgyZXoVtaR7yHzJYdY0PA1E MoOLbWz7spIl5jsoYemSCzZDZCCzRWkNAqCu74CfGGDp6Y8ySsFcYx32Zz4hVxjH 6QnHzgLMBHMsdHm2KFA4BPLNYJKNhSbYai1d6DyT5PNqnvtaCESRyhMlMoZiXshJ JQGauQmbyESqj5uauWELVdL3XL0= -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:23 2026 by rpki-client