This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer File: sQeA3za1uUL2YOQDov5ginXk5X0.cer (raw, json) Hash identifier: x3Zx2iDtMoUt3ItURYHLbhoaNdY+U2tj5eE+yrvarDo= Subject key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80CAF9B29F693BA2A74B7A717076A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.108.128.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ca:f9:b2:9f:69:3b:a2:a7:4b:7a:71:70:76:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b10780df36b5b942f660e403a2fe608a75e4e57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:9e:2b:21:07:12:f0:9e:30:4f:b3:dc:f0: 3f:c8:ce:21:19:e6:d4:94:e0:c0:e3:a2:21:4b:e5: 66:92:f7:a0:19:f5:dc:51:55:6f:8b:da:16:a1:61: 2a:6a:4e:b4:65:c4:d3:a1:4c:f0:93:9b:c3:ef:ba: c2:01:07:a0:f0:a8:18:43:6d:02:b9:fc:04:07:4e: fd:23:81:2e:9f:f7:d1:01:14:32:38:ac:91:97:91: 9a:64:ec:32:15:e1:43:f4:1e:22:b7:22:4d:68:f6: 27:1f:67:dd:db:5d:ed:69:df:e5:6b:84:a1:ec:43: 76:03:a7:c0:16:a0:47:35:ee:01:9f:4e:75:66:04: 2c:9c:e6:69:1d:b9:b1:c3:f3:a2:fc:73:4c:39:49: 7b:c6:45:84:91:af:0f:ec:e1:35:79:36:ec:b4:7a: 6e:de:93:08:88:ba:bf:f7:02:0d:ac:a4:b1:6b:6b: d0:6b:15:be:17:fa:b7:fc:89:b7:04:15:91:00:46: 59:b8:f0:4e:71:48:5b:58:fd:3f:a6:5c:aa:7c:87: a5:18:a3:70:aa:c1:9e:33:71:20:1b:ed:7d:25:80: 13:17:e4:db:cb:c7:ab:b3:d9:b7:0d:39:c3:84:c5: 01:22:80:57:4b:45:72:4e:ba:17:9e:c8:d0:b2:21: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.108.128.0/24 Signature Algorithm: sha256WithRSAEncryption 91:2d:ed:cf:5c:82:52:24:a0:c4:51:47:74:36:c4:26:e0:1d: 29:60:30:f6:38:f4:e8:87:17:5b:5e:1a:ed:36:8a:68:f1:11: 4e:35:08:f0:e0:98:63:8d:4b:73:5f:8c:f1:a2:43:bc:10:f2: 11:58:0e:da:c9:87:1c:c1:26:dd:0d:ca:2d:51:dd:2f:b6:4e: 6f:8f:ea:a1:9f:57:e3:d7:b8:b9:7d:38:d7:af:42:48:d6:58: e3:cb:15:61:a0:0c:22:62:5c:17:a2:1a:d8:af:f0:2e:88:cc: 70:a4:48:18:07:34:64:73:04:9e:b8:b0:e8:fd:82:a7:bc:a6: 2d:1e:3a:74:f7:cb:16:0e:5a:9e:7f:39:59:89:50:02:8b:7c: 1e:2d:4c:5a:5c:a0:e1:a7:3c:79:27:3b:3c:15:ab:22:b8:ba: d4:7d:d8:9f:c9:3b:09:7b:f7:16:46:e7:11:d0:10:e2:1d:fc: 76:f5:5d:b5:f3:44:93:4b:da:c2:18:8e:b5:94:92:fd:5d:bf: 9f:58:12:06:50:1f:5b:62:a1:48:b3:fa:d4:cd:a8:29:92:79: 1b:2c:a2:d9:3b:ac:9b:d6:cf:08:83:5f:4a:fb:a6:ba:c8:e3: 3c:2a:19:31:8b:4e:32:d0:69:36:3d:a8:ac:f6:2c:6a:e7:7f: ff:3e:d0:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gMr5sp9pO6KnS3pxcHajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTA3ODBkZjM2YjViOTQyZjY2MGU0MDNhMmZlNjA4YTc1ZTRlNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI6eKyEHEvCeME+z3PA/yM4hGebU lODA46IhS+VmkvegGfXcUVVvi9oWoWEqak60ZcTToUzwk5vD77rCAQeg8KgYQ20C ufwEB079I4Eun/fRARQyOKyRl5GaZOwyFeFD9B4ityJNaPYnH2fd213tad/la4Sh 7EN2A6fAFqBHNe4Bn051ZgQsnOZpHbmxw/Oi/HNMOUl7xkWEka8P7OE1eTbstHpu 3pMIiLq/9wINrKSxa2vQaxW+F/q3/Im3BBWRAEZZuPBOcUhbWP0/plyqfIelGKNw qsGeM3EgG+19JYATF+Tby8ers9m3DTnDhMUBIoBXS0VyTroXnsjQsiHTIQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLEHgN82tblC9mDkA6L+YIp15OV9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2I1NjUw NC1lZDE3LTQxOTctYmJhMC1hMGFkZWNmZDVmYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvYjU2NTA0 LWVkMTctNDE5Ny1iYmEwLWEwYWRlY2ZkNWZhOS8xL3NRZUEzemExdVVMMllPUURv djVnaW5YazVYMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwGyAMA0GCSqGSIb3DQEBCwUAA4IBAQCRLe3P XIJSJKDEUUd0NsQm4B0pYDD2OPTohxdbXhrtNopo8RFONQjw4JhjjUtzX4zxokO8 EPIRWA7ayYccwSbdDcotUd0vtk5vj+qhn1fj17i5fTjXr0JI1ljjyxVhoAwiYlwX ohrYr/AuiMxwpEgYBzRkcwSeuLDo/YKnvKYtHjp098sWDlqefzlZiVACi3weLUxa XKDhpzx5Jzs8FasiuLrUfdifyTsJe/cWRucR0BDiHfx29V2180STS9rCGI61lJL9 Xb+fWBIGUB9bYqFIs/rUzagpknkbLKLZO6yb1s8Ig19K+6a6yOM8Khkxi04y0Gk2 Pais9ixq53//PtB8 -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:32 2026 by rpki-client