This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer File: sRaNBioMLmFmqCYsTXKY123t0E8.cer (raw, json) Hash identifier: EMkpNpubI2yJde9CJi0M/UyGS9ARaSDAziO5Sb+3peQ= Subject key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C9045A2889EA08E80CDB8D68CA85 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201343 IP: 185.67.208.0/22 IP: 185.102.208.0/22 IP: 2a05:12c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c9:04:5a:28:89:ea:08:e8:0c:db:8d:68:ca:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:88:1c:ed:24:a1:58:91:2d:d8:74:0c:0e: 96:d8:0f:1e:b1:68:a8:fa:c9:fd:72:91:18:54:27: f7:2c:bf:5e:eb:e3:87:66:be:f4:b2:0c:7c:5e:95: 3d:be:27:9f:66:d8:f8:05:46:db:4a:d6:8d:9f:bd: 00:83:8b:44:89:da:59:4b:53:94:68:0f:f4:35:80: 74:c5:22:08:b5:22:f6:e2:9c:5b:84:d4:f1:69:86: 7f:99:1e:db:21:db:33:ce:6b:a3:4c:e9:97:be:56: c2:0e:14:62:ae:ce:fc:db:b3:e9:2e:7d:4f:67:e8: eb:94:ef:d1:82:e2:23:86:d2:a5:d1:98:d8:39:c2: c1:6c:be:48:3a:15:9d:4b:25:ee:d6:3d:23:33:3b: 39:12:06:12:a0:5e:eb:4b:f6:d6:d9:d6:79:a4:18: e1:40:c2:36:5a:1f:c8:5f:21:f3:19:64:0e:a1:1e: 95:1c:ca:6b:ee:24:8c:7f:fb:67:63:5c:5b:14:8e: a6:d7:2d:33:fe:3e:a4:70:b5:00:8f:74:ec:fd:7c: c0:18:84:3f:dc:79:87:13:ab:b2:92:af:91:0d:77: 7c:c2:ba:80:d8:d0:2b:30:3a:95:36:8d:e7:f7:20: 22:67:e6:a5:29:25:45:e3:f8:26:17:ed:8a:b5:da: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.208.0/22 185.102.208.0/22 IPv6: 2a05:12c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201343 Signature Algorithm: sha256WithRSAEncryption 75:53:e7:53:79:0b:5b:4d:64:84:18:96:46:e1:e0:8e:51:04: 7a:68:90:8a:71:19:79:8f:00:2a:b1:70:00:88:ad:b3:40:29: 2f:8c:92:f7:47:9c:cf:0a:ac:22:38:40:38:c2:3c:5a:e7:6a: e1:14:3c:99:01:62:9b:15:88:b1:0e:81:72:6a:f4:a7:73:83: 35:1c:03:c6:24:93:5f:73:44:5d:30:81:08:e9:9d:c8:d5:3c: 70:00:41:e1:32:70:b5:6a:ac:a5:85:5f:de:a2:51:ff:db:5d: 25:ad:24:d7:51:2f:ad:e8:4c:95:6b:20:28:ba:ce:b4:50:67: fb:32:0b:21:7d:a8:79:bc:9f:14:ad:9e:d1:0b:cd:e7:da:be: 3b:2b:4b:13:37:ad:19:c7:dd:79:db:e8:16:14:9d:e2:30:65: c3:b3:98:ac:c2:12:f3:5b:4c:4a:fa:7e:8e:c9:3d:ff:17:3c: fd:03:50:24:93:61:82:0b:ad:1c:de:3a:9c:05:96:0a:2e:73: 0f:c9:65:fc:a9:ba:f5:cc:68:ec:4b:af:75:24:d5:33:53:e4: 56:6f:1e:73:df:4f:d3:72:31:94:8c:ed:96:ff:cb:2b:57:98: fb:a4:a6:ec:b2:4d:64:43:0e:eb:41:c0:01:25:6f:fc:36:bf: 98:cd:8a:91 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pMkEWiiJ6gjoDNuNaMqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTE2OGQwNjJhMGMyZTYxNjZhODI2MmM0ZDcyOThkNzZkZWRkMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi2IHO0koViRLdh0DA6W2A8esWio +sn9cpEYVCf3LL9e6+OHZr70sgx8XpU9viefZtj4BUbbStaNn70Ag4tEidpZS1OU aA/0NYB0xSIItSL24pxbhNTxaYZ/mR7bIdszzmujTOmXvlbCDhRirs7827PpLn1P Z+jrlO/RguIjhtKl0ZjYOcLBbL5IOhWdSyXu1j0jMzs5EgYSoF7rS/bW2dZ5pBjh QMI2Wh/IXyHzGWQOoR6VHMpr7iSMf/tnY1xbFI6m1y0z/j6kcLUAj3Ts/XzAGIQ/ 3HmHE6uykq+RDXd8wrqA2NArMDqVNo3n9yAiZ+alKSVF4/gmF+2Ktdr46QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLEWjQYqDC5hZqgmLE1ymNdt7dBPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzY3NGFi Yi0yMjFhLTQ0NTQtYWNmYy05NjVhMzQxODAxMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNjc0YWJi LTIyMWEtNDQ1NC1hY2ZjLTk2NWEzNDE4MDEzNi8xL3NSYU5CaW9NTG1GbXFDWXNU WEtZMTIzdDBFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUPQAwQCuWbQMA0EAgACMAcDBQMqBRLAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSfzANBgkqhkiG9w0BAQsFAAOCAQEAdVPn U3kLW01khBiWRuHgjlEEemiQinEZeY8AKrFwAIits0ApL4yS90eczwqsIjhAOMI8 Wudq4RQ8mQFimxWIsQ6Bcmr0p3ODNRwDxiSTX3NEXTCBCOmdyNU8cABB4TJwtWqs pYVf3qJR/9tdJa0k11EvrehMlWsgKLrOtFBn+zILIX2oebyfFK2e0QvN59q+OytL EzetGcfdedvoFhSd4jBlw7OYrMIS81tMSvp+jsk9/xc8/QNQJJNhggutHN46nAWW Ci5zD8ll/Km69cxo7EuvdSTVM1PkVm8ec99P03IxlIztlv/LK1eY+6Sm7LJNZEMO 60HAASVv/Da/mM2KkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:36 2026 by rpki-client