This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer File: sWq92UIPBLqcHNLDTcezUpiK-Nk.cer (raw, json) Hash identifier: snfgqEZNcggUSk7BR4vkVPufB2gVmh5CBVzqVpDZ+1c= Subject key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD5DBD5290850CC210AB0D1935E8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.56.171.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d5:db:d5:29:08:50:cc:21:0a:b0:d1:93:5e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:aa:9b:de:9e:2d:12:0d:2a:83:58:47:4a: 82:39:c9:09:5f:34:74:cd:a4:55:da:f3:89:83:e4: 4c:88:b6:6e:20:8f:fa:22:aa:32:d5:16:a5:ae:b3: 9f:bf:a4:29:9f:10:32:d1:47:e4:ad:a2:a5:48:a2: a3:26:cf:11:0b:7f:58:df:b2:3c:03:53:8b:a3:de: 0f:bf:99:ca:a4:25:57:56:85:e8:33:9c:9b:a1:98: de:95:a5:86:fd:e5:95:44:88:e3:ad:4e:78:36:37: 14:3b:07:d0:43:17:d0:6d:80:e5:9e:85:54:dd:75: d0:4a:ec:15:ab:63:16:95:79:b9:19:a4:c4:b8:2a: c4:1b:57:d2:34:99:ef:a5:4a:03:60:e8:52:cb:d1: ce:2f:03:88:93:7a:7a:d5:a6:ef:6b:31:26:5c:08: 6e:50:e2:6e:de:2e:34:6f:0b:33:c4:41:40:25:e2: 8d:76:9f:dc:82:3f:0e:59:31:25:53:62:44:84:bb: 25:9b:ac:f6:09:cf:fb:49:f8:21:b7:c1:df:ee:97: 5d:63:d7:13:4d:c7:d9:ba:f2:97:63:60:af:80:c4: 28:dd:59:48:9c:1e:f9:d4:b0:39:ea:c7:b2:29:b3: 8c:25:5f:16:a9:3a:a8:b9:b4:86:55:62:30:9a:b8: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.171.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:1a:fa:61:87:ad:24:c1:e2:a7:20:97:43:f0:c9:2e:c4:f1: fc:7f:f8:15:00:68:1e:7e:a5:1e:6a:2f:a8:87:af:aa:ac:d2: 75:5b:92:92:e2:ba:ad:4d:96:c1:5f:b6:f1:2b:3a:3e:65:3a: 78:12:ac:d9:a3:f1:7e:20:1a:29:22:ff:b5:87:c7:f3:f5:b5: b1:19:3e:15:ff:91:16:b3:2e:88:4e:f2:af:4e:30:d3:83:de: bd:c9:4f:cf:cd:bf:3a:e2:00:0f:21:d3:86:03:a1:03:a7:96: 6e:38:46:5a:28:64:18:e7:28:8f:5a:22:b5:da:f5:ba:2a:f1: 0e:99:b6:2d:57:0a:25:bd:2b:bb:4f:d0:2b:77:61:52:f5:e3: 02:8b:d0:43:44:96:d5:91:de:be:1c:ba:18:f5:02:6a:67:c1: 9f:d7:10:01:d6:f3:fe:af:6c:ff:02:0b:7f:a7:e4:f4:a5:3a: 8e:1a:e6:12:42:40:5f:de:ff:46:f5:b5:ef:94:d0:27:c9:ae: 2f:9a:1b:1a:38:e5:4a:67:9e:c7:80:79:84:c0:18:b2:fa:ab: 52:cc:6b:63:31:76:c8:5a:ca:f0:e3:67:53:ac:58:7e:c9:9b: 93:b5:30:aa:f0:9e:ab:c6:a5:db:d8:34:c0:19:57:7e:b1:97: 06:ed:8a:9c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57NXb1SkIUMwhCrDRk16KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTZhYmRkOTQyMGYwNGJhOWMxY2QyYzM0ZGM3YjM1Mjk4OGFmOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Oqm96eLRINKoNYR0qCOckJXzR0 zaRV2vOJg+RMiLZuII/6Iqoy1RalrrOfv6QpnxAy0UfkraKlSKKjJs8RC39Y37I8 A1OLo94Pv5nKpCVXVoXoM5yboZjelaWG/eWVRIjjrU54NjcUOwfQQxfQbYDlnoVU 3XXQSuwVq2MWlXm5GaTEuCrEG1fSNJnvpUoDYOhSy9HOLwOIk3p61abvazEmXAhu UOJu3i40bwszxEFAJeKNdp/cgj8OWTElU2JEhLslm6z2Cc/7Sfght8Hf7pddY9cT TcfZuvKXY2CvgMQo3VlInB751LA56seyKbOMJV8WqTqoubSGVWIwmrgiUQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLFqvdlCDwS6nBzSw03Hs1KYivjZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzJhZGMz OS0zNjMwLTQyNWYtYWYyOS1mYmIwZDNjMTA0MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMmFkYzM5 LTM2MzAtNDI1Zi1hZjI5LWZiYjBkM2MxMDQyMy8xL3NXcTkyVUlQQkxxY0hOTERU Y2V6VXBpSy1Oay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAAjirMA0GCSqGSIb3DQEBCwUAA4IBAQBuGvph h60kweKnIJdD8MkuxPH8f/gVAGgefqUeai+oh6+qrNJ1W5KS4rqtTZbBX7bxKzo+ ZTp4EqzZo/F+IBopIv+1h8fz9bWxGT4V/5EWsy6ITvKvTjDTg969yU/Pzb864gAP IdOGA6EDp5ZuOEZaKGQY5yiPWiK12vW6KvEOmbYtVwolvSu7T9Ard2FS9eMCi9BD RJbVkd6+HLoY9QJqZ8Gf1xAB1vP+r2z/Agt/p+T0pTqOGuYSQkBf3v9G9bXvlNAn ya4vmhsaOOVKZ57HgHmEwBiy+qtSzGtjMXbIWsrw42dTrFh+yZuTtTCq8J6rxqXb 2DTAGVd+sZcG7Yqc -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:36 2026 by rpki-client