This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer File: sXJUj6PEYOJstRnuUkNhvKbHEy4.cer (raw, json) Hash identifier: pRbjjnWzfy8DPFlKBop8Xx38DbtmlAka4xxzDOn1Jfs= Subject key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EADE9EBEB1B0C367CFD6804FA31CD6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 93.95.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:de:9e:be:b1:b0:c3:67:cf:d6:80:4f:a3:1c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b172548fa3c460e26cb519ee524361bca6c7132e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:71:4d:d7:ec:98:ad:98:01:ce:f4:32:5d:6d: d4:c6:ba:25:e4:18:54:28:0f:e8:bd:d4:e4:75:ba: ed:bd:b8:0a:9e:ed:46:89:29:2b:00:5f:c2:98:af: 2d:39:12:7c:32:3e:7a:c5:07:bf:fd:24:bd:2b:f3: 31:20:84:2d:74:10:af:f3:aa:03:12:e3:7c:53:25: 17:38:71:1e:6c:ec:31:ba:5f:72:76:2e:21:3f:ac: 62:39:42:88:d6:b2:5c:21:e2:f6:84:9e:0b:f4:65: 59:4a:07:15:cf:76:64:47:94:9b:c4:22:1e:5e:50: 10:dd:23:fc:ff:53:b0:41:14:5a:8a:3a:14:3f:c4: d6:23:4b:27:60:f1:48:42:83:66:09:06:69:1f:f3: 4e:75:ee:42:eb:b3:20:84:90:7a:12:88:25:74:c0: 42:61:85:d2:37:b7:02:3e:1d:32:3f:4e:12:1f:ed: ac:fb:2f:8a:9b:3d:9d:92:24:c0:a4:63:58:18:23: 57:20:e2:ea:42:25:94:0a:c0:c7:8d:2b:b0:60:54: 64:fd:4a:bb:03:f3:e3:dd:73:b3:26:fb:f4:9d:a3: da:82:c6:4f:e6:c6:65:eb:55:44:8b:01:c5:ed:0d: a5:d3:26:d1:8a:99:e5:96:66:72:f4:17:c2:18:e6: d1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.112.0/21 Signature Algorithm: sha256WithRSAEncryption 33:bc:8f:aa:78:8e:26:09:2d:63:8f:8f:d2:4f:fb:0b:81:03: 33:6e:13:82:61:3e:c6:40:31:fc:f0:05:f8:2e:e0:be:3b:7c: 23:88:ac:b9:06:6b:56:c1:c4:d8:ba:47:47:4d:80:72:f2:e1: fa:97:94:7a:01:8a:66:e0:20:d2:8f:e5:9e:30:af:04:69:9b: 7f:88:21:cf:b1:bf:de:7f:44:d5:af:77:09:f1:38:4a:60:f8: 91:da:2e:f5:23:44:c4:39:c1:c1:81:56:36:19:02:88:29:1c: 92:ec:71:2d:ad:65:f6:68:63:41:34:46:ab:e7:bb:87:4b:02: 93:e6:fd:6d:ab:7e:f9:ff:49:74:ad:10:ae:ff:42:52:1d:a7: 65:1c:29:72:f2:97:dd:a8:98:ca:d4:6c:63:5a:ac:63:eb:52: 2b:fa:1e:69:5b:bc:2d:42:96:54:25:60:f4:e7:a4:dd:11:7d: c9:88:13:cd:60:2c:1e:f2:36:d6:52:1c:b1:b8:0a:75:40:5d: 9f:01:9b:0a:78:31:fa:c8:3e:7d:07:d8:27:3e:53:ac:74:0c: 8d:1a:25:9a:7b:28:99:01:b3:f5:df:26:c4:dd:32:35:a6:b1: 1f:12:94:fb:27:e3:50:9b:a2:0c:01:8a:30:4c:51:c9:f1:34: 02:3c:a2:c4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26t6evrGww2fP1oBPoxzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTcyNTQ4ZmEzYzQ2MGUyNmNiNTE5ZWU1MjQzNjFiY2E2YzcxMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XFN1+yYrZgBzvQyXW3Uxrol5BhU KA/ovdTkdbrtvbgKnu1GiSkrAF/CmK8tORJ8Mj56xQe//SS9K/MxIIQtdBCv86oD EuN8UyUXOHEebOwxul9ydi4hP6xiOUKI1rJcIeL2hJ4L9GVZSgcVz3ZkR5SbxCIe XlAQ3SP8/1OwQRRaijoUP8TWI0snYPFIQoNmCQZpH/NOde5C67MghJB6EogldMBC YYXSN7cCPh0yP04SH+2s+y+Kmz2dkiTApGNYGCNXIOLqQiWUCsDHjSuwYFRk/Uq7 A/Pj3XOzJvv0naPagsZP5sZl61VEiwHF7Q2l0ybRipnllmZy9BfCGObRCwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLFyVI+jxGDibLUZ7lJDYbymxxMuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2NTcz ZTg4LWRhYmEtNGFjNy1hMmVkLTMyMWM4Mjc3ZDI1ZS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1 NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvQjE3MjU0OEZBM0M0 NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME A11fcDANBgkqhkiG9w0BAQsFAAOCAQEAM7yPqniOJgktY4+P0k/7C4EDM24TgmE+ xkAx/PAF+C7gvjt8I4isuQZrVsHE2LpHR02AcvLh+peUegGKZuAg0o/lnjCvBGmb f4ghz7G/3n9E1a93CfE4SmD4kdou9SNExDnBwYFWNhkCiCkckuxxLa1l9mhjQTRG q+e7h0sCk+b9bat++f9JdK0Qrv9CUh2nZRwpcvKX3aiYytRsY1qsY+tSK/oeaVu8 LUKWVCVg9Oek3RF9yYgTzWAsHvI21lIcsbgKdUBdnwGbCngx+sg+fQfYJz5TrHQM jRolmnsomQGz9d8mxN0yNaaxHxKU+yfjUJuiDAGKMExRyfE0AjyixA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:52 2026 by rpki-client