This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer File: sXtEkEx2lKVAig0pcsOf8LGwPqU.cer (raw, json) Hash identifier: Swwug2WIQP+oK+CQO5pFdUH3m8NvI1tHuixyRSEFYOU= Subject key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82D08BB8B5B61328986B7C9FE4BD12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30816 IP: 193.27.6.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d0:8b:b8:b5:b6:13:28:98:6b:7c:9f:e4:bd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:99:77:83:e5:e7:6c:7e:b7:55:f4:b6:4d:29: 08:e9:56:d1:33:96:9e:a0:9d:9b:1f:09:8f:e9:e5: c8:ab:84:bd:78:ee:86:fb:94:7e:ad:74:4a:16:8f: b5:21:c9:82:e0:15:36:17:13:7f:49:eb:5c:8f:4b: 8a:48:d5:00:c0:61:1a:b0:67:a0:e5:19:f2:bb:7d: 48:b7:f8:73:e6:3b:c6:3b:c3:7d:44:3d:d5:63:8d: 02:d5:dd:9c:d3:b9:75:7b:6e:3f:b9:01:43:93:96: c5:56:4e:ff:46:ab:a4:99:38:84:29:66:7c:bc:ed: b6:da:fb:91:07:c5:8a:6f:13:d7:26:30:cd:a8:cd: ce:0b:95:f6:ae:1e:c7:14:e3:fd:93:5d:51:dc:c7: 6c:6b:6f:50:03:5d:64:dd:a8:22:34:32:fa:31:30: 4d:51:73:7f:de:d3:19:e4:e0:ca:c1:20:2a:05:52: 49:b4:5a:b0:83:3e:86:50:6d:34:70:03:8d:cf:bd: c0:46:24:7b:8e:a4:89:18:26:5d:14:97:91:2c:74: 7c:9f:6c:33:27:c6:cb:2f:ee:2e:c7:67:e9:ae:04: 3c:ba:51:39:ea:1a:e4:97:64:1b:8e:60:91:c7:64: 2d:2a:46:2e:3c:26:83:4c:9c:1d:4a:91:44:57:9d: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.6.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30816 Signature Algorithm: sha256WithRSAEncryption 71:e4:b9:bd:55:6e:5e:7e:17:80:52:e8:d7:03:c9:05:8a:c5: df:a1:bb:1d:63:3d:bd:dc:05:f0:ce:f5:64:8b:55:0d:90:57: 65:4e:4f:af:ac:2f:b0:3a:dc:35:ac:58:eb:c7:b1:2c:59:b3: 14:97:98:2a:6e:be:1e:90:8f:a6:76:c8:84:57:22:bf:cb:db: c7:11:06:4f:cb:5a:49:b2:72:a1:1d:03:25:4f:c6:4a:79:6e: ab:a9:f3:c3:dd:cc:a8:56:a6:2e:9e:ef:d6:8d:72:81:f6:b1: 3a:8f:af:1c:9a:b4:3d:04:96:1e:ff:e7:71:51:a5:a9:98:0e: 36:46:11:b6:1f:09:eb:1b:cb:ed:1a:28:4e:0c:11:fe:b2:af: 8d:e7:71:09:16:10:a3:9a:f2:9c:aa:24:af:81:53:4a:8b:1a: f5:6e:ef:1d:be:9f:dc:79:2f:7e:35:56:55:28:18:95:80:cf: c2:aa:31:a4:d2:03:48:68:2f:cd:f2:ea:0d:a1:2b:de:44:68: cc:01:9c:ff:36:d9:df:39:1c:e1:49:f3:73:5f:97:bc:3f:5a: 18:43:64:c3:e2:3c:48:7c:a4:46:37:d4:6c:e6:b0:04:9a:ff: 6b:a6:f4:5b:52:86:36:08:86:b5:67:44:18:92:ca:33:c5:3b: c9:16:f6:4d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/gtCLuLW2EyiYa3yf5L0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTdiNDQ5MDRjNzY5NGE1NDA4YTBkMjk3MmMzOWZmMGIxYjAzZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Jl3g+XnbH63VfS2TSkI6VbRM5ae oJ2bHwmP6eXIq4S9eO6G+5R+rXRKFo+1IcmC4BU2FxN/Setcj0uKSNUAwGEasGeg 5Rnyu31It/hz5jvGO8N9RD3VY40C1d2c07l1e24/uQFDk5bFVk7/RqukmTiEKWZ8 vO222vuRB8WKbxPXJjDNqM3OC5X2rh7HFOP9k11R3Mdsa29QA11k3agiNDL6MTBN UXN/3tMZ5ODKwSAqBVJJtFqwgz6GUG00cAONz73ARiR7jqSJGCZdFJeRLHR8n2wz J8bLL+4ux2fprgQ8ulE56hrkl2QbjmCRx2QtKkYuPCaDTJwdSpFEV50DBwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLF7RJBMdpSlQIoNKXLDn/CxsD6lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzkxODI0 NS03YjUwLTQ5NTItYTNhNy1hNDU5MTY5NTVlNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvOTE4MjQ1 LTdiNTAtNDk1Mi1hM2E3LWE0NTkxNjk1NWU2Zi8xL3NYdEVrRXgybEtWQWlnMHBj c09mOExHd1BxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRsGMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnhgMA0GCSqGSIb3DQEBCwUAA4IBAQBx5Lm9VW5efheAUujXA8kFisXfobsdYz29 3AXwzvVki1UNkFdlTk+vrC+wOtw1rFjrx7EsWbMUl5gqbr4ekI+mdsiEVyK/y9vH EQZPy1pJsnKhHQMlT8ZKeW6rqfPD3cyoVqYunu/WjXKB9rE6j68cmrQ9BJYe/+dx UaWpmA42RhG2HwnrG8vtGihODBH+sq+N53EJFhCjmvKcqiSvgVNKixr1bu8dvp/c eS9+NVZVKBiVgM/CqjGk0gNIaC/N8uoNoSveRGjMAZz/NtnfORzhSfNzX5e8P1oY Q2TD4jxIfKRGN9Rs5rAEmv9rpvRbUoY2CIa1Z0QYksozxTvJFvZN -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:25 2026 by rpki-client