This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer File: sa8S9cp1ySKkql2stJwEqTI39O0.cer (raw, json) Hash identifier: ldxWA/lfK2Rc3PmnyFWyYKpaaIhnoKKMrR6pY0V7jVM= Subject key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CFC2417A773E629EF236C6048C284 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.143.200.0/22 IP: 92.63.196.0 -- 92.63.203.255 IP: 185.148.104.0/22 IP: 185.156.72.0/22 IP: 185.176.24.0/22 IP: 185.193.88.0/23 IP: 2a07:57c0::/29 IP: 2a07:9b80::/29 IP: 2a0a:980::/29 IP: 2a0e:e5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fc:24:17:a7:73:e6:29:ef:23:6c:60:48:c2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:20:b8:e0:2e:e3:80:5c:8d:db:2d:3e:13: 3b:73:84:db:fd:7c:e8:47:00:4c:ed:a4:90:2d:06: a7:97:00:05:1e:df:2c:4b:0c:e2:7a:7f:63:6b:65: 0b:c7:ff:c0:76:8d:29:6a:e7:ea:ee:eb:0b:b6:d6: c2:f5:78:15:7a:f8:47:64:19:2b:87:96:40:78:aa: 35:3f:63:d0:f5:50:f0:2c:c6:15:5e:cc:aa:83:26: 17:69:0e:6b:65:3c:0d:93:21:43:c9:61:e0:ce:83: 07:e3:fc:28:b9:fc:22:e8:68:e7:c9:37:e9:dd:46: cc:ed:77:e4:26:83:12:d9:6a:9b:09:f4:2d:44:76: 08:96:a6:29:66:fd:2c:52:bf:dc:c0:8b:8e:52:6e: e4:2c:a6:d7:1b:0f:55:af:0a:df:af:e4:76:e3:03: eb:61:1c:67:19:df:65:95:c0:78:eb:92:c0:02:e8: 6f:e8:b9:bd:c4:f9:76:bd:42:cb:7c:aa:1e:67:7a: 4d:9f:5b:a8:d9:df:36:7a:3a:e2:be:d0:e6:54:fd: 93:93:f3:69:3f:33:9c:0d:0f:9b:81:bc:14:b4:b9: 3e:35:07:a8:22:ec:87:ee:76:7a:30:d6:da:3b:37: 3e:9b:b0:5d:48:6f:82:3e:c5:dd:cf:56:9a:94:57: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.200.0/22 92.63.196.0-92.63.203.255 185.148.104.0/22 185.156.72.0/22 185.176.24.0/22 185.193.88.0/23 IPv6: 2a07:57c0::/29 2a07:9b80::/29 2a0a:980::/29 2a0e:e5c0::/29 Signature Algorithm: sha256WithRSAEncryption 0b:8d:6a:fc:a5:d5:dd:cd:f5:e9:b7:13:5b:d0:22:0e:1e:4d: ee:b3:4b:50:e4:60:39:98:67:a7:2d:72:34:42:e6:ce:8d:3c: d7:70:3d:49:c8:bc:c6:34:96:0d:54:a9:e1:77:0a:88:6e:b7: 52:49:18:33:ed:95:93:3e:48:58:6a:fd:f6:0e:78:89:f9:e9: df:45:0e:0e:12:6b:d4:3c:a5:7b:69:53:97:96:84:34:65:cd: 52:a6:44:26:8d:cf:5a:6d:d2:32:72:96:ac:1d:74:86:4c:b9: f5:3b:18:83:de:f2:81:25:4c:8f:56:d2:85:72:9b:26:7c:0a: 28:cd:43:e6:2c:bc:fe:f9:60:6c:9a:c2:e2:56:c1:92:66:07: 46:7c:b8:b7:49:f9:a3:a0:13:e1:85:3f:3d:95:70:75:15:53: d5:08:f2:d7:61:eb:d9:c8:47:af:43:25:c1:2c:bb:5b:43:94: 53:14:89:8c:1a:89:82:54:60:10:7c:f1:b2:e9:a6:95:e5:2b: ca:21:12:6e:0c:06:bc:9a:6a:7b:54:b5:8c:52:d2:bb:36:59: d9:b9:25:6f:a4:0f:3a:d3:33:28:0f:97:dd:f7:61:8b:0f:bb: c5:83:de:49:e7:81:13:f0:57:45:ce:11:61:b3:c0:81:4c:98: 19:60:15:6e -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt9XPwkF6dz5invI2xgSMKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWFmMTJmNWNhNzVjOTIyYTRhYTVkYWNiNDljMDRhOTMyMzdmNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsguOAu44BcjdstPhM7c4Tb/Xzo RwBM7aSQLQanlwAFHt8sSwzien9ja2ULx//Ado0paufq7usLttbC9XgVevhHZBkr h5ZAeKo1P2PQ9VDwLMYVXsyqgyYXaQ5rZTwNkyFDyWHgzoMH4/woufwi6GjnyTfp 3UbM7XfkJoMS2WqbCfQtRHYIlqYpZv0sUr/cwIuOUm7kLKbXGw9Vrwrfr+R24wPr YRxnGd9llcB465LAAuhv6Lm9xPl2vULLfKoeZ3pNn1uo2d82ejrivtDmVP2Tk/Np PzOcDQ+bgbwUtLk+NQeoIuyH7nZ6MNbaOzc+m7BdSG+CPsXdz1aalFchQwIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFLGvEvXKdckipKpdrLScBKkyN/TtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2NiY2Y2 OC03Y2JmLTQ3ZjAtODJlZS01NzYwZWZiY2M2NTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvY2JjZjY4 LTdjYmYtNDdmMC04MmVlLTU3NjBlZmJjYzY1NC8xL3NhOFM5Y3AxeVNLa3FsMnN0 SndFcVRJMzlPMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUF BwEHAQH/BFowWDAyBAIAATAsAwQCLY/IMAwDBAJcP8QDBAJcP8gDBAK5lGgDBAK5 nEgDBAK5sBgDBAG5wVgwIgQCAAIwHAMFAyoHV8ADBQMqB5uAAwUDKgoJgAMFAyoO 5cAwDQYJKoZIhvcNAQELBQADggEBAAuNavyl1d3N9em3E1vQIg4eTe6zS1DkYDmY Z6ctcjRC5s6NPNdwPUnIvMY0lg1UqeF3Cohut1JJGDPtlZM+SFhq/fYOeIn56d9F Dg4Sa9Q8pXtpU5eWhDRlzVKmRCaNz1pt0jJylqwddIZMufU7GIPe8oElTI9W0oVy myZ8CijNQ+YsvP75YGyawuJWwZJmB0Z8uLdJ+aOgE+GFPz2VcHUVU9UI8tdh69nI R69DJcEsu1tDlFMUiYwaiYJUYBB88bLpppXlK8ohEm4MBryaantUtYxS0rs2Wdm5 JW+kDzrTMygPl933YYsPu8WD3knngRPwV0XOEWGzwIFMmBlgFW4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:26:26 2026 by rpki-client