This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer File: saew2N6CUdNtfIP69rx-_sc7UDQ.cer (raw, json) Hash identifier: Rd/8J6+s1Gio2Sem6d54o9rSM9ebLVjkvrol7RipRak= Subject key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82ABC70932C9DF0F3292EBE0E47B3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.56.164.0/22 IP: 5.182.48.0/22 IP: 45.81.20.0/22 IP: 45.90.144.0/22 IP: 45.140.220.0/22 IP: 77.83.240.0/22 IP: 78.108.216.0/22 IP: 83.143.116.0 -- 83.143.118.255 IP: 85.202.160.0/22 IP: 89.190.156.0/22 IP: 178.218.144.0/22 IP: 185.185.40.0/23 IP: 185.185.43.0/24 IP: 185.186.64.0/22 IP: 185.227.68.0/22 IP: 185.234.72.0/22 IP: 185.242.224.0/22 IP: 193.31.28.0/22 IP: 193.34.76.0/22 IP: 193.105.165.0/24 IP: 193.105.177.0/24 IP: 193.221.192.0/22 IP: 194.31.140.0/22 IP: 194.50.16.0/22 IP: 194.56.224.0/22 IP: 212.107.12.0/22 IP: 2a0b:b80::/29 IP: 2a0b:7080::/29 IP: 2a0d:77c0::/29 IP: 2a0e:c7c0::/29 IP: 2a0e:e800::/29 IP: 2a0f:8ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ab:c7:09:32:c9:df:0f:32:92:eb:e0:e4:7b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:41:50:47:07:28:b3:34:60:89:30:38:b2: 8f:f3:76:94:f2:f7:97:4f:e5:0a:a0:2c:d6:63:53: 8d:34:e0:b1:70:e3:ad:15:47:29:ac:24:7c:67:57: 2b:34:b8:74:e8:65:04:4e:b8:dc:6b:27:f0:a6:5d: 8c:b6:e5:e2:8e:97:84:5c:78:ea:ff:48:f6:ec:96: 04:3e:d0:8a:2d:8d:5b:53:2b:18:1b:47:18:ca:94: dd:94:cb:a5:31:97:42:17:e3:8d:f3:70:e8:38:80: 8d:bd:08:db:36:63:44:29:20:e5:fe:48:27:1c:14: f7:71:23:3a:bd:56:bf:05:97:85:fe:37:ec:19:24: ab:39:9d:43:00:89:05:74:fa:38:b4:7a:c5:f6:d8: bb:e8:79:33:b3:bd:2c:d9:59:52:d9:7d:09:32:59: ca:33:38:27:fa:23:04:f5:96:30:81:01:2b:14:9f: 1d:c8:08:bf:ab:eb:1f:f3:28:34:ad:c1:3c:f4:fc: 90:ab:44:83:e3:81:f5:6e:d3:cd:fd:72:20:f0:ac: 78:5d:52:41:39:7c:4e:48:d4:7f:b1:78:a5:f1:fd: ed:2c:d6:b9:2f:e8:6d:d3:11:8b:bd:f2:62:56:fb: eb:90:a5:0a:1c:54:04:af:34:09:e6:13:a8:c1:0d: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.164.0/22 5.182.48.0/22 45.81.20.0/22 45.90.144.0/22 45.140.220.0/22 77.83.240.0/22 78.108.216.0/22 83.143.116.0-83.143.118.255 85.202.160.0/22 89.190.156.0/22 178.218.144.0/22 185.185.40.0/23 185.185.43.0/24 185.186.64.0/22 185.227.68.0/22 185.234.72.0/22 185.242.224.0/22 193.31.28.0/22 193.34.76.0/22 193.105.165.0/24 193.105.177.0/24 193.221.192.0/22 194.31.140.0/22 194.50.16.0/22 194.56.224.0/22 212.107.12.0/22 IPv6: 2a0b:b80::/29 2a0b:7080::/29 2a0d:77c0::/29 2a0e:c7c0::/29 2a0e:e800::/29 2a0f:8ac0::/29 Signature Algorithm: sha256WithRSAEncryption 58:01:ce:09:e5:f9:5b:2c:23:1c:28:ab:1d:e9:5b:e6:c2:28: 12:fd:16:bb:14:f2:13:46:09:04:11:50:08:a3:aa:c1:80:af: 4b:e3:38:7e:71:9c:7d:4c:62:08:85:97:2c:52:e8:6b:91:a2: ab:38:4c:23:08:2d:14:af:08:3f:1a:13:94:ce:03:ba:d3:15: 41:d2:bd:ff:3e:a3:ed:48:a8:d6:6f:8d:5b:35:50:f4:33:5c: 26:06:f7:05:05:e8:81:3f:c6:77:fb:96:5d:68:69:9a:ad:9c: 29:1c:61:c6:80:19:c1:f2:23:fb:48:cb:f5:a8:8c:5c:3b:92: 24:68:4c:7c:1c:cd:f6:44:43:82:45:1b:de:18:98:5f:46:b5: 6c:6c:20:64:87:48:77:d6:7a:dd:86:d0:f5:ae:7a:52:31:8e: ad:01:b9:05:80:c1:6a:6d:a4:54:d0:0d:4a:54:72:7f:aa:8f: b5:c3:92:f9:dd:bd:06:f4:b2:ee:17:64:9f:f7:7c:b7:ea:59: d1:24:58:3d:5e:e4:e6:39:8b:3a:02:cc:a3:19:dc:e7:40:fe: 70:a8:55:50:ec:ac:97:08:6f:de:b0:99:84:b1:82:28:0d:76: 04:bb:b5:ea:67:1b:72:0f:76:0d:90:61:14:9a:9f:37:31:56: 83:0f:92:ec -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgISAZt/gqvHCTLJ3w8ykuvg5Hs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dFBUEcHKLM0YIkwOLKP83aU8veX T+UKoCzWY1ONNOCxcOOtFUcprCR8Z1crNLh06GUETrjcayfwpl2MtuXijpeEXHjq /0j27JYEPtCKLY1bUysYG0cYypTdlMulMZdCF+ON83DoOICNvQjbNmNEKSDl/kgn HBT3cSM6vVa/BZeF/jfsGSSrOZ1DAIkFdPo4tHrF9ti76Hkzs70s2VlS2X0JMlnK Mzgn+iME9ZYwgQErFJ8dyAi/q+sf8yg0rcE89PyQq0SD44H1btPN/XIg8Kx4XVJB OXxOSNR/sXil8f3tLNa5L+ht0xGLvfJiVvvrkKUKHFQErzQJ5hOowQ0VGQIDAQAB o4IDWTCCA1UwHQYDVR0OBBYEFLGnsNjeglHTbXyD+va8fv7HO1A0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2YxMzRj OC1mODE0LTRiNzEtOTU3Yi0zOTRhY2QyMWYzOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZjEzNGM4 LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWROdGZJUDY5 cngtX3NjN1VEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHzBggrBgEF BQcBBwEB/wSB4zCB4DCBqwQCAAEwgaQDBAICOKQDBAIFtjADBAItURQDBAItWpAD BAItjNwDBAJNU/ADBAJObNgwDAMEAlOPdAMEAFOPdgMEAlXKoAMEAlm+nAMEArLa kAMEAbm5KAMEALm5KwMEArm6QAMEArnjRAMEArnqSAMEArny4AMEAsEfHAMEAsEi TAMEAMFppQMEAMFpsQMEAsHdwAMEAsIfjAMEAsIyEAMEAsI44AMEAtRrDDAwBAIA AjAqAwUDKgsLgAMFAyoLcIADBQMqDXfAAwUDKg7HwAMFAyoO6AADBQMqD4rAMA0G CSqGSIb3DQEBCwUAA4IBAQBYAc4J5flbLCMcKKsd6VvmwigS/Ra7FPITRgkEEVAI o6rBgK9L4zh+cZx9TGIIhZcsUuhrkaKrOEwjCC0Urwg/GhOUzgO60xVB0r3/PqPt SKjWb41bNVD0M1wmBvcFBeiBP8Z3+5ZdaGmarZwpHGHGgBnB8iP7SMv1qIxcO5Ik aEx8HM32REOCRRveGJhfRrVsbCBkh0h31nrdhtD1rnpSMY6tAbkFgMFqbaRU0A1K VHJ/qo+1w5L53b0G9LLuF2Sf93y36lnRJFg9XuTmOYs6AsyjGdznQP5wqFVQ7KyX CG/esJmEsYIoDXYEu7XqZxtyD3YNkGEUmp83MVaDD5Ls -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:06 2026 by rpki-client