This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer File: scPsU58j7gMao5asXO1CVjiEt7M.cer (raw, json) Hash identifier: wx8zujB0n6QBNqNBpo6svSPdJeHgKCWyZeNy9W8/tI4= Subject key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C443574B306FEE3D6C0FC4F2984D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207366 IP: 91.220.231.0/24 IP: 2a0a:ed80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c4:43:57:4b:30:6f:ee:3d:6c:0f:c4:f2:98:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:67:d1:4b:2c:f9:aa:02:56:95:e5:b4:3d: de:cf:33:d5:1c:d6:06:b0:a8:93:da:5b:e9:4e:a2: 1f:9c:29:74:c4:7b:61:8d:e3:a2:11:f6:65:1a:d5: f4:35:4b:38:fb:48:9b:ca:ab:91:6d:5b:79:57:05: 53:39:49:be:4d:5e:ef:3b:8c:c3:a5:42:46:3b:7d: c1:1b:e7:c5:80:f1:5a:64:ed:7e:b4:13:0f:93:92: 86:81:fd:66:32:f4:9c:ff:9e:0c:3d:98:8a:a7:eb: b6:72:dc:29:f9:c2:da:77:19:d9:d5:e9:15:51:1c: fa:c7:cd:b0:7f:7a:f6:d1:b6:cb:14:f7:6b:db:53: f5:71:85:3e:30:bc:2a:b2:a6:e5:9e:c2:c8:15:44: 5f:b0:46:c5:03:49:91:b0:b4:c8:c4:ed:cf:6a:42: 33:67:88:49:11:14:48:78:e6:59:c6:a2:36:86:d4: ea:4c:80:c2:1e:4a:d1:20:32:54:35:34:9b:c5:a3: ed:25:db:82:e7:e3:dc:db:27:b0:d4:c9:78:bd:8a: d6:16:27:25:2d:46:25:1f:42:e7:07:a1:f3:ef:d1: 16:bc:69:ec:4b:89:20:f8:29:00:47:c4:74:41:10: 23:5f:55:ca:3c:e2:4a:fe:75:ae:0b:a9:4f:38:b2: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.231.0/24 IPv6: 2a0a:ed80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207366 Signature Algorithm: sha256WithRSAEncryption 01:d5:33:ac:6a:c4:1c:69:06:61:72:87:65:88:44:0a:61:b4: a6:e7:cb:4f:b0:46:ee:e3:43:29:11:fb:09:30:eb:8b:1b:12: 2a:66:ea:3e:28:b1:ff:e5:bb:ec:31:2d:68:4d:12:d3:21:1c: 71:7c:57:50:04:e4:17:5f:38:d0:2d:40:4e:27:ef:af:0e:84: f8:59:d9:08:74:e1:94:d7:2c:7c:5c:27:43:d9:ae:68:a2:cb: 3d:2c:f6:1e:66:b0:c6:c6:d5:60:35:39:93:d5:26:1c:73:1f: 0d:30:54:70:eb:64:89:bc:b5:aa:94:85:fb:5f:6e:20:3b:b3: 82:29:57:da:9c:ba:dd:32:bb:e4:8d:de:2b:75:1f:21:31:24: 11:8e:28:0f:c3:25:4c:25:23:51:4f:56:e0:eb:c9:90:35:3e: 8e:f1:89:6b:b5:f9:01:3a:4d:9f:35:bb:e5:8d:8e:91:f7:10: e2:5b:3e:ce:cb:3b:e2:2e:db:b0:69:a9:a1:ab:2a:4d:83:32: 26:4e:8b:4f:84:bf:6f:a6:83:da:87:68:96:3c:c1:57:9d:ab: d0:c6:71:47:35:0d:bf:3f:ee:bf:2c:21:2f:74:79:c6:54:b3: 9d:e1:4c:e3:15:e2:32:52:4b:76:50:9e:75:ed:9b:67:05:b0: b9:7b:25:49 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NMRDV0swb+49bA/E8phNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWMzZWM1MzlmMjNlZTAzMWFhMzk2YWM1Y2VkNDI1NjM4ODRiN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu1n0Uss+aoCVpXltD3ezzPVHNYG sKiT2lvpTqIfnCl0xHthjeOiEfZlGtX0NUs4+0ibyquRbVt5VwVTOUm+TV7vO4zD pUJGO33BG+fFgPFaZO1+tBMPk5KGgf1mMvSc/54MPZiKp+u2ctwp+cLadxnZ1ekV URz6x82wf3r20bbLFPdr21P1cYU+MLwqsqblnsLIFURfsEbFA0mRsLTIxO3PakIz Z4hJERRIeOZZxqI2htTqTIDCHkrRIDJUNTSbxaPtJduC5+Pc2yew1Ml4vYrWFicl LUYlH0LnB6Hz79EWvGnsS4kg+CkAR8R0QRAjX1XKPOJK/nWuC6lPOLInYwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLHD7FOfI+4DGqOWrFztQlY4hLezMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzAwZGNk Zi1lYzlkLTQ0NDYtOTA1ZS01NTYzNDdhNWYwNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvMDBkY2Rm LWVjOWQtNDQ0Ni05MDVlLTU1NjM0N2E1ZjA1Ni8xL3NjUHNVNThqN2dNYW81YXNY TzFDVmppRXQ3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9znMA0EAgACMAcDBQMqCu2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMqBjANBgkqhkiG9w0BAQsFAAOCAQEAAdUzrGrEHGkG YXKHZYhECmG0pufLT7BG7uNDKRH7CTDrixsSKmbqPiix/+W77DEtaE0S0yEccXxX UATkF1840C1ATifvrw6E+FnZCHThlNcsfFwnQ9muaKLLPSz2HmawxsbVYDU5k9Um HHMfDTBUcOtkiby1qpSF+19uIDuzgilX2py63TK75I3eK3UfITEkEY4oD8MlTCUj UU9W4OvJkDU+jvGJa7X5ATpNnzW75Y2OkfcQ4ls+zss74i7bsGmpoasqTYMyJk6L T4S/b6aD2odoljzBV52r0MZxRzUNvz/uvywhL3R5xlSzneFM4xXiMlJLdlCede2b ZwWwuXslSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:18 2026 by rpki-client