This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer File: seWdsb2vITytIQJfd4-slhj9TpE.cer (raw, json) Hash identifier: uF+U7UhOQEZ8EMejNfNma0q8pgdUZmajwtK1mhlLCc4= Subject key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F155DF8F26B1EE918988A74B83A0BA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202433 IP: 194.35.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5d:f8:f2:6b:1e:e9:18:98:8a:74:b8:3a:0b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:71:be:fc:ee:1f:39:5d:56:14:1d:ac:17: 05:3a:ce:22:1b:fa:cd:4f:b7:69:e4:cb:87:b7:67: 1c:e9:78:bb:f8:25:e5:ac:80:3b:83:0b:d5:40:9e: f0:ca:30:90:3f:1a:a6:e1:0f:27:b8:b7:dc:47:ff: 9d:ad:2c:ac:39:4d:23:c8:c2:bb:6d:61:9e:6b:a9: 05:83:82:09:a1:e4:71:23:a8:49:e3:3d:cb:ad:ab: 18:4b:58:df:25:e1:a0:2a:23:06:ae:4e:70:42:32: 14:a7:d3:3a:f0:5b:67:40:63:97:98:f1:95:30:ea: a8:76:5f:a0:0c:11:62:d7:0d:ee:b4:e0:80:2b:54: 15:8f:cb:8e:3a:ce:33:4e:61:61:d0:b3:82:1b:d8: 5b:e8:51:63:5e:40:43:9f:1a:e3:98:fb:7d:49:65: e0:b3:ec:2c:ea:4a:0e:58:11:34:c3:91:25:0c:9c: 2f:33:71:b3:17:f5:e1:39:a9:50:f1:1c:14:7c:2c: 70:f5:5b:1f:b2:79:95:42:90:37:17:ec:2a:c2:b7: 65:ba:f4:13:88:21:9c:de:d1:db:da:95:0e:b3:3b: 2f:c9:5c:51:6e:f4:4b:56:2b:ad:14:ff:d7:5e:65: a9:62:31:6d:9b:b3:9d:b9:38:de:ff:1e:5e:f3:f9: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202433 Signature Algorithm: sha256WithRSAEncryption 7c:f7:b2:91:a1:61:52:7e:f8:63:9e:c9:48:99:b2:17:58:c5: 40:9d:28:7b:4a:46:b0:e4:7b:4b:df:93:97:15:28:a9:30:8d: 62:c1:88:21:65:87:55:65:c1:c4:d5:64:59:40:14:b5:07:5f: 0b:5b:c5:95:89:40:c0:8e:54:16:b6:97:ad:57:05:53:ca:24: b2:d4:ce:2f:b2:70:87:63:cd:7b:c4:02:b1:55:b3:37:67:38: f6:2b:4b:35:ac:d6:84:59:2b:79:97:e1:a3:35:1b:ff:a4:ef: f4:23:4a:e1:2e:c7:0b:5f:af:81:21:62:c9:56:18:d2:1b:20: 42:ff:06:a0:24:8d:84:29:52:0e:84:d3:36:3d:51:56:9e:e8: cc:45:7b:2d:dd:8f:22:36:07:28:1f:74:89:72:ec:35:f9:41: f3:fe:45:69:bb:38:c1:14:2b:76:62:f3:55:58:f2:84:64:9c: 9a:77:34:2f:00:95:0e:ff:72:26:14:46:e4:f7:ae:a4:61:f7: e6:8c:36:a3:10:0e:bd:01:3e:ef:a5:a8:10:67:29:5f:e9:47: 0f:9f:bc:d4:ec:17:ff:65:0b:3e:d0:c7:c9:60:76:da:9c:a0: 6f:4d:84:a3:eb:e0:3a:e9:ed:56:2a:96:e0:fa:26:76:54:2b: b9:30:f6:35 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FV348mse6RiYinS4OgumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWU1OWRiMWJkYWYyMTNjYWQyMTAyNWY3NzhmYWM5NjE4ZmQ0ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyopxvvzuHzldVhQdrBcFOs4iG/rN T7dp5MuHt2cc6Xi7+CXlrIA7gwvVQJ7wyjCQPxqm4Q8nuLfcR/+drSysOU0jyMK7 bWGea6kFg4IJoeRxI6hJ4z3LrasYS1jfJeGgKiMGrk5wQjIUp9M68FtnQGOXmPGV MOqodl+gDBFi1w3utOCAK1QVj8uOOs4zTmFh0LOCG9hb6FFjXkBDnxrjmPt9SWXg s+ws6koOWBE0w5ElDJwvM3GzF/XhOalQ8RwUfCxw9VsfsnmVQpA3F+wqwrdluvQT iCGc3tHb2pUOszsvyVxRbvRLViutFP/XXmWpYjFtm7OduTje/x5e8/moYwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLHlnbG9ryE8rSECX3ePrJYY/U6RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzY3MjVm OC05YWI5LTQxMDItODNkMy1iYzQ5MjkxYjRhYWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvNjcyNWY4 LTlhYjktNDEwMi04M2QzLWJjNDkyOTFiNGFhYS8xL3NlV2RzYjJ2SVR5dElRSmZk NC1zbGhqOVRwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwiP4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMWwTANBgkqhkiG9w0BAQsFAAOCAQEAfPeykaFhUn74Y57JSJmyF1jFQJ0oe0pG sOR7S9+TlxUoqTCNYsGIIWWHVWXBxNVkWUAUtQdfC1vFlYlAwI5UFraXrVcFU8ok stTOL7Jwh2PNe8QCsVWzN2c49itLNazWhFkreZfhozUb/6Tv9CNK4S7HC1+vgSFi yVYY0hsgQv8GoCSNhClSDoTTNj1RVp7ozEV7Ld2PIjYHKB90iXLsNflB8/5Fabs4 wRQrdmLzVVjyhGScmnc0LwCVDv9yJhRG5PeupGH35ow2oxAOvQE+76WoEGcpX+lH D5+81OwX/2ULPtDHyWB22pygb02Eo+vgOuntViqW4PomdlQruTD2NQ== -----END CERTIFICATE-----Generated at Tue Jan 27 09:13:12 2026 by rpki-client