This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer (raw, json) Hash identifier: h0jYoH+uUXTxZ+l+Rxiq3gRd7TNXQzm+KKXIeJ4OL1s= Subject key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355AB354EFF84916F375234EFD28BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207358 AS: 211124 IP: 193.150.169.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5a:b3:54:ef:f8:49:16:f3:75:23:4e:fd:28:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1f5bbaa051980bd4811b6655a0f95db36127809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:69:66:f6:01:0f:7a:95:d1:d6:6a:5b:25: 06:c0:da:c5:95:4b:22:bb:5d:35:26:d2:e1:5c:8f: 7e:e8:1c:72:c2:9f:01:06:86:98:42:fe:99:0a:f5: 06:59:08:3c:d0:0f:ac:dc:24:d6:4f:28:82:e6:3a: e9:d4:57:c2:df:1a:a4:df:4d:f0:26:02:88:2f:c9: 5c:8f:b6:6a:c0:4a:66:3a:39:80:f6:c0:e8:29:f0: 4d:5d:a9:1d:85:ae:0d:df:94:fe:c6:4d:c5:7d:5e: 7a:f2:66:7e:ee:15:10:bd:d1:ab:e7:5e:76:c0:57: a0:b9:25:1b:d0:e0:66:da:1c:ce:af:d0:81:7c:5a: db:bc:3e:34:88:aa:e3:b3:22:ef:51:01:86:7a:1d: eb:01:24:92:50:ad:59:32:a3:a2:00:7d:36:0a:0e: b5:5c:7d:d8:1e:f3:ac:be:ab:a6:00:67:39:b0:ad: f7:19:16:1b:82:a2:0d:5d:55:63:db:0d:db:c8:c8: d5:9d:5d:fe:0d:f5:8f:56:92:3f:56:e6:f8:05:d1: e3:9a:55:d0:ed:08:d0:d3:23:09:70:99:fb:ff:08: 61:6e:f3:4f:63:68:0e:41:46:be:10:ee:49:cc:96: 53:9e:c7:82:d1:5d:ac:d6:74:94:b2:03:13:e4:2e: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.169.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207358 211124 Signature Algorithm: sha256WithRSAEncryption 5c:22:ab:ca:03:41:9d:41:0d:a5:f2:ba:c0:52:da:0a:66:cd: 71:7a:6f:75:e6:1a:dc:b1:3e:7f:62:0e:28:d6:16:83:e7:2e: b6:74:ed:74:c1:95:c0:fc:5f:0b:c9:3f:f6:76:8f:d3:62:28: c5:3d:67:b9:ed:cc:7e:52:94:29:f2:29:69:98:56:a8:12:28: 61:61:0b:de:ab:d6:a7:28:e8:f6:25:06:2b:39:c4:2d:21:b1: 2f:6c:50:ac:97:48:d9:93:11:a3:f4:1a:6d:2f:91:54:80:5b: 7d:f0:7f:77:3b:eb:04:eb:74:8e:5f:49:66:ce:33:6b:f7:42: c5:f1:21:62:3e:1d:06:26:ca:db:b4:d5:30:fe:74:e2:25:87: 21:b5:f8:b7:45:91:c5:98:be:6b:95:39:ff:be:cc:42:36:60: 50:15:45:7b:85:37:4b:60:16:24:0e:47:51:ef:3a:67:6c:cb: e7:2e:70:47:57:b0:0f:4f:ed:69:23:c8:78:89:a3:bd:e0:fe: 2e:5d:fc:d9:f4:62:41:d1:eb:45:f6:f6:33:98:be:e5:e7:05: 74:79:f4:3d:15:8f:0f:e1:28:93:f5:df:f1:f5:77:b5:be:66: 48:07:b1:0a:c1:85:99:56:d9:92:d1:65:74:4c:12:90:0b:d4: 8d:03:40:54 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt4NVqzVO/4SRbzdSNO/Si8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWY1YmJhYTA1MTk4MGJkNDgxMWI2NjU1YTBmOTVkYjM2MTI3ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY5pZvYBD3qV0dZqWyUGwNrFlUsi u101JtLhXI9+6Bxywp8BBoaYQv6ZCvUGWQg80A+s3CTWTyiC5jrp1FfC3xqk303w JgKIL8lcj7ZqwEpmOjmA9sDoKfBNXakdha4N35T+xk3FfV568mZ+7hUQvdGr5152 wFeguSUb0OBm2hzOr9CBfFrbvD40iKrjsyLvUQGGeh3rASSSUK1ZMqOiAH02Cg61 XH3YHvOsvqumAGc5sK33GRYbgqINXVVj2w3byMjVnV3+DfWPVpI/Vub4BdHjmlXQ 7QjQ0yMJcJn7/whhbvNPY2gOQUa+EO5JzJZTnseC0V2s1nSUsgMT5C5SSQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFLH1u6oFGYC9SBG2ZVoPlds2EngJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2EwNzFh YS01NTBiLTRlMTgtOTllZC0wNTA4YTJiYjQ3YWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvYTA3MWFh LTU1MGItNGUxOC05OWVkLTA1MDhhMmJiNDdhYy8xL3NmVzdxZ1VaZ0wxSUViWmxX Zy1WMnpZU2VBay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwZapMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwMp/gIDAzi0MA0GCSqGSIb3DQEBCwUAA4IBAQBcIqvKA0GdQQ2l8rrAUtoKZs1x em915hrcsT5/Yg4o1haD5y62dO10wZXA/F8LyT/2do/TYijFPWe57cx+UpQp8ilp mFaoEihhYQveq9anKOj2JQYrOcQtIbEvbFCsl0jZkxGj9BptL5FUgFt98H93O+sE 63SOX0lmzjNr90LF8SFiPh0GJsrbtNUw/nTiJYchtfi3RZHFmL5rlTn/vsxCNmBQ FUV7hTdLYBYkDkdR7zpnbMvnLnBHV7APT+1pI8h4iaO94P4uXfzZ9GJB0etF9vYz mL7l5wV0efQ9FY8P4SiT9d/x9Xe1vmZIB7EKwYWZVtmS0WV0TBKQC9SNA0BU -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:21 2026 by rpki-client