This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer File: sf_ufb9_RWbqnjBUaywqLnM28vQ.cer (raw, json) Hash identifier: 7wIGEV/QnxmHu7wWyN9mMSjnbr/iJT+gejaNDZYq3tY= Subject key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC897A7C11EEDCA68DDAA2B101F8097 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.174.80.0/21 IP: 185.144.16.0/22 IP: 2a04:2f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:97:a7:c1:1e:ed:ca:68:dd:aa:2b:10:1f:80:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:73:fe:41:52:d2:c7:76:ef:c2:d8:60:66: 07:b6:50:a4:2b:7e:92:8b:24:12:50:73:30:5e:92: 84:86:e8:f9:cb:76:66:ef:b3:c3:01:70:06:46:84: 10:ab:5a:87:d5:c7:47:3e:eb:e8:30:40:2b:db:38: bc:72:9c:f7:a2:67:87:1c:71:2a:37:38:78:2b:82: ca:af:fd:6f:fe:bd:c9:8e:45:9b:c4:82:6f:18:cc: 91:ab:70:3d:85:5e:6b:d3:29:bb:cd:11:8a:83:bc: 21:cf:00:a3:65:dd:40:74:91:b5:66:bb:0c:5c:af: f1:14:c2:22:c8:4c:4e:75:85:18:87:53:4b:a6:9b: 15:ae:f3:3a:24:04:fa:93:ce:db:4b:e7:34:73:66: cc:03:ec:a7:5a:79:e1:25:9c:05:c8:f6:a5:ee:d2: 82:32:9f:98:75:85:0a:ca:8b:88:de:db:a7:81:a1: 49:4f:aa:93:11:b4:09:12:9c:6c:e1:d9:67:ab:10: 12:c6:8d:8f:be:c4:db:0d:13:b9:e7:7a:6c:63:80: 53:40:83:27:df:3c:7c:4c:3e:58:d8:43:98:c1:25: 21:79:7c:59:ca:3c:a4:9b:d8:05:ad:51:85:a6:b6: 38:97:b1:b6:9f:61:21:b9:d5:22:23:2d:00:d3:1b: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.174.80.0/21 185.144.16.0/22 IPv6: 2a04:2f80::/29 Signature Algorithm: sha256WithRSAEncryption 3a:f8:8c:0e:a3:4c:cc:86:e8:6b:fd:8f:15:ee:74:d7:93:f2: 1e:3c:37:60:c1:e2:e5:98:9d:58:8d:5b:bc:f8:31:f7:59:d3: cd:8e:fc:9c:3c:db:b4:49:eb:6e:4c:7f:4a:a7:ee:a2:c4:19: d6:ca:c0:77:65:9f:29:0f:51:c7:d7:24:9b:32:43:6a:83:c1: eb:5c:de:ab:7f:a8:00:17:aa:79:ae:63:ca:15:59:b1:ba:84: 65:9e:4f:09:c0:a8:53:3f:93:58:d7:07:17:fb:cc:85:34:48: 69:8f:06:f0:71:52:95:4b:c2:ec:58:12:13:8e:73:fa:da:b5: 32:60:5d:79:0c:d7:98:7d:2c:0e:ba:ed:49:c9:ea:7a:d4:52: 87:d1:43:ac:be:bd:db:c5:1b:52:96:9e:d8:d8:3c:dd:ad:ec: 31:2b:c8:40:10:76:f9:45:59:8a:eb:87:1a:ef:cf:d6:61:e9: da:c0:dc:24:42:e6:ef:cb:47:d4:e2:77:61:62:7f:16:e0:88: 88:9f:dc:ed:b8:01:be:c7:55:94:29:9f:7a:5b:ec:a9:38:90: 61:c5:f3:d5:93:66:3e:e5:03:b2:0e:c3:8f:cf:69:0f:99:f8: 57:16:fa:9c:bf:cd:02:48:22:5e:f7:1d:cf:ee:1b:62:86:52: 4d:94:9e:07 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6yJenwR7tymjdqisQH4CXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWZmZWU3ZGJmN2Y0NTY2ZWE5ZTMwNTQ2YjJjMmEyZTczMzZmMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+pz/kFS0sd278LYYGYHtlCkK36S iyQSUHMwXpKEhuj5y3Zm77PDAXAGRoQQq1qH1cdHPuvoMEAr2zi8cpz3omeHHHEq Nzh4K4LKr/1v/r3JjkWbxIJvGMyRq3A9hV5r0ym7zRGKg7whzwCjZd1AdJG1ZrsM XK/xFMIiyExOdYUYh1NLppsVrvM6JAT6k87bS+c0c2bMA+ynWnnhJZwFyPal7tKC Mp+YdYUKyouI3tungaFJT6qTEbQJEpxs4dlnqxASxo2PvsTbDRO553psY4BTQIMn 3zx8TD5Y2EOYwSUheXxZyjykm9gFrVGFprY4l7G2n2EhudUiIy0A0xtoKQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFLH/7n2/f0Vm6p4wVGssKi5zNvL0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0LzJmY2Ji Mi1jM2MwLTRiMWUtOGFkNS03ZjVmNzgzNDZkNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvMmZjYmIy LWMzYzAtNGIxZS04YWQ1LTdmNWY3ODM0NmQ2Zi8xL3NmX3VmYjlfUldicW5qQlVh eXdxTG5NMjh2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDX65QAwQCuZAQMA0EAgACMAcDBQMqBC+AMA0G CSqGSIb3DQEBCwUAA4IBAQA6+IwOo0zMhuhr/Y8V7nTXk/IePDdgweLlmJ1YjVu8 +DH3WdPNjvycPNu0SetuTH9Kp+6ixBnWysB3ZZ8pD1HH1ySbMkNqg8HrXN6rf6gA F6p5rmPKFVmxuoRlnk8JwKhTP5NY1wcX+8yFNEhpjwbwcVKVS8LsWBITjnP62rUy YF15DNeYfSwOuu1Jyep61FKH0UOsvr3bxRtSlp7Y2DzdrewxK8hAEHb5RVmK64ca 78/WYenawNwkQubvy0fU4ndhYn8W4IiIn9ztuAG+x1WUKZ96W+ypOJBhxfPVk2Y+ 5QOyDsOPz2kPmfhXFvqcv80CSCJe9x3P7htihlJNlJ4H -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:45 2026 by rpki-client