This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer File: svv-XwWfncE0VDRMkHSVdOzmKfU.cer (raw, json) Hash identifier: XQlZag+rRByubD4EeFpsVns5FxZt+2mVztQ8Y8uCevE= Subject key identifier: B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75323226C846187041B6E83A92FAB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25146 AS: 41216 AS: 51929 AS: 57208 AS: 58343 AS: 202780 AS: 207374 IP: 62.133.57.0/24 IP: 80.87.48.0/20 IP: 81.92.64.0/20 IP: 81.94.160.0/20 IP: 84.17.192.0/19 IP: 89.255.240.0/21 IP: 91.215.92.0/22 IP: 91.218.204.0/22 IP: 185.29.112.0/22 IP: 185.58.76.0/22 IP: 185.134.92.0/22 IP: 185.154.228.0/22 IP: 213.108.96.0/21 IP: 2a00:7800::/32 IP: 2a00:a760::/32 IP: 2a02:d98::/32 IP: 2a02:24a0::/32 IP: 2a07:8fc0::/29 IP: 2a10:3f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:53:23:22:6c:84:61:87:04:1b:6e:83:a9:2f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2fbfe5f059f9dc13454344c90749574ece629f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:cc:0e:8b:16:fa:1c:04:6d:5a:c5:4b:7b: db:6e:4c:5f:c7:3f:d7:e6:ab:92:24:6f:a5:b6:16: d4:eb:88:12:89:a6:90:fb:51:dd:b7:d6:fe:f7:a6: ce:ca:22:f4:ce:dd:7a:df:40:5c:c6:33:69:bc:f1: f7:47:20:00:5c:9c:e4:07:07:be:6c:c0:2e:e0:d3: 9c:e2:c7:13:69:d1:b3:45:5b:7b:29:35:2b:31:07: 46:85:15:8c:0e:cc:17:2a:00:f2:35:7d:77:e6:6e: 5f:1c:97:90:09:b0:a9:8e:87:ac:ca:ab:ae:03:c0: 5e:7b:d1:82:e8:55:e7:9c:7c:da:d5:6f:50:a3:6a: 8c:b9:18:4d:09:5e:68:26:2b:52:46:b7:f7:64:de: bf:3e:b2:18:77:21:e6:d0:64:4b:38:31:01:82:f2: 99:18:98:d2:53:80:a7:f8:a6:39:b8:c1:51:8e:00: b9:a9:a9:e6:f1:a6:42:b7:2f:7e:32:8c:f4:63:ad: 76:ab:66:d4:91:72:74:a0:e5:af:f1:0a:fb:ab:94: 9a:53:a6:bb:a6:aa:24:68:27:06:6c:f3:6c:27:4a: 6f:63:60:8d:8c:73:37:5d:7f:9c:e1:51:69:63:12: ae:61:2b:cf:04:6e:3d:df:bf:21:3e:8e:ee:04:5e: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.133.57.0/24 80.87.48.0/20 81.92.64.0/20 81.94.160.0/20 84.17.192.0/19 89.255.240.0/21 91.215.92.0/22 91.218.204.0/22 185.29.112.0/22 185.58.76.0/22 185.134.92.0/22 185.154.228.0/22 213.108.96.0/21 IPv6: 2a00:7800::/32 2a00:a760::/32 2a02:d98::/32 2a02:24a0::/32 2a07:8fc0::/29 2a10:3f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25146 41216 51929 57208 58343 202780 207374 Signature Algorithm: sha256WithRSAEncryption 48:2c:7f:d5:3d:82:76:55:c4:74:60:3b:f7:d8:3e:e6:b5:23: cd:0f:1e:b2:b2:88:93:0d:95:36:6a:52:c4:ab:af:7b:a8:d0: 8c:69:aa:51:6c:14:93:53:22:ba:14:d9:1d:07:af:1b:18:38: c0:3a:46:aa:32:7f:44:40:b7:5b:67:f5:12:01:51:8a:b3:df: de:26:43:b6:fa:81:ad:95:5b:6f:bd:fa:93:72:72:0d:c2:dd: 1d:6b:21:0b:51:d7:83:9a:0f:97:27:b9:70:f7:bf:df:44:85: 73:da:fe:61:b2:1c:47:41:21:9f:2f:2d:a1:97:f9:d1:27:57: f0:06:2d:aa:5d:88:5e:a5:61:45:5d:96:39:ca:74:6d:75:f5: 86:77:68:d4:60:44:7d:15:a7:e0:cd:6c:a3:82:f1:0e:c5:a0: 91:b5:e4:03:04:9e:5d:7e:14:e9:8e:2c:30:75:be:41:e2:bd: d3:87:e4:b7:84:61:04:65:78:16:22:0a:5e:42:83:28:c8:4e: 23:6c:70:3a:6c:b3:a3:e9:fe:46:2b:6f:78:c7:12:9a:4b:ef: 0c:e0:22:b3:b6:b5:f7:a7:ca:46:c2:73:25:88:3b:55:7a:48: c6:8e:93:f6:ef:d9:a0:c0:df:54:60:df:d2:a8:5e:e4:9a:67: ef:7e:e3:6a -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgISAZt3x1MjImyEYYcEG26DqS+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmZiZmU1ZjA1OWY5ZGMxMzQ1NDM0NGM5MDc0OTU3NGVjZTYyOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjonMDosW+hwEbVrFS3vbbkxfxz/X 5quSJG+lthbU64gSiaaQ+1Hdt9b+96bOyiL0zt1630BcxjNpvPH3RyAAXJzkBwe+ bMAu4NOc4scTadGzRVt7KTUrMQdGhRWMDswXKgDyNX135m5fHJeQCbCpjoesyquu A8Bee9GC6FXnnHza1W9Qo2qMuRhNCV5oJitSRrf3ZN6/PrIYdyHm0GRLODEBgvKZ GJjSU4Cn+KY5uMFRjgC5qanm8aZCty9+Moz0Y612q2bUkXJ0oOWv8Qr7q5SaU6a7 pqokaCcGbPNsJ0pvY2CNjHM3XX+c4VFpYxKuYSvPBG49378hPo7uBF49MQIDAQAB o4IDOjCCAzYwHQYDVR0OBBYEFLL7/l8Fn53BNFQ0TJB0lXTs5in1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzA1YzY2 OS0wNGY4LTQyODMtOWNkYi02MGUzZTIxNGE2M2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMDVjNjY5 LTA0ZjgtNDI4My05Y2RiLTYwZTNlMjE0YTYzZS8xL3N2di1Yd1dmbmNFMFZEUk1r SFNWZE96bUtmVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGbBggrBgEF BQcBBwEB/wSBizCBiDBUBAIAATBOAwQAPoU5AwQEUFcwAwQEUVxAAwQEUV6gAwQF VBHAAwQDWf/wAwQCW9dcAwQCW9rMAwQCuR1wAwQCuTpMAwQCuYZcAwQCuZrkAwQD 1WxgMDAEAgACMCoDBQAqAHgAAwUAKgCnYAMFACoCDZgDBQAqAiSgAwUDKgePwAMF AyoQPwAwNwYIKwYBBQUHAQgBAf8EKDAmoCQwIgICYjoCAwChAAIDAMrZAgMA33gC AwDj5wIDAxgcAgMDKg4wDQYJKoZIhvcNAQELBQADggEBAEgsf9U9gnZVxHRgO/fY Pua1I80PHrKyiJMNlTZqUsSrr3uo0IxpqlFsFJNTIroU2R0HrxsYOMA6Rqoyf0RA t1tn9RIBUYqz394mQ7b6ga2VW2+9+pNycg3C3R1rIQtR14OaD5cnuXD3v99EhXPa /mGyHEdBIZ8vLaGX+dEnV/AGLapdiF6lYUVdljnKdG119YZ3aNRgRH0Vp+DNbKOC 8Q7FoJG15AMEnl1+FOmOLDB1vkHivdOH5LeEYQRleBYiCl5CgyjITiNscDpss6Pp /kYrb3jHEppL7wzgIrO2tfenykbCcyWIO1V6SMaOk/bv2aDA31Rg39KoXuSaZ+9+ 42o= -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:27 2026 by rpki-client