This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer (raw, json) Hash identifier: zo74h5SHaKsVoVTFblsYqccJr//NYHNpfzFtmaxTUnY= Subject key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD0085454C47629CADC5B9048550A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.51.20.0/24 IP: 193.33.29.0/24 IP: 2a10:7940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d0:08:54:54:c4:76:29:ca:dc:5b:90:48:55:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:28:cd:02:93:e1:79:0b:f2:9d:84:aa:71: 1c:22:64:f6:1d:83:94:3b:00:91:e8:33:5a:3f:c3: f6:a8:7e:19:e9:53:6d:84:be:8d:5a:03:da:38:da: 04:21:d7:2c:22:af:eb:73:c6:ab:34:01:c5:cd:49: a7:88:0d:c9:12:de:57:55:a6:7c:fa:8f:5f:ce:ea: 90:73:a6:61:11:f5:b6:f2:bb:bb:ce:c4:2d:53:ba: 95:ba:93:f7:59:8a:5f:69:0c:22:a7:76:12:4b:73: 9d:4e:22:d9:a7:1a:52:57:eb:e0:bc:2e:45:1a:ce: 56:b4:b9:c1:35:65:18:24:16:29:46:18:60:8f:d6: 69:32:13:0a:3a:21:e6:f8:14:ad:6c:2f:d6:44:be: 16:e5:ef:cc:92:8a:2d:c0:2a:7d:cf:37:15:3f:a0: 60:22:d1:76:e9:3a:d7:ad:d9:6c:fb:6a:3d:f5:4c: 4d:a9:fc:e9:8b:c5:b1:04:68:ac:43:32:ce:39:f3: 29:c7:2b:e1:f7:39:c5:fe:9e:ad:b3:2e:9c:ee:34: f1:89:99:3d:c7:15:d8:1d:21:ab:f8:cb:ed:29:9d: 55:89:2e:0c:e1:87:43:10:c3:a8:0d:1e:56:ee:35: b7:fe:2b:dd:d4:7e:e5:47:31:9b:e7:2f:96:b1:ac: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.20.0/24 193.33.29.0/24 IPv6: 2a10:7940::/29 Signature Algorithm: sha256WithRSAEncryption 0d:68:72:79:97:a3:dd:1d:62:11:8d:cd:b5:28:74:39:e7:03: 8e:12:cf:dc:59:b7:59:69:c8:92:f8:84:86:43:47:3c:78:c1: 18:dc:1b:09:6e:21:ba:c2:65:6b:25:b9:f7:a0:77:93:99:9a: c4:1d:a5:84:ee:f9:ea:aa:b8:50:7d:5c:84:53:b9:94:84:ba: 01:c7:6e:73:eb:74:81:7d:dd:f6:4b:2a:f9:88:b5:5c:10:85: a5:97:81:bf:b3:f7:74:1f:45:ef:1a:3b:18:de:9b:96:21:19: 44:cc:10:e5:cb:49:e2:95:56:da:40:ea:c8:cf:94:d7:e2:19: 66:34:2b:47:09:06:7a:2d:3c:b7:6c:54:77:1c:41:2e:68:e8: 1b:05:4f:da:d3:3e:0f:58:94:ca:8d:73:4a:ee:12:14:4e:73: ef:c0:ed:f5:d8:83:4e:17:ae:7a:f8:a1:77:4d:5f:dc:78:d4: a6:a2:ee:c7:8e:53:f0:17:51:a7:51:13:e0:8e:43:08:e8:e5: a4:6b:d0:4b:fa:21:d5:42:a5:9b:aa:15:ce:9c:6f:ee:e6:2d: 18:09:94:da:89:d4:c8:9d:88:03:e7:72:54:1e:28:4f:31:bc: 71:03:2f:bb:94:16:cc:41:e3:7c:bb:6e:a5:c0:9e:91:5f:c3: 74:dc:fd:ca -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6WtAIVFTEdinK3FuQSFUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzEyZGI5NWRmYzNiMzEzOTVlMGVjYjVmZjI2MjEyZDc5OGRlODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5EozQKT4XkL8p2EqnEcImT2HYOU OwCR6DNaP8P2qH4Z6VNthL6NWgPaONoEIdcsIq/rc8arNAHFzUmniA3JEt5XVaZ8 +o9fzuqQc6ZhEfW28ru7zsQtU7qVupP3WYpfaQwip3YSS3OdTiLZpxpSV+vgvC5F Gs5WtLnBNWUYJBYpRhhgj9ZpMhMKOiHm+BStbC/WRL4W5e/MkootwCp9zzcVP6Bg ItF26TrXrdls+2o99UxNqfzpi8WxBGisQzLOOfMpxyvh9znF/p6tsy6c7jTxiZk9 xxXYHSGr+MvtKZ1ViS4M4YdDEMOoDR5W7jW3/ivd1H7lRzGb5y+WsaxZ4wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFLMS25Xfw7MTleDstf8mIS15jeg0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2NiYzUw ZS1mYWVmLTQzZWMtYmRiYS1mZGE0NzBjNjFlMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2JjNTBl LWZhZWYtNDNlYy1iZGJhLWZkYTQ3MGM2MWUwOS8xL3N4TGJsZF9Ec3hPVjRPeTFf eVloTFhtTjZEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuTMUAwQAwSEdMA0EAgACMAcDBQMqEHlAMA0G CSqGSIb3DQEBCwUAA4IBAQANaHJ5l6PdHWIRjc21KHQ55wOOEs/cWbdZaciS+ISG Q0c8eMEY3BsJbiG6wmVrJbn3oHeTmZrEHaWE7vnqqrhQfVyEU7mUhLoBx25z63SB fd32Syr5iLVcEIWll4G/s/d0H0XvGjsY3puWIRlEzBDly0nilVbaQOrIz5TX4hlm NCtHCQZ6LTy3bFR3HEEuaOgbBU/a0z4PWJTKjXNK7hIUTnPvwO312INOF656+KF3 TV/ceNSmou7HjlPwF1GnURPgjkMI6OWka9BL+iHVQqWbqhXOnG/u5i0YCZTaidTI nYgD53JUHihPMbxxAy+7lBbMQeN8u26lwJ6RX8N03P3K -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:01 2026 by rpki-client