This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer (raw, json) Hash identifier: qnr1mDM0JAC0SkDGOyedI9FDQlh8Ak0S5JibD7020fM= Subject key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A975BD11F8EB9ABDC6DD6697D17095535 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 18 Nov 2025 14:26:08 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.51.20.0/24 IP: 193.33.29.0/24 IP: 2a10:7940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:5b:d1:1f:8e:b9:ab:dc:6d:d6:69:7d:17:09:55:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 18 14:26:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:28:cd:02:93:e1:79:0b:f2:9d:84:aa:71: 1c:22:64:f6:1d:83:94:3b:00:91:e8:33:5a:3f:c3: f6:a8:7e:19:e9:53:6d:84:be:8d:5a:03:da:38:da: 04:21:d7:2c:22:af:eb:73:c6:ab:34:01:c5:cd:49: a7:88:0d:c9:12:de:57:55:a6:7c:fa:8f:5f:ce:ea: 90:73:a6:61:11:f5:b6:f2:bb:bb:ce:c4:2d:53:ba: 95:ba:93:f7:59:8a:5f:69:0c:22:a7:76:12:4b:73: 9d:4e:22:d9:a7:1a:52:57:eb:e0:bc:2e:45:1a:ce: 56:b4:b9:c1:35:65:18:24:16:29:46:18:60:8f:d6: 69:32:13:0a:3a:21:e6:f8:14:ad:6c:2f:d6:44:be: 16:e5:ef:cc:92:8a:2d:c0:2a:7d:cf:37:15:3f:a0: 60:22:d1:76:e9:3a:d7:ad:d9:6c:fb:6a:3d:f5:4c: 4d:a9:fc:e9:8b:c5:b1:04:68:ac:43:32:ce:39:f3: 29:c7:2b:e1:f7:39:c5:fe:9e:ad:b3:2e:9c:ee:34: f1:89:99:3d:c7:15:d8:1d:21:ab:f8:cb:ed:29:9d: 55:89:2e:0c:e1:87:43:10:c3:a8:0d:1e:56:ee:35: b7:fe:2b:dd:d4:7e:e5:47:31:9b:e7:2f:96:b1:ac: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.20.0/24 193.33.29.0/24 IPv6: 2a10:7940::/29 Signature Algorithm: sha256WithRSAEncryption 1d:74:a4:86:23:ab:a4:7a:2c:e0:f5:84:18:95:0b:2b:f6:fb: 9c:64:c4:fd:06:68:45:d2:d8:6d:20:ce:86:dc:1b:be:f8:bc: bc:67:5a:40:08:87:b3:a6:3a:8f:94:1d:9c:86:74:96:97:b8: 5c:ec:7f:25:73:28:a4:6c:23:ce:72:92:59:2b:66:1b:de:47: eb:84:fb:ff:cc:2a:d3:bf:09:53:33:56:66:b7:0b:a3:2e:70: e2:b0:41:55:03:b6:00:a5:7b:1c:7b:8a:80:ce:9b:81:ef:79: 29:9d:7f:12:e3:24:52:37:b6:78:7e:94:c5:de:fc:24:c3:ff: 4a:80:db:13:37:9b:ca:9a:14:7a:7c:9c:ba:85:1c:47:7b:63: c9:24:cc:7c:42:24:47:3b:2a:9d:1d:f4:2e:d7:8b:94:e2:17: 2d:7a:b3:13:20:7f:78:c7:db:42:65:f8:df:50:d9:fa:44:58: 05:30:53:c8:f4:eb:6c:e8:f7:8e:7e:3e:42:aa:69:a1:b8:52: 47:24:7c:1c:69:53:f2:7d:4d:e5:fd:57:b4:05:a1:0e:36:f6: 38:95:7f:15:c4:1f:a3:64:3a:b2:30:a6:56:fb:8e:4f:88:57: dd:47:52:5f:df:1f:43:b0:c1:7e:f9:ef:fc:a4:24:5c:8d:95: 50:4f:7f:3b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZqXW9Efjrmr3G3WaX0XCVU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE4MTQyNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzEyZGI5NWRmYzNiMzEzOTVlMGVjYjVmZjI2MjEyZDc5OGRlODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5EozQKT4XkL8p2EqnEcImT2HYOU OwCR6DNaP8P2qH4Z6VNthL6NWgPaONoEIdcsIq/rc8arNAHFzUmniA3JEt5XVaZ8 +o9fzuqQc6ZhEfW28ru7zsQtU7qVupP3WYpfaQwip3YSS3OdTiLZpxpSV+vgvC5F Gs5WtLnBNWUYJBYpRhhgj9ZpMhMKOiHm+BStbC/WRL4W5e/MkootwCp9zzcVP6Bg ItF26TrXrdls+2o99UxNqfzpi8WxBGisQzLOOfMpxyvh9znF/p6tsy6c7jTxiZk9 xxXYHSGr+MvtKZ1ViS4M4YdDEMOoDR5W7jW3/ivd1H7lRzGb5y+WsaxZ4wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFLMS25Xfw7MTleDstf8mIS15jeg0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2NiYzUw ZS1mYWVmLTQzZWMtYmRiYS1mZGE0NzBjNjFlMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2JjNTBl LWZhZWYtNDNlYy1iZGJhLWZkYTQ3MGM2MWUwOS8xL3N4TGJsZF9Ec3hPVjRPeTFf eVloTFhtTjZEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuTMUAwQAwSEdMA0EAgACMAcDBQMqEHlAMA0G CSqGSIb3DQEBCwUAA4IBAQAddKSGI6ukeizg9YQYlQsr9vucZMT9BmhF0thtIM6G 3Bu++Ly8Z1pACIezpjqPlB2chnSWl7hc7H8lcyikbCPOcpJZK2Yb3kfrhPv/zCrT vwlTM1ZmtwujLnDisEFVA7YApXsce4qAzpuB73kpnX8S4yRSN7Z4fpTF3vwkw/9K gNsTN5vKmhR6fJy6hRxHe2PJJMx8QiRHOyqdHfQu14uU4hcterMTIH94x9tCZfjf UNn6RFgFMFPI9Ots6PeOfj5CqmmhuFJHJHwcaVPyfU3l/Ve0BaEONvY4lX8VxB+j ZDqyMKZW+45PiFfdR1Jf3x9DsMF++e/8pCRcjZVQT387 -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:59 2025 by rpki-client