This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer File: sxk4vHICgkRLq9OyazSStFats5c.cer (raw, json) Hash identifier: KgdQQ0wDl/kR1ZSSYegdRnwow6HcXeAiWoRsveF2bIQ= Subject key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11F696C938390598F8CBEA846EE306 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199568 IP: 2001:678:7b0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f6:96:c9:38:39:05:98:f8:cb:ea:84:6e:e3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b31938bc720282444babd3b26b3492b456adb397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:4f:fc:e1:5b:ed:07:72:ba:98:ac:76:ca: 80:9b:3d:5f:26:e2:cf:c2:f5:c6:5f:eb:6d:da:b8: e5:51:39:fd:52:e9:94:14:03:a3:4b:55:7d:1e:0e: 85:01:e6:7e:4f:07:ca:00:d1:b3:b2:02:e9:17:f1: d2:0e:65:98:75:8a:cf:bd:55:10:be:0d:b5:3a:3b: 4f:ec:19:06:81:93:ef:e0:ca:a9:fc:0f:aa:27:00: fa:41:2c:d7:9d:87:08:b3:f9:cf:a0:44:53:78:6e: 95:e9:2f:ca:93:41:72:f5:00:eb:1c:0a:17:36:79: 55:11:dd:b9:8e:03:87:08:c7:02:d9:78:6f:82:69: d3:71:81:d1:eb:67:0b:48:2f:03:b0:50:16:32:36: 1d:b2:b9:84:10:25:9a:ef:e6:4e:7c:21:f4:7a:12: 9f:5c:d5:c9:7b:5a:4f:cf:4c:eb:bc:5c:52:5a:93: 1e:5b:29:d0:ad:69:c0:17:a2:26:0d:44:14:ba:0c: ce:b2:10:31:a2:76:ce:60:fa:a1:a8:4d:e7:d8:31: 57:f5:26:98:a0:58:df:29:c6:da:ae:58:a1:a5:1e: db:9e:18:77:2b:0d:08:b8:ad:84:1c:4d:a1:75:93: 4c:5f:3f:c6:98:03:dd:ed:42:4b:62:42:90:63:60: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:7b0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199568 Signature Algorithm: sha256WithRSAEncryption 98:42:65:e5:61:9e:9b:d2:5e:28:72:bc:01:5a:89:61:88:bc: fe:de:5b:33:a6:64:64:f8:92:f1:18:ea:c7:98:0f:a6:da:bc: 4e:5d:6d:14:2a:a0:a0:d2:5a:9a:e9:00:8f:e6:db:9f:f0:cd: 33:3f:49:9e:b3:17:a6:e1:f6:36:6c:47:e4:ad:ee:6e:10:7c: 16:32:b2:d8:75:bc:ad:3c:cc:cb:12:ae:a2:a3:f2:8b:db:d0: 12:05:96:f6:e2:f7:d9:98:e7:df:77:01:21:03:1c:ac:95:af: a8:90:c5:03:c2:87:53:44:14:96:2c:ea:eb:7d:ff:00:02:3b: 83:1b:3c:7a:95:d2:da:10:3a:7a:9f:e8:bc:12:06:b1:d9:cd: 4c:21:c1:eb:e1:b2:09:f3:07:a4:b8:99:8a:85:01:12:63:21: dd:f0:76:1a:1e:ea:f5:fb:91:10:05:cd:e7:2d:1a:f6:2b:e8: 12:2c:90:56:fd:4f:8f:12:e8:32:83:aa:59:9a:2c:0b:dc:34: e3:4b:02:0e:05:78:00:c5:38:5e:3d:e5:73:1a:c3:e6:ae:68: bb:60:62:43:d5:98:59:c8:b6:f1:d0:4a:f5:f8:50:18:b8:ab: 87:d0:15:af:14:08:ea:f4:bf:4d:7b:d6:44:9c:a8:ff:db:29: 77:b2:7c:50 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8EfaWyTg5BZj4y+qEbuMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzE5MzhiYzcyMDI4MjQ0NGJhYmQzYjI2YjM0OTJiNDU2YWRiMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqRP/OFb7QdyupisdsqAmz1fJuLP wvXGX+tt2rjlUTn9UumUFAOjS1V9Hg6FAeZ+TwfKANGzsgLpF/HSDmWYdYrPvVUQ vg21OjtP7BkGgZPv4Mqp/A+qJwD6QSzXnYcIs/nPoERTeG6V6S/Kk0Fy9QDrHAoX NnlVEd25jgOHCMcC2XhvgmnTcYHR62cLSC8DsFAWMjYdsrmEECWa7+ZOfCH0ehKf XNXJe1pPz0zrvFxSWpMeWynQrWnAF6ImDUQUugzOshAxonbOYPqhqE3n2DFX9SaY oFjfKcbarlihpR7bnhh3Kw0IuK2EHE2hdZNMXz/GmAPd7UJLYkKQY2ARZQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFLMZOLxyAoJES6vTsms0krRWrbOXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4Lzc1ZGVk ZS01NDQ5LTRkNDctOWI1MS05YjVkZjg1YzExNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNzVkZWRl LTU0NDktNGQ0Ny05YjUxLTliNWRmODVjMTE0MC8xL3N4azR2SElDZ2tSTHE5T3lh elNTdEZhdHM1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAewMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMLkDANBgkqhkiG9w0BAQsFAAOCAQEAmEJl5WGem9JeKHK8AVqJYYi8/t5b M6ZkZPiS8Rjqx5gPptq8Tl1tFCqgoNJamukAj+bbn/DNMz9JnrMXpuH2NmxH5K3u bhB8FjKy2HW8rTzMyxKuoqPyi9vQEgWW9uL32Zjn33cBIQMcrJWvqJDFA8KHU0QU lizq633/AAI7gxs8epXS2hA6ep/ovBIGsdnNTCHB6+GyCfMHpLiZioUBEmMh3fB2 Gh7q9fuREAXN5y0a9ivoEiyQVv1PjxLoMoOqWZosC9w040sCDgV4AMU4Xj3lcxrD 5q5ou2BiQ9WYWci28dBK9fhQGLirh9AVrxQI6vS/TXvWRJyo/9spd7J8UA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:58 2026 by rpki-client