This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer (raw, json) Hash identifier: k+IOiNAzRQTwgFHk4GMC45tcQEDjmz7PDsSMkFW3MGM= Subject key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F831317CDB1F6027C1606D234F127D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44510 IP: 45.159.224.0/22 IP: 79.99.136.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:13:17:cd:b1:f6:02:7c:16:06:d2:34:f1:27:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:41:4c:bd:0b:19:c4:f9:66:c0:4e:33:b3: 5a:f1:d5:89:97:d2:ac:24:1e:60:42:8a:50:7b:dc: 7b:30:5d:cd:c7:5e:f7:90:8c:d7:97:0c:0c:16:0e: 1f:c4:f7:1a:29:99:f2:98:5b:05:8c:bb:2f:72:e1: 75:ec:ae:52:07:ec:39:3d:b7:96:bf:1b:c6:07:9e: 89:d5:a4:2b:54:0a:39:74:1e:f3:ec:36:77:7a:ff: 89:82:46:0c:c0:5e:86:21:80:75:35:ea:4d:7f:59: 83:81:57:38:f9:58:1c:c5:81:02:09:22:69:da:77: 4b:cd:09:0c:bd:f3:81:1a:9a:19:09:11:0d:31:50: ec:9b:32:71:dd:cd:76:a3:1b:7b:a3:c3:e9:68:ab: 08:c9:97:61:5f:1a:4f:f4:48:d9:93:20:db:20:30: f6:7b:76:cb:1d:7b:77:d7:0b:bb:d3:f1:da:a8:46: 06:94:e0:34:af:c7:f7:e4:d1:bc:b1:a8:f7:23:d5: d4:a7:68:2a:16:a5:cc:fa:1b:fd:eb:03:28:2e:87: 28:1d:bb:3c:74:0e:f7:1f:81:87:e0:fd:f0:e7:ed: 91:03:9f:37:d9:c3:f4:04:fc:04:69:3f:34:1f:14: 21:d1:2d:19:f8:a4:0f:c3:f4:fe:29:bd:3c:b1:70: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.224.0/22 79.99.136.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44510 Signature Algorithm: sha256WithRSAEncryption 9a:51:fe:75:56:c1:1d:dc:1f:85:ab:d8:aa:df:87:e9:f5:ac: ff:95:4e:00:28:74:5e:54:e1:59:66:24:2e:b4:a5:8e:b9:6d: 06:8b:23:de:c2:55:8c:08:dd:30:04:ca:8d:e5:06:2e:3f:ca: 84:42:ca:94:15:e3:7f:a2:0f:db:91:be:11:9e:3b:43:2f:34: cf:8c:5e:e6:a5:c9:08:56:b1:f5:9a:d5:18:c3:b1:3f:d7:f6: 5e:3d:36:e3:94:bb:3f:1d:25:14:0c:0b:a3:3d:b3:34:12:5e: 42:ec:48:1a:dd:72:bd:65:60:e2:38:57:1b:27:f3:df:05:ee: b4:be:59:08:af:72:4a:76:ae:91:2e:c6:88:96:c8:74:4f:8f: e3:39:e6:4d:8a:ee:d2:71:9a:32:e3:7f:c3:5a:aa:56:19:e7: 24:09:4e:bb:80:2e:82:ea:45:54:8e:f5:5c:00:b5:0a:b3:99: 5d:bb:88:ae:84:c2:67:df:27:50:09:50:2d:c6:0d:ec:34:3f: 57:1c:10:c9:01:a2:85:12:c8:33:b1:05:4f:ca:92:eb:07:f8: a3:1e:56:e2:a2:d5:09:4e:d7:3d:e6:5a:95:27:86:44:99:82: 1d:4a:4b:27:8e:53:12:91:04:18:0e:c1:49:7d:8b:0e:eb:48: 27:a0:17:4d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/gxMXzbH2AnwWBtI08SfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzM0ZmMyYjViODIyN2I2ZGYzZjIxZDFhZDNhNzRiMTRlYzA2ODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1VBTL0LGcT5ZsBOM7Na8dWJl9Ks JB5gQopQe9x7MF3Nx173kIzXlwwMFg4fxPcaKZnymFsFjLsvcuF17K5SB+w5PbeW vxvGB56J1aQrVAo5dB7z7DZ3ev+JgkYMwF6GIYB1NepNf1mDgVc4+VgcxYECCSJp 2ndLzQkMvfOBGpoZCRENMVDsmzJx3c12oxt7o8PpaKsIyZdhXxpP9EjZkyDbIDD2 e3bLHXt31wu70/HaqEYGlOA0r8f35NG8saj3I9XUp2gqFqXM+hv96wMoLocoHbs8 dA73H4GH4P3w5+2RA5832cP0BPwEaT80HxQh0S0Z+KQPw/T+Kb08sXA5wQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFLM0/Ctbgie23z8h0a06dLFOwGhaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzY4MmVj ZS1lYmUyLTRhMjMtOGFiNS0zNmU2NGFjNjQ1NDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvNjgyZWNl LWViZTItNGEyMy04YWI1LTM2ZTY0YWM2NDU0Mi8xL3N6VDhLMXVDSjdiZlB5SFJy VHAwc1U3QWFGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLZ/gAwQDT2OIMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCt3jANBgkqhkiG9w0BAQsFAAOCAQEAmlH+dVbBHdwfhavYqt+H6fWs /5VOACh0XlThWWYkLrSljrltBosj3sJVjAjdMATKjeUGLj/KhELKlBXjf6IP25G+ EZ47Qy80z4xe5qXJCFax9ZrVGMOxP9f2Xj0245S7Px0lFAwLoz2zNBJeQuxIGt1y vWVg4jhXGyfz3wXutL5ZCK9ySnaukS7GiJbIdE+P4znmTYru0nGaMuN/w1qqVhnn JAlOu4AugupFVI71XAC1CrOZXbuIroTCZ98nUAlQLcYN7DQ/VxwQyQGihRLIM7EF T8qS6wf4ox5W4qLVCU7XPeZalSeGRJmCHUpLJ45TEpEEGA7BSX2LDutIJ6AXTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:24 2026 by rpki-client