This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer File: 0CDxCDLEm61vFalgWMW6GFcqxSo.cer (raw, json) Hash identifier: AqK4z1Jzr/Uk/oZ1Es6YZ9gpH9G1C5EWAL3Nl2eySCs= Subject key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4E70A7B3D7B3C0538CA20FA2B1ABE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21364 IP: 80.245.0.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e7:0a:7b:3d:7b:3c:05:38:ca:20:fa:2b:1a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d020f10832c49bad6f15a96058c5ba18572ac52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:36:8a:24:09:c4:90:46:3d:82:e0:e8:cb: c1:a5:2f:ae:ef:7e:5f:12:ea:11:b3:e9:d4:c1:10: 16:b0:28:7c:97:94:9d:54:dd:86:db:8f:54:72:e5: 5f:ec:d8:77:25:53:fe:49:2e:60:37:27:29:83:5f: ec:18:64:54:01:42:df:1c:dd:78:4a:d0:40:2d:0c: b5:1d:76:5e:c7:1a:72:b2:ff:51:96:4b:68:c9:a8: a9:99:34:ea:37:1c:b0:5d:5d:82:b0:70:a0:fa:ff: 84:56:ca:9e:5f:4c:9b:b1:30:6e:d4:74:86:e6:92: 47:08:3d:3b:e7:1c:3c:cf:bd:2e:9e:e5:48:3d:bb: f3:d7:eb:4f:0c:12:9c:5f:0b:98:78:e3:8c:17:b2: ba:74:17:88:5b:c1:13:ad:9e:1e:7e:2c:6b:64:57: df:ad:12:ed:cf:cf:53:d5:47:c1:c8:3c:92:fb:2f: 42:23:9f:fe:05:2a:bc:c5:88:c1:eb:d4:b0:73:7c: 43:8b:2f:34:40:7d:ff:9d:00:7d:40:57:08:5b:f2: 80:25:0c:7a:51:be:11:71:03:0f:aa:7c:2a:75:45: ed:ab:30:cd:2d:d5:64:4d:e2:6d:55:61:7e:d9:7c: 6c:bc:ab:32:a7:bf:0b:60:61:96:4a:79:7f:38:3e: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21364 Signature Algorithm: sha256WithRSAEncryption 5e:a8:a4:65:5e:09:e7:3c:f3:23:9c:af:1c:f2:c9:f8:e8:20: bf:64:da:bb:d1:66:6a:34:1a:0a:65:59:10:a3:7a:df:77:13: 4a:4e:cb:5f:14:a9:4f:1c:34:91:12:33:2c:c2:a4:19:44:67: 60:de:26:c8:c8:12:1d:e6:94:3a:73:e3:7f:bf:75:c0:dc:d1: 20:d6:6b:35:7c:e9:10:6b:55:aa:35:a0:bf:0c:9e:58:31:7e: 1f:16:fe:04:02:a7:40:0e:aa:da:83:8a:5e:31:f0:83:96:e5: dd:4d:2e:94:7c:be:99:f9:03:1e:52:de:aa:d5:35:ca:56:6f: b5:b4:7e:99:37:2c:3e:cb:d5:47:68:ae:55:5c:b5:26:53:11: f6:4c:88:de:41:07:7a:f2:5a:f9:e4:94:ec:a7:3a:81:6e:e3: d6:59:8b:c1:6f:cc:ac:11:f3:e6:df:95:12:82:20:e4:2e:b6: ce:98:39:51:b0:5a:04:35:5a:33:e6:7f:73:9c:55:7b:b2:51: 2f:eb:e2:43:0f:1e:b5:ae:85:57:ae:d0:20:b1:66:9a:ce:6d: f0:87:33:e3:ec:b9:21:d1:cc:91:19:5f:3f:6b:f1:c8:f2:04: 82:ef:52:a1:f7:24:23:c7:fc:98:fc:82:0c:ae:3e:69:24:51: ca:2a:44:8b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7pOcKez17PAU4yiD6Kxq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDIwZjEwODMyYzQ5YmFkNmYxNWE5NjA1OGM1YmExODU3MmFjNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujc2iiQJxJBGPYLg6MvBpS+u735f EuoRs+nUwRAWsCh8l5SdVN2G249UcuVf7Nh3JVP+SS5gNycpg1/sGGRUAULfHN14 StBALQy1HXZexxpysv9RlktoyaipmTTqNxywXV2CsHCg+v+EVsqeX0ybsTBu1HSG 5pJHCD075xw8z70unuVIPbvz1+tPDBKcXwuYeOOMF7K6dBeIW8ETrZ4efixrZFff rRLtz89T1UfByDyS+y9CI5/+BSq8xYjB69Swc3xDiy80QH3/nQB9QFcIW/KAJQx6 Ub4RcQMPqnwqdUXtqzDNLdVkTeJtVWF+2XxsvKsyp78LYGGWSnl/OD7FuQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFNAg8QgyxJutbxWpYFjFuhhXKsUqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzJjMTFj MS00MjUwLTQzODctYTRkYi0yNzAxZDU5MWRlYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvMmMxMWMx LTQyNTAtNDM4Ny1hNGRiLTI3MDFkNTkxZGVhZS8xLzBDRHhDRExFbTYxdkZhbGdX TVc2R0ZjcXhTby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEUPUAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlN0MA0GCSqGSIb3DQEBCwUAA4IBAQBeqKRlXgnnPPMjnK8c8sn46CC/ZNq70WZq NBoKZVkQo3rfdxNKTstfFKlPHDSREjMswqQZRGdg3ibIyBId5pQ6c+N/v3XA3NEg 1ms1fOkQa1WqNaC/DJ5YMX4fFv4EAqdADqrag4peMfCDluXdTS6UfL6Z+QMeUt6q 1TXKVm+1tH6ZNyw+y9VHaK5VXLUmUxH2TIjeQQd68lr55JTspzqBbuPWWYvBb8ys EfPm35USgiDkLrbOmDlRsFoENVoz5n9znFV7slEv6+JDDx61roVXrtAgsWaazm3w hzPj7Lkh0cyRGV8/a/HI8gSC71Kh9yQjx/yY/IIMrj5pJFHKKkSL -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:37 2026 by rpki-client