This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer File: C1XbSaXB_JAcoahcjSXxPxhuL_o.cer (raw, json) Hash identifier: L21g8VbGajJRmb6zQgy3938Fh1SHiYeK9xA3xL6Gsgk= Subject key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758AB19532C6C884C2EB7845FFD2782 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8556 IP: 2a00:c800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ab:19:53:2c:6c:88:4c:2e:b7:84:5f:fd:27:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:04:f8:9a:d6:21:0e:fd:39:63:10:cd:73: 84:9a:ef:44:9f:d2:c4:5a:ed:bb:9c:de:4b:e5:13: 66:6b:a5:0b:62:3a:3e:60:89:83:a4:2f:98:65:39: 6f:d0:8b:4c:bd:dc:59:da:f6:c9:17:b9:e6:8a:e8: 49:3f:9c:ce:ce:53:ab:96:6c:ab:8e:50:14:66:ea: 10:b2:02:da:38:f5:30:51:db:59:ab:62:a2:bc:17: 35:e6:29:f0:2d:e0:9a:a6:0d:1b:da:c4:27:6d:bd: f4:8a:6c:a3:dc:a2:31:47:01:9f:e9:4a:7a:e1:b3: ba:2e:6b:7f:1c:e1:3f:ea:39:3c:3d:7e:76:31:3e: b3:49:73:f3:25:aa:75:29:84:e7:de:80:84:8d:ad: d6:7a:b0:67:dd:1e:8c:2d:ee:57:c6:4b:0e:9e:66: f3:c4:10:e9:64:f8:79:e4:a9:9b:5f:fc:bd:bd:0d: 19:b2:dd:84:93:92:37:f2:6a:a5:15:80:72:73:a5: 2b:b9:a4:90:42:54:c7:37:bc:6f:c8:b4:e4:64:e1: d5:07:46:35:82:32:ba:33:83:4d:3b:08:cd:81:e6: d7:5c:3a:e7:32:3a:44:76:50:e3:4e:6b:6d:ec:f0: 98:ca:ea:12:48:97:64:a9:df:45:75:71:11:95:09: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:c800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8556 Signature Algorithm: sha256WithRSAEncryption 02:4a:b8:31:70:30:db:2e:a4:cd:76:cb:f1:2e:12:b1:6d:01: 20:c0:e8:e2:ff:f6:2d:21:43:f3:c2:72:07:38:d3:1e:4c:28: 00:c7:31:44:e9:24:68:42:c4:65:11:d3:12:f7:85:18:a0:6c: 3f:52:af:f8:f4:5a:21:33:69:ff:c6:d8:84:e2:10:33:aa:12: 92:ab:ec:14:41:b9:e8:44:31:be:af:dc:0d:41:89:d3:67:81: da:cb:ab:ac:14:b4:69:3c:34:39:e2:6c:95:c8:2b:61:e5:f5: 08:f3:0f:09:51:a0:66:40:74:4a:35:7b:df:8b:32:b3:8f:e7: 84:79:b5:91:41:c1:af:34:7b:53:30:e0:84:fc:a9:99:a9:33: bd:72:81:4d:9f:1d:e5:16:85:18:8a:96:e4:db:33:f7:b8:6e: b2:b2:57:fe:a4:f9:55:91:86:22:1d:28:72:d8:d6:58:ee:b4: da:f4:13:a6:b6:ac:12:19:82:25:46:0f:e4:92:7f:01:24:f8: cd:73:65:34:f8:59:2a:bc:74:3d:6e:53:60:dc:5f:31:bd:29: 9c:36:b2:7b:83:bc:0e:27:78:64:62:f6:1c:9b:e4:bc:99:4b: aa:45:b2:36:37:5a:9d:5b:e1:33:e8:5d:0d:77:fd:5f:0f:a6: 67:60:73:94 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WKsZUyxsiEwut4Rf/SeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjU1ZGI0OWE1YzFmYzkwMWNhMWE4NWM4ZDI1ZjEzZjE4NmUyZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGYE+JrWIQ79OWMQzXOEmu9En9LE Wu27nN5L5RNma6ULYjo+YImDpC+YZTlv0ItMvdxZ2vbJF7nmiuhJP5zOzlOrlmyr jlAUZuoQsgLaOPUwUdtZq2KivBc15inwLeCapg0b2sQnbb30imyj3KIxRwGf6Up6 4bO6Lmt/HOE/6jk8PX52MT6zSXPzJap1KYTn3oCEja3WerBn3R6MLe5XxksOnmbz xBDpZPh55KmbX/y9vQ0Zst2Ek5I38mqlFYByc6UruaSQQlTHN7xvyLTkZOHVB0Y1 gjK6M4NNOwjNgebXXDrnMjpEdlDjTmtt7PCYyuoSSJdkqd9FdXERlQndVwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAtV20mlwfyQHKGoXI0l8T8Ybi/6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzUyMzk4 OC01YTAwLTQwYTYtYjA0NC1hMjdlNzRmNzVkMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvNTIzOTg4 LTVhMDAtNDBhNi1iMDQ0LWEyN2U3NGY3NWQyNi8xL0MxWGJTYVhCX0pBY29haGNq U1h4UHhodUxfby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgDIADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIhbDANBgkqhkiG9w0BAQsFAAOCAQEAAkq4MXAw2y6kzXbL8S4SsW0BIMDo4v/2 LSFD88JyBzjTHkwoAMcxROkkaELEZRHTEveFGKBsP1Kv+PRaITNp/8bYhOIQM6oS kqvsFEG56EQxvq/cDUGJ02eB2surrBS0aTw0OeJslcgrYeX1CPMPCVGgZkB0SjV7 34sys4/nhHm1kUHBrzR7UzDghPypmakzvXKBTZ8d5RaFGIqW5Nsz97husrJX/qT5 VZGGIh0octjWWO602vQTprasEhmCJUYP5JJ/AST4zXNlNPhZKrx0PW5TYNxfMb0p nDaye4O8Did4ZGL2HJvkvJlLqkWyNjdanVvhM+hdDXf9Xw+mZ2BzlA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:56 2026 by rpki-client