This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer File: C27I7Y_JP3IzT3qXSka8J9EQKSM.cer (raw, json) Hash identifier: jLxbaRcbiwbQcz9a47UfIUSSfY/yoTuwthOEQPd5XdY= Subject key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3385C66B4406B18DFF61899A0473C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206345 AS: 208492 IP: 5.34.192.0/20 IP: 2a14:c480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:38:5c:66:b4:40:6b:18:df:f6:18:99:a0:47:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:fa:69:5c:5c:ba:cc:da:8d:2a:a8:e8:dd: 52:3e:ed:26:84:e3:e4:51:85:45:6d:47:c6:8f:22: cd:2c:a7:b3:aa:47:79:36:8f:c6:2f:98:99:87:23: f0:ed:7f:c9:8a:4a:89:91:0f:f9:79:18:38:e2:23: 89:a0:74:62:a0:2d:7a:21:cb:c8:cb:4a:5e:b7:ea: 9d:e7:ab:1c:d2:10:89:d6:ad:d7:56:2b:2c:69:e0: 76:98:08:79:1d:8a:fb:2a:68:be:ce:fa:e7:b8:ac: 1e:ad:9c:64:06:32:6f:97:88:d7:2d:70:8b:45:77: 04:bd:f2:07:3e:d3:5a:b6:e6:44:e1:28:7b:9c:fc: 2d:42:cd:4d:62:80:9b:9b:3b:75:bb:24:e9:0d:33: 98:e8:ac:1f:24:73:fe:de:a2:8f:31:e9:13:b4:9d: ab:10:98:44:6a:c7:4c:14:09:b9:93:7e:dd:35:8a: 0f:40:ca:d4:30:ab:75:fa:9a:9e:c5:bf:c6:b9:95: 8f:ab:4c:f8:b1:a3:4d:47:02:90:58:62:3c:c8:62: e6:60:57:f7:1d:9d:3d:5c:bd:0a:08:db:2f:70:f2: 6d:95:04:20:15:42:e5:55:ca:fa:53:ba:79:c6:ce: d9:72:f6:45:78:d1:81:08:09:dc:8b:37:aa:6a:6f: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.192.0/20 IPv6: 2a14:c480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206345 208492 Signature Algorithm: sha256WithRSAEncryption 92:6a:88:cf:99:95:a2:a2:d3:34:6c:21:ee:4a:f2:a7:67:9b: dd:84:13:6c:e9:4b:2e:06:84:74:b9:f1:53:db:8a:20:2b:7d: ce:f4:93:ce:60:70:3b:b3:40:95:c4:a5:58:2f:2a:49:f0:56: 32:99:72:a7:49:d1:73:34:69:21:a2:37:08:4e:6c:37:a3:2d: 40:34:86:5d:4e:71:20:f6:e6:32:27:ac:a7:48:a3:d4:2b:19: e1:f0:2b:c6:94:07:7f:a6:16:f5:21:1e:f3:ca:fa:cf:40:26: 5b:2f:89:d6:fb:d7:12:bc:d9:36:8f:a4:7e:fa:c4:7d:10:77: f2:f6:bd:f5:3a:43:43:6c:67:7a:da:45:ea:68:6f:5d:d4:2b: fb:04:fe:1d:a2:94:00:14:fe:d9:c3:62:4e:39:fb:81:d4:94: cd:28:87:10:1c:11:66:de:f3:70:2a:f5:a3:d4:a9:72:bc:74: 08:c8:72:a7:6d:f7:ac:a7:23:1e:e9:06:e3:fb:d9:c9:52:53: 7d:eb:82:80:8d:71:42:a8:5d:47:e7:f4:52:d3:d5:b8:84:67: bd:9e:56:6e:5d:eb:f6:ee:b0:5a:f0:a0:cf:2b:ee:75:91:2a: 0c:6b:b7:df:47:e4:67:5d:75:7d:0b:5d:5e:23:a9:6c:45:68: 2a:5d:5e:c8 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4ozhcZrRAaxjf9hiZoEc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjZlYzhlZDhmYzkzZjcyMzM0ZjdhOTc0YTQ2YmMyN2QxMTAyOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wD6aVxcuszajSqo6N1SPu0mhOPk UYVFbUfGjyLNLKezqkd5No/GL5iZhyPw7X/JikqJkQ/5eRg44iOJoHRioC16IcvI y0pet+qd56sc0hCJ1q3XVissaeB2mAh5HYr7Kmi+zvrnuKwerZxkBjJvl4jXLXCL RXcEvfIHPtNatuZE4Sh7nPwtQs1NYoCbmzt1uyTpDTOY6KwfJHP+3qKPMekTtJ2r EJhEasdMFAm5k37dNYoPQMrUMKt1+pqexb/GuZWPq0z4saNNRwKQWGI8yGLmYFf3 HZ09XL0KCNsvcPJtlQQgFULlVcr6U7p5xs7ZcvZFeNGBCAncizeqam949QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFAtuyO2PyT9yM096l0pGvCfRECkjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzMwNDc2 Mi02NzMzLTRjNzMtODUyMy0wNDc3NzUxMjkxNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMzA0NzYy LTY3MzMtNGM3My04NTIzLTA0Nzc3NTEyOTE0OC8xL0MyN0k3WV9KUDNJelQzcVhT a2E4SjlFUUtTTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEBSLAMA0EAgACMAcDBQMqFMSAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMmCQIDAy5sMA0GCSqGSIb3DQEBCwUAA4IBAQCSaojP mZWiotM0bCHuSvKnZ5vdhBNs6UsuBoR0ufFT24ogK33O9JPOYHA7s0CVxKVYLypJ 8FYymXKnSdFzNGkhojcITmw3oy1ANIZdTnEg9uYyJ6ynSKPUKxnh8CvGlAd/phb1 IR7zyvrPQCZbL4nW+9cSvNk2j6R++sR9EHfy9r31OkNDbGd62kXqaG9d1Cv7BP4d opQAFP7Zw2JOOfuB1JTNKIcQHBFm3vNwKvWj1KlyvHQIyHKnbfespyMe6Qbj+9nJ UlN964KAjXFCqF1H5/RS09W4hGe9nlZuXev27rBa8KDPK+51kSoMa7ffR+RnXXV9 C11eI6lsRWgqXV7I -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:59 2026 by rpki-client