This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer File: C89yHHHIrnyvcG2d8zWLEtVLTZA.cer (raw, json) Hash identifier: yrJHmIl3D86yc86zuMZsdEbizxBGZf8a7W39UEl6iN4= Subject key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF227C111283A3D31308B95F606BE85 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.110.32.0/21 IP: 193.143.142.0 -- 193.143.159.255 IP: 194.110.31.0 -- 194.110.37.255 IP: 194.110.39.0 -- 194.110.43.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:27:c1:11:28:3a:3d:31:30:8b:95:f6:06:be:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:4a:fb:0e:6d:7d:e2:a4:1e:d6:13:7d:0a: 3d:af:f0:1f:34:38:8f:13:74:69:8e:fe:9a:2e:b8: 55:3e:ef:34:6c:ee:60:cc:cc:d9:16:89:ec:f7:82: cf:1d:a4:98:f5:a2:ba:29:99:25:39:b0:7c:a9:da: e5:e7:ac:f8:82:5c:6b:57:a2:39:6f:ed:a2:e5:03: 0d:b7:4c:52:3f:52:3e:1b:80:fa:42:9b:6a:3a:3e: fe:fa:cf:11:6c:af:c4:8b:91:72:ee:9c:4f:06:53: ec:e8:2e:dd:50:bc:7d:7b:1e:d8:b3:6e:ce:a4:30: 35:c1:b0:f8:c1:96:11:74:84:cc:da:99:92:61:b2: a2:0f:38:2d:08:9b:d3:09:c5:82:bb:ee:6c:23:46: 83:79:66:e1:f4:fd:73:fc:d3:27:6f:79:e5:92:52: bd:e3:dd:25:6a:8d:02:22:e7:6e:fb:a0:69:9f:da: 22:f7:47:52:16:ca:57:01:12:ff:c1:f9:32:e2:3e: e2:63:69:6e:62:75:42:a2:17:c1:3e:6d:a3:4f:66: b7:85:1d:c4:f0:54:6c:21:4f:10:e0:0a:3f:99:21: 08:74:3a:3a:34:00:59:cb:b9:94:ce:b3:c0:6f:8d: 6c:70:b4:db:6a:17:5c:cf:1f:d8:f9:b8:19:87:a5: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.32.0/21 193.143.142.0-193.143.159.255 194.110.31.0-194.110.37.255 194.110.39.0-194.110.43.255 Signature Algorithm: sha256WithRSAEncryption 9c:27:89:b9:f3:f1:1a:97:4e:c2:e4:f1:50:cc:e8:ac:3e:7d: eb:68:4a:3c:3b:8b:4d:b5:86:23:e5:32:6a:e1:f6:c4:0d:b0: 0b:64:1b:f3:1c:41:09:a5:b5:9d:fb:73:31:4b:6e:4d:c6:bc: e7:41:2a:32:97:07:4b:b5:60:89:62:5a:c5:8a:6d:f5:2e:ce: a6:63:22:db:f1:be:df:99:64:3a:b2:b1:33:ea:20:5c:f8:1b: 54:15:60:3b:95:12:a1:12:b0:be:d5:05:3c:6d:78:72:66:2e: 90:aa:db:b1:94:0e:75:72:ee:2d:db:a1:a6:77:77:38:8a:0b: 44:a6:72:8f:73:3f:65:31:b2:2d:65:29:85:ca:b7:00:2b:5a: b8:77:f4:0e:39:af:a1:96:f2:ea:cb:cf:54:fe:f6:52:48:61: ac:69:21:0c:c2:55:77:e4:87:82:e8:42:05:13:54:23:30:69: 72:df:1a:27:ef:fc:97:1e:31:7b:21:07:fe:f8:7d:bb:1e:40: 97:55:27:2d:bc:86:02:a3:d8:5f:5c:8e:6c:53:a5:b9:6a:99: da:b2:0b:5e:19:ad:24:d2:e5:58:b6:a4:b6:5a:2a:ff:08:ef: c4:34:52:c8:93:4f:da:88:c1:f2:10:14:24:1d:ce:de:fd:8c: a4:1c:3b:ad -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt/8ifBESg6PTEwi5X2Br6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmNmNzIxYzcxYzhhZTdjYWY3MDZkOWRmMzM1OGIxMmQ1NGI0ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RJK+w5tfeKkHtYTfQo9r/AfNDiP E3Rpjv6aLrhVPu80bO5gzMzZFons94LPHaSY9aK6KZklObB8qdrl56z4glxrV6I5 b+2i5QMNt0xSP1I+G4D6QptqOj7++s8RbK/Ei5Fy7pxPBlPs6C7dULx9ex7Ys27O pDA1wbD4wZYRdITM2pmSYbKiDzgtCJvTCcWCu+5sI0aDeWbh9P1z/NMnb3nlklK9 490lao0CIudu+6Bpn9oi90dSFspXARL/wfky4j7iY2luYnVCohfBPm2jT2a3hR3E 8FRsIU8Q4Ao/mSEIdDo6NABZy7mUzrPAb41scLTbahdczx/Y+bgZh6W4kwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFAvPchxxyK58r3BtnfM1ixLVS02QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzBlZTEx Zi00MWI3LTRhYzktOWIxNi1kOWViOGQ1NzM2NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMGVlMTFm LTQxYjctNGFjOS05YjE2LWQ5ZWI4ZDU3MzY2Yy8xL0M4OXlISEhJcm55dmNHMmQ4 eldMRXRWTFRaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODA2BAIAATAwAwQDwW4gMAwDBAHBj44DBAXBj4AwDAMEAMJuHwME AcJuJDAMAwQAwm4nAwQCwm4oMA0GCSqGSIb3DQEBCwUAA4IBAQCcJ4m58/Eal07C 5PFQzOisPn3raEo8O4tNtYYj5TJq4fbEDbALZBvzHEEJpbWd+3MxS25NxrznQSoy lwdLtWCJYlrFim31Ls6mYyLb8b7fmWQ6srEz6iBc+BtUFWA7lRKhErC+1QU8bXhy Zi6QqtuxlA51cu4t26Gmd3c4igtEpnKPcz9lMbItZSmFyrcAK1q4d/QOOa+hlvLq y89U/vZSSGGsaSEMwlV35IeC6EIFE1QjMGly3xon7/yXHjF7IQf++H27HkCXVSct vIYCo9hfXI5sU6W5apnasgteGa0k0uVYtqS2Wir/CO/ENFLIk0/aiMHyEBQkHc7e /YykHDut -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:21 2026 by rpki-client