This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer File: CBdeCjbHidMUILMzA_vHMkx8V0s.cer (raw, json) Hash identifier: mZHXhjBYM7eIlWRvYoMG2lsYwtb+QUmCY8pYIpLmKcA= Subject key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA485375CBC781B310AFE346C1D8CDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62248 IP: 185.42.168.0/22 IP: 185.73.132.0/22 IP: 2a01:6560::/32 IP: 2a05:4280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:85:37:5c:bc:78:1b:31:0a:fe:34:6c:1d:8c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08175e0a36c789d31420b33303fbc7324c7c574b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:79:30:18:c1:8d:42:16:a9:10:01:14:68: 8f:3d:8f:83:eb:c3:4b:a8:59:71:71:93:f2:d6:3b: 3e:b3:4a:c5:a2:20:c8:dd:5c:9f:58:55:28:40:c7: 08:28:6f:37:bc:01:50:47:d5:f3:2a:f6:1a:77:83: de:1d:5a:6e:6b:79:69:66:52:ab:a5:ba:bc:7b:fd: a6:cd:bf:e0:3b:5f:13:cf:39:c5:ff:79:f6:5c:a3: eb:bb:ed:04:91:af:5d:3d:84:64:69:87:f5:39:41: 50:9f:39:a5:25:da:17:9d:dd:f0:89:5a:81:94:08: a5:a0:b0:71:a4:da:e3:ba:1f:9f:71:49:1a:a8:c8: 0d:6b:14:8a:15:20:bf:af:8d:1c:84:06:12:08:84: ad:d5:3b:57:7b:ba:25:57:14:4a:67:87:3f:d2:6b: 2e:84:c0:fd:e6:46:b5:de:da:f8:7f:2e:77:27:b8: 14:39:b4:3b:72:5c:29:75:a2:01:05:d6:0e:d5:e2: 14:c0:80:92:eb:39:7a:81:c3:57:78:e5:05:07:0d: e1:33:58:c3:d8:1e:bc:e5:b9:15:b6:ae:c6:d2:ea: 2c:68:84:a0:a7:69:ae:aa:2f:ec:3f:56:a9:66:7a: 18:8f:5c:66:e1:e6:13:01:5e:2a:7e:e6:e7:fb:39: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.168.0/22 185.73.132.0/22 IPv6: 2a01:6560::/32 2a05:4280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62248 Signature Algorithm: sha256WithRSAEncryption 6f:2f:ae:a5:ef:60:6f:bb:ec:ae:cb:7b:2e:44:84:e9:da:03: ef:54:6e:ae:10:dc:1d:b6:2f:c2:b8:86:e1:53:27:56:ed:1f: b9:d7:62:ae:10:22:d2:cf:34:21:32:2c:53:54:99:be:1c:3c: 8c:4d:2d:07:9e:54:c7:b9:e1:10:6d:09:60:5a:77:25:1f:b2: 1c:e6:ab:b0:79:67:a8:f7:46:7d:ec:40:54:83:99:be:bb:24: 55:7c:77:7e:b9:fe:a9:32:3d:e0:86:18:9f:97:1e:36:13:35: 46:3b:a1:dd:f2:a0:b0:b4:49:9f:e1:d5:e2:00:3f:03:ba:97: 5b:81:c9:c3:df:64:ea:eb:d1:32:93:ae:08:68:34:e8:64:b0: f3:3b:81:b7:21:15:73:58:10:8d:c9:41:88:7b:9f:88:ef:54: 00:07:58:cb:a3:52:9e:14:c5:7e:4b:c6:88:a7:d3:fd:9e:78: 41:75:24:cf:87:6a:31:57:a4:28:3e:64:a9:89:7e:95:68:fa: ee:85:fe:c6:7a:f0:9c:d0:18:f0:23:e8:3c:57:75:07:9e:49: 1a:cc:74:63:39:9d:01:f9:94:5e:74:ca:5a:3b:6d:c8:73:f3: b0:b2:93:06:9f:13:36:89:ad:01:47:aa:15:23:ff:75:3a:a8: 8a:68:92:cc -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt+pIU3XLx4GzEK/jRsHYzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODE3NWUwYTM2Yzc4OWQzMTQyMGIzMzMwM2ZiYzczMjRjN2M1NzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGR5MBjBjUIWqRABFGiPPY+D68NL qFlxcZPy1js+s0rFoiDI3VyfWFUoQMcIKG83vAFQR9XzKvYad4PeHVpua3lpZlKr pbq8e/2mzb/gO18TzznF/3n2XKPru+0Eka9dPYRkaYf1OUFQnzmlJdoXnd3wiVqB lAiloLBxpNrjuh+fcUkaqMgNaxSKFSC/r40chAYSCISt1TtXe7olVxRKZ4c/0msu hMD95ka13tr4fy53J7gUObQ7clwpdaIBBdYO1eIUwICS6zl6gcNXeOUFBw3hM1jD 2B685bkVtq7G0uosaISgp2muqi/sP1apZnoYj1xm4eYTAV4qfubn+zlakwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFAgXXgo2x4nTFCCzMwP7xzJMfFdLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzI4ZTlj Yi04ZWYzLTQ4MmEtOGVkMS0yZjUwNzA4YWM1N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvMjhlOWNi LThlZjMtNDgyYS04ZWQxLTJmNTA3MDhhYzU3Zi8xL0NCZGVDamJIaWRNVUlMTXpB X3ZITWt4OFYwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuSqoAwQCuUmEMBQEAgACMA4DBQAqAWVgAwUD KgVCgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8ygwDQYJKoZIhvcNAQELBQAD ggEBAG8vrqXvYG+77K7Ley5EhOnaA+9Ubq4Q3B22L8K4huFTJ1btH7nXYq4QItLP NCEyLFNUmb4cPIxNLQeeVMe54RBtCWBadyUfshzmq7B5Z6j3Rn3sQFSDmb67JFV8 d365/qkyPeCGGJ+XHjYTNUY7od3yoLC0SZ/h1eIAPwO6l1uBycPfZOrr0TKTrgho NOhksPM7gbchFXNYEI3JQYh7n4jvVAAHWMujUp4UxX5Lxoin0/2eeEF1JM+HajFX pCg+ZKmJfpVo+u6F/sZ68JzQGPAj6DxXdQeeSRrMdGM5nQH5lF50ylo7bchz87Cy kwafEzaJrQFHqhUj/3U6qIpoksw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:37 2026 by rpki-client