This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer File: CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer (raw, json) Hash identifier: ViZwmFWuLE20CZO5HGksyISlVbnoAyn7GnJgjE0kNk0= Subject key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EC2B0493D02E21E465E9C8F58EFC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43534 IP: 91.197.92.0/22 IP: 193.163.48.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c2:b0:49:3d:02:e2:1e:46:5e:9c:8f:58:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:1b:7d:c4:7f:f4:aa:68:7b:cb:dc:5b:86: 30:5e:bf:f8:dc:04:30:4b:d5:31:f7:53:51:8a:17: e1:cf:bb:f4:7b:25:82:cc:74:97:9e:dc:7f:5c:ce: 32:01:9a:68:d4:b5:26:f9:fe:90:05:29:22:94:99: b3:ae:71:ad:ea:10:3a:04:1d:73:a1:01:42:ef:7b: d6:ac:13:be:dc:b6:8c:ea:f5:ba:b4:a5:ae:6d:9f: cf:dc:f4:40:ae:e1:bc:bd:cb:aa:bb:4c:f4:0c:9a: 02:75:66:ab:02:0e:3b:c1:a7:07:a5:5b:bd:9d:b6: a2:7c:ca:eb:b2:20:0c:63:37:fe:d0:42:cc:0c:86: b8:fa:c1:94:bd:4f:3a:fa:33:80:a7:67:f2:82:32: c4:76:8f:29:95:d5:09:22:6b:63:fb:c0:d4:c7:74: 0a:9c:e5:be:af:d3:98:8b:fb:5b:53:a3:27:62:57: 10:3b:61:5c:a1:d7:21:d5:85:df:f4:77:c4:81:4f: 05:61:ff:7a:40:04:bd:d1:e6:91:a1:f8:44:2e:d5: 11:8b:f3:54:52:a7:e5:d3:1c:86:a5:eb:ba:7d:6e: da:f5:76:f8:77:94:1b:27:d4:5c:7e:2a:a2:11:87: 61:25:46:6e:c5:a6:a2:9f:8c:87:52:d3:c4:62:ef: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.92.0/22 193.163.48.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43534 Signature Algorithm: sha256WithRSAEncryption a6:59:43:33:c8:0f:89:f6:ab:e2:8f:7e:0f:69:7e:87:e6:4a: 7a:60:eb:d2:36:55:b6:78:d1:2b:e4:fa:68:41:9a:5e:15:60: d0:59:cc:2f:ec:6a:59:12:24:c2:d1:3f:82:88:f5:08:0d:d7: a2:a4:a9:6f:a2:21:bf:f1:da:7a:93:55:e7:fe:d6:2e:03:09: ba:73:68:38:8b:3d:a2:b0:d6:6d:fb:50:4b:d6:a3:a1:e7:65: 24:89:b4:80:bb:20:d5:e2:d8:0b:e8:fc:1a:c5:93:03:3b:25: 33:ad:a2:8e:a9:9b:e5:1d:3f:9b:da:39:b7:48:cd:dd:97:aa: 0f:8e:e9:a4:7a:0c:8e:11:7e:f6:23:1d:f9:d9:c0:6e:77:42: 53:1c:6b:c3:e1:bb:92:19:a3:12:cd:9a:fa:d4:a1:fc:1c:c6: 81:ef:1c:27:a7:d9:ab:59:d9:e1:e3:a9:05:b0:9a:e5:61:b5: b3:91:03:24:8c:1b:96:d5:76:3b:4e:ad:22:52:8c:40:c2:cd: 00:8e:84:52:2b:39:17:99:64:d3:2d:a9:75:18:c3:31:5f:da: 56:7d:0f:a9:f6:28:77:f1:38:37:9f:21:f5:12:1c:60:bf:b3: c0:8a:1e:93:97:b5:a6:5f:92:44:e1:a8:ff:80:de:c6:e5:a0: 5a:50:90:a8 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5fsKwST0C4h5GXpyPWO/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODJiNTRiMDVhZjVlM2U4NzQzZTdiZjRhZjQxZWE2MjJiYjA5NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt68bfcR/9Kpoe8vcW4YwXr/43AQw S9Ux91NRihfhz7v0eyWCzHSXntx/XM4yAZpo1LUm+f6QBSkilJmzrnGt6hA6BB1z oQFC73vWrBO+3LaM6vW6tKWubZ/P3PRAruG8vcuqu0z0DJoCdWarAg47wacHpVu9 nbaifMrrsiAMYzf+0ELMDIa4+sGUvU86+jOAp2fygjLEdo8pldUJImtj+8DUx3QK nOW+r9OYi/tbU6MnYlcQO2Fcodch1YXf9HfEgU8FYf96QAS90eaRofhELtURi/NU Uqfl0xyGpeu6fW7a9Xb4d5QbJ9RcfiqiEYdhJUZuxaain4yHUtPEYu9WSQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFAgrVLBa9ePodD579K9B6mIrsJQRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzA5MDBh MS05MjRmLTQ5NmEtYWQ0Yy0xOTUwNjA2NzFhMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMDkwMGEx LTkyNGYtNDk2YS1hZDRjLTE5NTA2MDY3MWEwYy8xL0NDdFVzRnIxNC1oMFBudjBy MEhxWWl1d2xCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8VcAwQAwaMwMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCqDjANBgkqhkiG9w0BAQsFAAOCAQEApllDM8gPifar4o9+D2l+h+ZK emDr0jZVtnjRK+T6aEGaXhVg0FnML+xqWRIkwtE/goj1CA3XoqSpb6Ihv/HaepNV 5/7WLgMJunNoOIs9orDWbftQS9ajoedlJIm0gLsg1eLYC+j8GsWTAzslM62ijqmb 5R0/m9o5t0jN3ZeqD47ppHoMjhF+9iMd+dnAbndCUxxrw+G7khmjEs2a+tSh/BzG ge8cJ6fZq1nZ4eOpBbCa5WG1s5EDJIwbltV2O06tIlKMQMLNAI6EUis5F5lk0y2p dRjDMV/aVn0PqfYod/E4N58h9RIcYL+zwIoek5e1pl+SROGo/4DexuWgWlCQqA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:07 2026 by rpki-client