This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer (raw, json) Hash identifier: XFTS+Pxokzx+hWprP4o5cTZau8BQOHGxrD5kCIM4BN0= Subject key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED14485ABCC9CB419CBC0AF73FB4F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206772 IP: 185.158.124.0/22 IP: 2a07:ad40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:14:48:5a:bc:c9:cb:41:9c:bc:0a:f7:3f:b4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08818cbb0f9d1e573773d791138a0122f28bec56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:b0:6f:76:54:6a:de:07:b7:49:5d:c9:cc: e6:5b:84:5e:15:ae:8c:d0:25:90:7e:93:db:ca:5d: 9a:63:6d:62:90:ab:8b:f0:ac:60:9b:89:d5:3d:ff: fe:8f:2e:3b:17:fd:36:95:bd:9c:6e:2a:48:60:31: 1a:32:c0:91:db:85:ac:15:58:4a:b4:1a:67:ea:b5: a4:41:96:d4:5d:bd:13:ff:e5:71:f0:f6:79:45:f2: ba:42:0a:bf:44:46:5c:a9:6d:aa:0c:c1:1b:b3:3c: 1e:1c:a2:bd:0d:09:56:4b:b5:19:9b:07:91:86:7f: 45:80:9f:bd:ed:25:9e:83:b1:e3:fc:bd:a8:99:61: 0a:b3:8b:d2:1d:e3:a5:73:e8:dd:01:55:3d:a4:37: 1c:9e:86:6f:e7:78:ff:10:16:02:5a:a6:dd:2d:ce: 46:63:48:3c:d7:5a:88:de:ce:ec:62:a3:af:30:1e: a0:1c:53:3e:8e:6d:68:e4:6e:56:4a:0c:43:ef:6f: e4:c4:ec:36:30:99:0c:dc:4a:26:49:88:71:a8:e8: 14:0e:04:bf:23:4c:d9:49:61:df:18:32:bc:09:87: f7:46:21:cf:f7:16:02:d8:53:9d:1a:b7:91:d3:34: dd:1a:41:27:b4:cf:5e:3c:5f:35:dd:b5:74:6c:e8: c9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.124.0/22 IPv6: 2a07:ad40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206772 Signature Algorithm: sha256WithRSAEncryption 7b:87:bf:6e:8a:61:ff:3c:92:c7:87:a9:43:c6:4d:0d:08:f3: 57:f1:f4:d7:df:b4:c2:c9:cb:f6:a7:52:70:03:5e:01:ef:f1: 33:0c:da:75:8a:58:36:91:bf:9a:38:49:b7:c7:1c:8b:e6:d1: 48:c1:49:ea:3e:d1:dc:59:c8:95:6e:b6:ae:11:ab:8c:85:b3: f2:08:d7:a7:5a:44:12:20:84:c6:5b:ee:5d:01:4f:0f:e1:4b: e0:f5:c8:ed:9d:ea:97:39:58:93:09:07:0b:00:9f:d0:77:2a: 50:77:a2:84:1a:5b:22:75:ef:54:88:72:5b:2d:dd:c8:aa:2b: 6d:21:ab:06:76:dc:6d:ba:29:e3:7a:79:d5:79:bd:d6:6f:4b: 79:18:14:f0:5c:b4:49:16:92:9f:15:42:0f:17:0b:bf:33:4a: 28:bf:9a:93:39:46:b6:04:41:ab:a3:ac:9f:ea:8f:96:16:05: bb:d2:b5:71:c1:d1:50:21:7e:14:a7:88:90:5e:a9:47:3e:36: 06:17:3e:bb:ee:55:41:9b:d4:cb:08:65:6d:cc:c6:8a:7b:6f: c0:34:81:bd:d2:7f:d4:73:a7:30:99:1b:1b:2f:3b:39:41:7a: 63:cf:10:08:5f:f7:db:1f:b7:00:33:00:8d:25:c3:a0:31:b1: 66:b6:e2:4b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57RRIWrzJy0GcvAr3P7TwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODgxOGNiYjBmOWQxZTU3Mzc3M2Q3OTExMzhhMDEyMmYyOGJlYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfSwb3ZUat4Ht0ldyczmW4ReFa6M 0CWQfpPbyl2aY21ikKuL8Kxgm4nVPf/+jy47F/02lb2cbipIYDEaMsCR24WsFVhK tBpn6rWkQZbUXb0T/+Vx8PZ5RfK6Qgq/REZcqW2qDMEbszweHKK9DQlWS7UZmweR hn9FgJ+97SWeg7Hj/L2omWEKs4vSHeOlc+jdAVU9pDccnoZv53j/EBYCWqbdLc5G Y0g811qI3s7sYqOvMB6gHFM+jm1o5G5WSgxD72/kxOw2MJkM3EomSYhxqOgUDgS/ I0zZSWHfGDK8CYf3RiHP9xYC2FOdGreR0zTdGkEntM9ePF813bV0bOjJxwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAiBjLsPnR5XN3PXkROKASLyi+xWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzJlMDUz Ni00Y2EyLTRhZmUtODNkNi0zMzZlODc0ZjNkODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMmUwNTM2 LTRjYTItNGFmZS04M2Q2LTMzNmU4NzRmM2Q4Ny8xL0NJR011dy1kSGxjM2M5ZVJF NG9CSXZLTDdGWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ58MA0EAgACMAcDBQMqB61AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMntDANBgkqhkiG9w0BAQsFAAOCAQEAe4e/boph/zyS x4epQ8ZNDQjzV/H019+0wsnL9qdScANeAe/xMwzadYpYNpG/mjhJt8cci+bRSMFJ 6j7R3FnIlW62rhGrjIWz8gjXp1pEEiCExlvuXQFPD+FL4PXI7Z3qlzlYkwkHCwCf 0HcqUHeihBpbInXvVIhyWy3dyKorbSGrBnbcbbop43p51Xm91m9LeRgU8Fy0SRaS nxVCDxcLvzNKKL+akzlGtgRBq6Osn+qPlhYFu9K1ccHRUCF+FKeIkF6pRz42Bhc+ u+5VQZvUywhlbczGintvwDSBvdJ/1HOnMJkbGy87OUF6Y88QCF/32x+3ADMAjSXD oDGxZrbiSw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:37 2026 by rpki-client