This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer File: CLFH055Du3X596_0XnvyuDUw-HQ.cer (raw, json) Hash identifier: TMs+Tf3fFkYMzov/6G3cKjDUudZn0UGOd1nzehRu3qo= Subject key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F9193F306E0D9C1CF9459C215099B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25526 IP: 109.197.216.0/21 IP: 193.254.220.0/23 IP: 195.39.242.0/23 IP: 2001:678:b44::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:91:93:f3:06:e0:d9:c1:cf:94:59:c2:15:09:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:da:84:28:55:75:d2:df:84:6c:dd:2b:03: ce:ca:64:3e:89:4b:3b:62:6f:83:a9:64:fa:7b:7d: 56:ae:0d:3a:d7:b2:d6:cb:99:31:7d:a7:cc:b0:b1: ab:85:5b:0c:65:9a:ca:0e:81:fd:05:5d:9d:48:e9: 25:75:de:8a:da:d7:7f:73:4e:59:61:6b:e5:e0:18: 6a:fc:c9:8d:9c:10:a3:47:24:b4:83:8e:e6:af:8a: 37:f3:bf:53:fc:c7:ca:88:6d:62:d7:c8:3c:16:a3: 8a:c7:70:a8:9c:ca:f2:66:84:8f:40:56:fe:41:16: 66:a0:32:3a:0c:cd:35:27:6c:6e:24:53:26:05:21: b2:f3:5f:62:ec:f9:05:4c:4c:fb:4f:25:0f:b0:52: eb:2d:9f:2b:30:f6:e6:36:05:49:9f:d6:bb:25:79: 8f:65:95:68:2d:79:28:e5:0a:75:6e:28:ca:b1:58: 85:c6:39:64:a8:9a:36:0a:e9:a5:34:1e:c2:19:98: 11:9e:f3:03:04:06:c6:60:7b:57:1a:33:81:91:0d: 94:bc:98:39:da:3d:f7:19:29:98:7c:2b:d2:ee:6f: 2c:16:d1:15:f2:4e:a2:96:0e:25:55:70:ab:47:40: 55:21:53:e9:29:f0:03:72:6e:02:a6:13:44:71:dc: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.216.0/21 193.254.220.0/23 195.39.242.0/23 IPv6: 2001:678:b44::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25526 Signature Algorithm: sha256WithRSAEncryption 18:4e:84:88:88:ed:55:6d:6d:ba:5f:a6:f3:78:0e:ad:14:44: 8a:97:9e:b3:dd:3c:f8:d5:3c:db:0e:5b:03:95:7e:c3:4b:1b: 10:4f:ed:4e:ad:43:1b:71:93:aa:e7:00:2e:e9:c1:59:1a:bf: 95:51:e6:4e:0c:fc:65:e2:80:78:4c:6a:0f:15:4c:b0:5c:c8: 03:61:e8:44:20:95:9b:6c:9e:de:48:8d:87:90:87:ae:ca:d9: 21:01:d4:d1:45:50:1f:45:1d:91:c4:f2:11:b8:77:6a:97:13: d3:b4:bb:6b:c5:b2:a9:c3:98:70:71:69:93:40:8f:ba:db:34: eb:30:9c:0f:59:3a:a6:7c:92:34:58:41:70:b7:6b:cc:75:3b: 3f:5c:0c:e8:b8:19:05:60:1c:b5:2f:f3:7a:6e:b4:3f:e4:83: aa:3e:ea:0f:13:b4:e5:c5:e5:8b:67:59:54:7a:1c:ba:96:4a: 00:70:67:51:0f:6e:37:a6:c0:cd:aa:ff:b1:d4:7c:10:ee:05: 3b:63:0c:79:60:c4:ba:b0:17:53:da:5e:a4:ea:28:62:3c:3b: 38:c2:20:5b:cb:49:8f:a9:09:5c:73:e3:69:42:8d:42:8a:96: 86:1e:2b:e8:3e:d1:e9:de:e1:b4:e7:24:ff:7f:6a:b2:e9:59: 95:4a:59:04 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8f5GT8wbg2cHPlFnCFQmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGIxNDdkMzllNDNiYjc1ZjlmN2FmZjQ1ZTdiZjJiODM1MzBmODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHfahChVddLfhGzdKwPOymQ+iUs7 Ym+DqWT6e31Wrg0617LWy5kxfafMsLGrhVsMZZrKDoH9BV2dSOkldd6K2td/c05Z YWvl4Bhq/MmNnBCjRyS0g47mr4o3879T/MfKiG1i18g8FqOKx3ConMryZoSPQFb+ QRZmoDI6DM01J2xuJFMmBSGy819i7PkFTEz7TyUPsFLrLZ8rMPbmNgVJn9a7JXmP ZZVoLXko5Qp1bijKsViFxjlkqJo2CumlNB7CGZgRnvMDBAbGYHtXGjOBkQ2UvJg5 2j33GSmYfCvS7m8sFtEV8k6ilg4lVXCrR0BVIVPpKfADcm4CphNEcdyK7wIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFAixR9OeQ7t1+fev9F578rg1MPh0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzZhYzcz YS02YjVmLTQyMzItOWI4Yy0zMDVlMzNlZjhiMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNmFjNzNh LTZiNWYtNDIzMi05YjhjLTMwNWUzM2VmOGIyOS8xL0NMRkgwNTVEdTNYNTk2XzBY bnZ5dURVdy1IUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQDbcXYAwQBwf7cAwQBwyfyMA8EAgACMAkDBwAg AQZ4C0QwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICY7YwDQYJKoZIhvcNAQELBQAD ggEBABhOhIiI7VVtbbpfpvN4Dq0URIqXnrPdPPjVPNsOWwOVfsNLGxBP7U6tQxtx k6rnAC7pwVkav5VR5k4M/GXigHhMag8VTLBcyANh6EQglZtsnt5IjYeQh67K2SEB 1NFFUB9FHZHE8hG4d2qXE9O0u2vFsqnDmHBxaZNAj7rbNOswnA9ZOqZ8kjRYQXC3 a8x1Oz9cDOi4GQVgHLUv83putD/kg6o+6g8TtOXF5YtnWVR6HLqWSgBwZ1EPbjem wM2q/7HUfBDuBTtjDHlgxLqwF1PaXqTqKGI8OzjCIFvLSY+pCVxz42lCjUKKloYe K+g+0ene4bTnJP9/arLpWZVKWQQ= -----END CERTIFICATE-----Generated at Mon Feb 9 22:38:15 2026 by rpki-client