This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer File: CO0aVoa6aCicbP5MfDbgN63hHso.cer (raw, json) Hash identifier: nNAFpMnVcPj7eve4I1LAvuGOdhFSwJTuhWQebOTZzMU= Subject key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11848BB46854C12C5D2449E6BE0EE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211003 IP: 185.253.111.0/24 IP: 2a12:1fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:84:8b:b4:68:54:c1:2c:5d:24:49:e6:be:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:0f:23:14:f1:5a:df:be:2d:27:80:d8:6d: e4:26:65:d8:44:4f:6e:8b:17:ad:95:1a:93:a6:e9: 76:63:fa:c3:2a:c9:df:09:da:ff:87:8d:10:03:5f: eb:ce:74:a7:82:04:27:fa:f7:3e:aa:80:67:0b:db: 3f:38:3b:07:46:c8:ab:fb:77:e2:e4:a9:95:c1:aa: 5b:d7:d4:77:7f:f2:71:8b:f3:2a:d8:de:bc:c7:5d: 91:24:cb:0e:a4:19:21:b9:35:f0:55:d5:e7:2b:dc: 82:91:ab:72:60:a7:62:96:51:b9:26:e9:c3:8a:e3: e3:81:08:c8:63:9a:25:88:7d:b2:27:4d:fa:ea:17: 77:58:c6:ce:c0:77:ff:9c:ab:74:98:94:ac:0a:31: 8b:ba:82:80:17:ce:88:e2:9e:81:0c:88:15:57:1d: 6b:54:c5:5f:cb:bc:03:cf:11:3c:07:99:9f:1a:12: 46:09:e9:a5:2a:3a:de:3f:2b:2f:ae:bd:05:64:fb: ef:4d:4d:cc:8b:7d:d0:92:8f:b4:7c:76:1f:fa:8a: 67:0b:e0:69:df:73:25:a0:f0:9a:d0:eb:d2:ea:63: 8d:f4:42:20:76:29:9b:dd:52:a6:d9:1c:41:fb:8a: 27:8a:f1:5b:4e:20:4c:bb:5d:63:56:07:09:a2:0f: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.111.0/24 IPv6: 2a12:1fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211003 Signature Algorithm: sha256WithRSAEncryption 02:6b:4d:5e:8a:09:fc:c3:6a:7a:19:38:05:01:e1:51:38:63: d3:4a:a4:b8:8e:56:ab:b3:18:d8:90:db:47:ad:bb:43:03:22: cb:ac:c6:26:86:26:59:30:71:1d:3d:b3:9b:52:ed:8e:5f:10: 23:4d:55:ff:33:4f:fe:5d:4a:31:d2:a3:ac:34:f5:7b:9d:1b: 37:59:3e:09:4a:b3:cd:e1:d8:d4:be:83:7d:a6:9b:04:99:32: 92:8b:ae:50:46:1f:4d:a9:a4:fa:53:c3:64:37:a7:d7:d2:1e: ba:5e:b6:d0:8e:56:89:15:e8:5e:bb:98:8b:ee:a9:d4:a8:59: 20:8a:be:af:fa:d1:ad:76:c2:10:ae:e5:cf:15:80:2b:76:20: 56:b0:ab:59:e0:d8:9a:7f:6f:84:2c:b7:9a:21:3e:d7:b0:80: 1b:c9:26:1a:8a:a2:7c:cc:f0:89:a5:5b:85:1f:ec:fa:dd:87: 0f:b5:e6:1f:0c:ab:73:89:06:99:72:f2:c3:77:86:8d:a0:07: 82:9e:d3:29:4e:73:4a:28:60:56:c6:51:36:3d:b0:fc:18:76: e4:b3:57:32:e4:a7:f5:15:e2:5d:ee:39:f0:1a:91:68:b2:66: a0:4f:91:2f:d2:aa:26:67:35:d2:d6:d9:ee:e2:82:8d:40:b3: fd:6a:49:de -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EYSLtGhUwSxdJEnmvg7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGVkMWE1Njg2YmE2ODI4OWM2Y2ZlNGM3YzM2ZTAzN2FkZTExZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXYPIxTxWt++LSeA2G3kJmXYRE9u ixetlRqTpul2Y/rDKsnfCdr/h40QA1/rznSnggQn+vc+qoBnC9s/ODsHRsir+3fi 5KmVwapb19R3f/Jxi/Mq2N68x12RJMsOpBkhuTXwVdXnK9yCkatyYKdillG5JunD iuPjgQjIY5oliH2yJ0366hd3WMbOwHf/nKt0mJSsCjGLuoKAF86I4p6BDIgVVx1r VMVfy7wDzxE8B5mfGhJGCemlKjrePysvrr0FZPvvTU3Mi33Qko+0fHYf+opnC+Bp 33MloPCa0OvS6mON9EIgdimb3VKm2RxB+4onivFbTiBMu11jVgcJog9FlQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAjtGlaGumgonGz+THw24Det4R7KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2ZjYjc3 My0xZjViLTQ0MjEtYjFkNC05MGFiNzllN2VlMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmNiNzcz LTFmNWItNDQyMS1iMWQ0LTkwYWI3OWU3ZWUyMy8xL0NPMGFWb2E2YUNpY2JQNU1m RGJnTjYzaEhzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuf1vMA0EAgACMAcDBQMqEh/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4OzANBgkqhkiG9w0BAQsFAAOCAQEAAmtNXooJ/MNq ehk4BQHhUThj00qkuI5Wq7MY2JDbR627QwMiy6zGJoYmWTBxHT2zm1Ltjl8QI01V /zNP/l1KMdKjrDT1e50bN1k+CUqzzeHY1L6DfaabBJkykouuUEYfTamk+lPDZDen 19Ieul620I5WiRXoXruYi+6p1KhZIIq+r/rRrXbCEK7lzxWAK3YgVrCrWeDYmn9v hCy3miE+17CAG8kmGoqifMzwiaVbhR/s+t2HD7XmHwyrc4kGmXLyw3eGjaAHgp7T KU5zSihgVsZRNj2w/Bh25LNXMuSn9RXiXe458BqRaLJmoE+RL9KqJmc10tbZ7uKC jUCz/WpJ3g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:24 2026 by rpki-client