This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer (raw, json) Hash identifier: LfDuU57+H1OjOY0zB031whJDc8UpSq6NzWEQWIdXEfU= Subject key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C82FF332D496E9ED8038DE97626EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48777 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:82:ff:33:2d:49:6e:9e:d8:03:8d:e9:76:26:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:33:9f:54:96:1c:bc:3b:e8:5c:75:49:9f: 70:c5:ac:4f:3a:31:a4:0f:d7:e3:10:90:8c:6a:88: 31:6d:a0:83:08:43:b2:22:9e:3c:d5:47:c9:43:ac: b2:1c:aa:91:07:b6:f9:32:7e:0a:df:f8:1a:02:27: 2d:58:04:7c:6e:5e:40:5e:9c:b0:42:b5:7e:41:f2: 9d:cf:a2:19:a1:46:b9:64:3b:4e:d6:12:21:4b:57: 18:da:16:cd:02:31:53:53:65:78:d0:f2:49:8f:11: 1c:54:fb:16:5e:49:9d:c7:89:e3:f7:bc:c0:16:44: 4d:7d:c1:30:2f:10:cc:fd:d2:dd:46:bf:d2:95:52: 53:a5:de:7e:21:e0:be:c7:83:7d:b8:0d:e7:ac:ab: 8b:cc:1a:6b:9b:a5:c1:bb:64:9a:fe:69:30:eb:93: 89:1c:4c:45:ce:0f:84:2a:13:f6:d0:6b:e8:b7:2d: cc:10:85:06:72:46:f6:2b:3c:82:ca:d8:70:ea:b2: b5:e1:b4:4b:2a:d0:a7:e2:ac:7b:f3:4d:a8:55:fa: 4b:49:79:8a:5b:8b:fe:1e:48:05:2d:a8:18:14:c5: c0:56:8f:dc:c0:35:64:ac:d1:db:f9:ef:b9:0c:22: 6c:0f:03:b7:34:df:4e:5e:12:fb:dd:1c:ed:5f:bb: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48777 Signature Algorithm: sha256WithRSAEncryption 32:15:c4:f9:72:a7:de:c1:f9:46:40:3b:54:1e:ff:d2:79:a0: d5:e3:30:f1:6e:80:13:92:77:9d:d3:7c:ab:d3:7e:3d:d1:a8: 80:50:28:0d:d8:d1:1e:a6:f9:24:40:6c:e5:87:0e:e4:63:bc: 4c:89:04:4b:12:5a:30:c5:c7:81:c4:78:62:44:0f:cb:d7:f1: a6:3e:51:f0:55:3c:a6:96:fc:1b:0a:27:5b:83:67:11:3f:39: d5:4f:03:a1:cd:68:40:d2:25:e4:88:d5:2d:45:c7:5c:60:c1: 2a:be:79:8a:3d:08:58:a7:7f:73:d6:18:78:71:bd:9a:28:13: 92:d8:02:27:91:8c:37:10:43:5b:af:67:68:3b:bd:6c:f8:15: 8a:3d:db:6e:9a:68:e4:1f:e7:77:45:c4:da:2d:2d:1e:32:73: e5:c6:5b:cc:90:3c:d0:80:ad:0d:0d:c2:08:d0:0c:3a:3b:d3: 57:fd:93:3e:e5:ca:7e:f5:a6:47:2f:af:a3:1c:43:9d:8a:8d: 67:6e:a1:0c:df:e9:5c:77:f4:2f:a7:4d:ba:a6:6b:aa:40:aa: 67:c5:eb:1e:f1:99:b2:41:be:bf:49:05:cd:7a:81:cd:97:5e: 59:f3:fa:96:21:6c:0d:bc:05:90:a2:37:18:f8:e5:04:e3:74: 69:65:eb:a7 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XIL/My1Jbp7YA43pdibuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGYyZWI4ZmIwMmU4N2U3MTg0MzM3YjI0NWFmOTllMzEzM2VmNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyMzn1SWHLw76Fx1SZ9wxaxPOjGk D9fjEJCMaogxbaCDCEOyIp481UfJQ6yyHKqRB7b5Mn4K3/gaAictWAR8bl5AXpyw QrV+QfKdz6IZoUa5ZDtO1hIhS1cY2hbNAjFTU2V40PJJjxEcVPsWXkmdx4nj97zA FkRNfcEwLxDM/dLdRr/SlVJTpd5+IeC+x4N9uA3nrKuLzBprm6XBu2Sa/mkw65OJ HExFzg+EKhP20Gvoty3MEIUGckb2KzyCythw6rK14bRLKtCn4qx7802oVfpLSXmK W4v+HkgFLagYFMXAVo/cwDVkrNHb+e+5DCJsDwO3NN9OXhL73RztX7uv0wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFAjy64+wLofnGEM3skWvmeMTPvUkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0Lzk1ZWE0 OC1jM2VkLTRlNDctYmQxMi02Y2RlY2Q0ZGI4YjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOTVlYTQ4 LWMzZWQtNGU0Ny1iZDEyLTZjZGVjZDRkYjhiNS8xL0NQTHJqN0F1aC1jWVF6ZXlS YS1aNHhNLTlTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC+iTANBgkqhkiG9w0BAQsFAAOCAQEAMhXE+XKn3sH5 RkA7VB7/0nmg1eMw8W6AE5J3ndN8q9N+PdGogFAoDdjRHqb5JEBs5YcO5GO8TIkE SxJaMMXHgcR4YkQPy9fxpj5R8FU8ppb8GwonW4NnET851U8Doc1oQNIl5IjVLUXH XGDBKr55ij0IWKd/c9YYeHG9migTktgCJ5GMNxBDW69naDu9bPgVij3bbppo5B/n d0XE2i0tHjJz5cZbzJA80ICtDQ3CCNAMOjvTV/2TPuXKfvWmRy+voxxDnYqNZ26h DN/pXHf0L6dNuqZrqkCqZ8XrHvGZskG+v0kFzXqBzZdeWfP6liFsDbwFkKI3GPjl BON0aWXrpw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:17 2026 by rpki-client