This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer File: CPyf1Et5SoQuKacYi0qMbkcuHVA.cer (raw, json) Hash identifier: 5a7FbrP2YsCQNLKo8DIQvfVt5QljzRSeMW+X6qem6RQ= Subject key identifier: 08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE5FD2BC11D4B676C7E67195BD012B730 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 13:55:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8388 IP: 193.218.84.0 -- 193.218.93.255 IP: 194.63.240.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:fd:2b:c1:1d:4b:67:6c:7e:67:19:5b:d0:12:b7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 13:55:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:62:e5:2d:33:a9:81:bc:9b:83:a0:f8:79: ce:87:78:b7:92:b3:cb:c2:69:0f:01:c8:6f:19:b0: f4:84:85:fe:b1:26:4b:35:bf:2a:50:f7:c5:d8:cd: 21:34:1b:34:7f:19:33:dc:c3:90:5c:fd:47:dc:0d: 4b:92:b7:8d:26:b8:65:53:29:e2:38:ce:78:fc:65: 8f:4a:75:8c:fd:7e:79:21:44:db:29:e8:6a:a1:d2: d8:49:e8:fd:11:d8:a7:0b:14:dd:78:14:42:13:c5: 0a:34:1a:9b:a8:33:60:d6:12:ec:e6:9d:bc:07:ee: dd:4b:9d:48:b9:56:87:a7:b3:ac:56:38:fa:ff:99: 94:80:f7:71:a3:ac:cc:c4:75:52:f3:46:04:62:42: 77:68:6d:ea:26:da:3b:0f:7b:bb:25:2b:89:56:85: 8f:2b:ff:61:3e:5a:77:d7:83:88:0b:e5:54:48:20: 14:36:b4:72:78:46:68:5e:4f:4f:70:a9:76:dd:c9: 68:26:a0:0d:04:10:12:75:59:55:76:0e:9c:e4:66: 14:ec:73:d9:fe:04:85:51:e6:4d:af:93:6a:d0:fe: 57:99:0b:62:2d:56:e6:3f:fb:88:3e:dc:ad:a3:48: 8a:5e:f0:fd:ee:6f:5d:2a:84:ea:0d:9e:00:49:e4: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.84.0-193.218.93.255 194.63.240.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8388 Signature Algorithm: sha256WithRSAEncryption 3a:6f:98:d1:cb:56:3d:12:74:8b:64:26:d2:49:1d:32:f1:58: 5c:ba:b7:40:48:80:64:3f:68:1b:30:4a:a3:73:1c:41:e5:dc: 23:60:45:74:8a:d3:ea:d2:54:d9:52:7b:aa:ac:0d:fc:4d:06: ad:22:0f:73:97:a0:d0:a5:35:48:96:a9:50:63:e5:82:1c:23: dd:39:de:73:b4:2b:85:4e:09:65:b5:2f:44:2f:62:c1:ae:ba: 41:d8:56:2f:01:27:72:dc:54:89:4e:99:4b:8c:77:81:5e:ae: 7b:03:25:fc:a4:25:68:3a:44:17:d9:c2:03:17:fb:e9:3c:3a: 59:1e:68:51:22:51:4e:d5:a4:e5:78:95:b6:65:34:3d:d8:12: 05:e8:51:f6:b3:6b:56:c7:cd:89:17:3b:bc:58:aa:c2:73:de: 74:d7:40:44:8a:95:3b:6f:37:a6:23:ff:b8:26:7a:5b:95:72: a3:a8:b7:4c:c8:40:90:ae:c0:e5:3d:21:a5:cf:10:48:17:4c: f0:b2:ce:b8:b0:26:ea:f7:91:b8:9d:eb:f4:15:15:b5:d7:07: 34:96:73:d9:13:23:56:d3:b2:7a:56:70:b2:03:3f:b7:66:67: fc:f8:b8:bd:8f:8d:c2:b9:5e:80:36:83:f8:de:c3:d9:4f:2f: 99:e8:da:2f -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZvl/SvBHUtnbH5nGVvQErcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTM1NTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGZjOWZkNDRiNzk0YTg0MmUyOWE3MTg4YjRhOGM2ZTQ3MmUxZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnhi5S0zqYG8m4Og+HnOh3i3krPL wmkPAchvGbD0hIX+sSZLNb8qUPfF2M0hNBs0fxkz3MOQXP1H3A1LkreNJrhlUyni OM54/GWPSnWM/X55IUTbKehqodLYSej9EdinCxTdeBRCE8UKNBqbqDNg1hLs5p28 B+7dS51IuVaHp7OsVjj6/5mUgPdxo6zMxHVS80YEYkJ3aG3qJto7D3u7JSuJVoWP K/9hPlp314OIC+VUSCAUNrRyeEZoXk9PcKl23cloJqANBBASdVlVdg6c5GYU7HPZ /gSFUeZNr5Nq0P5XmQtiLVbmP/uIPtyto0iKXvD97m9dKoTqDZ4ASeRg5wIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFAj8n9RLeUqELimnGItKjG5HLh1QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzQyMTQ0 MC1mODJkLTRmYTctYTA0OS1mMzJiYTQ4NjMzOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvNDIxNDQw LWY4MmQtNGZhNy1hMDQ5LWYzMmJhNDg2MzM5YS8xL0NQeWYxRXQ1U29RdUthY1lp MHFNYmtjdUhWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBALB2lQDBAHB2lwDBAPCP/AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICIMQwDQYJKoZIhvcNAQELBQADggEBADpvmNHLVj0SdItk JtJJHTLxWFy6t0BIgGQ/aBswSqNzHEHl3CNgRXSK0+rSVNlSe6qsDfxNBq0iD3OX oNClNUiWqVBj5YIcI9053nO0K4VOCWW1L0QvYsGuukHYVi8BJ3LcVIlOmUuMd4Fe rnsDJfykJWg6RBfZwgMX++k8OlkeaFEiUU7VpOV4lbZlND3YEgXoUfaza1bHzYkX O7xYqsJz3nTXQESKlTtvN6Yj/7gmeluVcqOot0zIQJCuwOU9IaXPEEgXTPCyzriw Jur3kbid6/QVFbXXBzSWc9kTI1bTsnpWcLIDP7dmZ/z4uL2PjcK5XoA2g/jew9lP L5no2i8= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:37 2026 by rpki-client