This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer File: CRiOI1NxcPsuRX8xLVRflL2d1-4.cer (raw, json) Hash identifier: OK7EKaZXoVJN5JtsJFHkQ9d36FfG8XLpval6faOloyA= Subject key identifier: 09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12B3C706AB16700AC723B1CE287A78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199480 IP: 212.66.192.0/19 IP: 2a03:c540::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b3:c7:06:ab:16:70:0a:c7:23:b1:ce:28:7a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09188e23537170fb2e457f312d545f94bd9dd7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:45:50:45:f2:0c:b9:73:84:2d:f9:41:83: b4:93:87:a9:b3:c7:1c:20:97:84:cc:63:0a:f6:7d: 12:4c:0f:44:b3:60:54:63:29:69:19:a3:de:d4:2d: 26:3a:06:ac:c6:78:67:e1:96:07:93:16:ad:46:c2: 83:cf:e1:a8:15:c3:ae:2a:06:35:8a:b6:f5:e6:5f: 33:40:45:02:64:4a:3e:d4:2c:f8:42:71:c7:66:12: b9:94:e1:ab:12:58:39:40:d3:23:7b:40:13:24:94: da:e3:db:47:77:aa:86:67:78:a4:9f:4e:87:4c:b3: 87:5e:7b:03:83:c5:35:fa:d5:94:1c:a3:95:fc:a5: c9:80:11:57:f7:a7:56:fb:6a:7f:0c:8c:fc:90:a3: 02:d8:f4:ca:65:52:8f:2d:91:0d:13:26:0b:62:e0: 8a:9e:5f:1b:5f:53:e4:9e:54:b6:b9:f7:fd:03:e8: 62:e3:97:75:17:3b:ef:e3:69:a2:11:bc:9e:34:9f: 59:50:da:d3:a8:ab:73:0c:06:9f:b8:a2:81:38:9f: 48:6b:7a:cf:12:1c:34:9f:85:7b:c4:07:d1:05:c1: 73:bc:2c:10:65:1e:3c:fe:c0:de:3a:9e:3d:22:24: e8:06:e2:f8:84:aa:0e:fb:46:5a:cb:9a:38:33:1a: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.192.0/19 IPv6: 2a03:c540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199480 Signature Algorithm: sha256WithRSAEncryption 60:4f:22:23:59:18:1c:53:42:c8:68:45:11:55:a2:c5:93:7e: 8d:8f:4e:cb:68:49:20:54:19:ff:76:84:49:f2:5d:0b:cd:38: 8f:18:fe:39:03:76:ff:d4:c7:35:f2:7a:c9:0d:b1:09:5a:d8: b3:ad:3b:ae:c5:3c:99:07:e3:ca:31:d2:c0:48:c1:0a:b2:70: a0:30:34:41:b6:c7:c3:ad:5e:8a:b8:56:52:a1:fb:e3:88:53: a3:6b:79:3f:f2:e4:96:8f:f8:5f:e8:98:d9:7b:cb:b5:45:af: bd:00:06:46:fb:93:a9:4b:16:fc:ec:a7:19:32:05:da:42:45: db:8d:76:30:d5:2b:45:c2:72:c2:7a:3c:65:db:b1:9a:b7:55: 01:28:1d:2b:ce:38:c2:e3:d8:bc:26:be:06:77:2b:98:e2:64: f5:b9:a1:bb:58:c5:e1:92:fa:a2:46:13:2e:9b:ae:2a:03:07: 3f:8d:78:f9:30:15:1a:62:4b:cc:1c:9d:d1:37:3a:25:9a:17: 34:32:a6:21:02:9e:c3:60:bc:4f:e9:72:e5:f0:03:3b:7e:f0: 89:89:08:b1:53:47:be:74:2f:64:05:31:b7:8b:34:a9:fd:65: d2:e3:21:81:f3:cf:b6:f2:b6:19:f7:5d:d3:67:38:4a:8b:87: e2:4b:16:e5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8ErPHBqsWcArHI7HOKHp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTE4OGUyMzUzNzE3MGZiMmU0NTdmMzEyZDU0NWY5NGJkOWRkN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AdFUEXyDLlzhC35QYO0k4eps8cc IJeEzGMK9n0STA9Es2BUYylpGaPe1C0mOgasxnhn4ZYHkxatRsKDz+GoFcOuKgY1 irb15l8zQEUCZEo+1Cz4QnHHZhK5lOGrElg5QNMje0ATJJTa49tHd6qGZ3ikn06H TLOHXnsDg8U1+tWUHKOV/KXJgBFX96dW+2p/DIz8kKMC2PTKZVKPLZENEyYLYuCK nl8bX1PknlS2uff9A+hi45d1Fzvv42miEbyeNJ9ZUNrTqKtzDAafuKKBOJ9Ia3rP Ehw0n4V7xAfRBcFzvCwQZR48/sDeOp49IiToBuL4hKoO+0Zay5o4Mxq5VQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAkYjiNTcXD7LkV/MS1UX5S9ndfuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzMzOTcw Zi1mYTlhLTRkMTEtOTc2Ni1hODQ0YWFiMDUxMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMzM5NzBm LWZhOWEtNGQxMS05NzY2LWE4NDRhYWIwNTExYy8xL0NSaU9JMU54Y1BzdVJYOHhM VlJmbEwyZDEtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQF1ELAMA0EAgACMAcDBQAqA8VAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLODANBgkqhkiG9w0BAQsFAAOCAQEAYE8iI1kYHFNC yGhFEVWixZN+jY9Oy2hJIFQZ/3aESfJdC804jxj+OQN2/9THNfJ6yQ2xCVrYs607 rsU8mQfjyjHSwEjBCrJwoDA0QbbHw61eirhWUqH744hTo2t5P/Lklo/4X+iY2XvL tUWvvQAGRvuTqUsW/OynGTIF2kJF2412MNUrRcJywno8ZduxmrdVASgdK844wuPY vCa+BncrmOJk9bmhu1jF4ZL6okYTLpuuKgMHP414+TAVGmJLzByd0Tc6JZoXNDKm IQKew2C8T+ly5fADO37wiYkIsVNHvnQvZAUxt4s0qf1l0uMhgfPPtvK2Gfdd02c4 SouH4ksW5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:39 2026 by rpki-client