This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer File: CVi1S_7piWxK2n3Bizt_lxnaBGs.cer (raw, json) Hash identifier: eFGEdwFC9x03yS7iub6OcBpfPqFaq9jxHJC9GP8F5yU= Subject key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11D382FF7124AA7446F4879EB0CF81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.0.237.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d3:82:ff:71:24:aa:74:46:f4:87:9e:b0:cf:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:32:e5:02:2d:3f:f4:d4:a3:2f:cc:8d:97: 60:5d:d2:69:3d:8a:41:b2:30:c6:0b:07:5a:77:18: 7a:61:6a:76:65:82:e9:47:8d:d4:6f:7c:18:40:33: 9b:9b:a1:c9:29:6d:96:f6:c6:dc:21:fd:73:63:b4: 2d:67:ee:7e:2e:b0:e1:01:21:c1:da:4a:d4:f7:e6: 2e:95:cf:bb:e0:9b:25:c1:e6:cf:f5:72:c1:af:5a: 70:36:f4:f2:08:e5:83:52:53:af:20:23:b9:50:2a: 8b:34:c6:f1:30:09:9b:7d:9a:79:69:3c:a2:ef:ce: 51:22:b3:48:a4:cd:b4:6b:b1:b9:d9:09:c4:1e:55: cb:1f:a6:0d:ce:be:49:97:bf:49:bb:8c:a4:5e:fe: 1f:fd:e3:be:93:50:87:e8:30:80:be:eb:29:d1:84: 81:62:a3:06:77:59:36:4a:96:61:3f:38:c8:25:d2: c2:7b:d9:ea:8a:4f:5a:75:a0:37:bd:64:3d:4e:af: 5e:cb:c4:94:38:88:17:0d:47:82:fa:44:d7:99:81: a0:ef:73:a5:ff:2a:c2:c5:49:70:19:b7:40:18:39: 10:0a:52:dd:97:44:54:ab:d1:f0:fe:87:85:d9:7d: 55:31:75:18:c6:5c:94:53:fb:ac:f8:a5:7c:fc:4e: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.237.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:84:78:6d:ce:6f:d7:97:8b:a9:9a:5e:62:52:a6:39:b4:ca: 61:b7:44:5d:fa:1a:ea:7c:db:b9:6a:77:ba:aa:5f:6c:45:db: ba:f0:fa:ca:fb:34:18:68:87:31:9b:7f:29:6a:dc:c2:92:ed: 57:7c:96:95:cd:a4:a6:96:8e:cf:09:e0:44:1e:1d:2d:c8:99: 9e:9d:c2:f9:00:94:db:ce:56:59:97:3e:88:32:9d:44:3e:7b: e2:e1:40:9f:8e:e2:a4:c5:79:9c:a6:a1:15:24:f0:4c:89:b8: ae:93:e5:d3:98:8e:03:df:7e:52:2c:b4:48:d6:53:54:a1:cc: 01:34:5b:95:7f:e1:02:d5:e7:e8:da:e8:6b:de:56:02:8c:7f: 0f:5f:5c:81:91:d5:46:eb:95:b6:d5:66:2d:a7:07:db:bc:90: 9b:31:73:de:78:c9:54:53:4c:a4:4a:06:85:25:07:5c:e1:f6: 15:c4:a8:4b:35:0a:bc:97:28:f0:ea:b4:08:28:3a:38:5b:7e: 68:03:e2:71:a2:48:81:38:7b:07:d5:95:45:c9:14:b8:cf:4c: e1:c1:8f:45:28:10:41:a0:c6:67:5a:4c:ab:4e:6d:b3:42:b3: 6e:c6:c8:a2:6c:2f:97:1a:c3:83:5b:a9:33:8d:85:48:ea:64: 08:a0:8b:b7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EdOC/3EkqnRG9IeesM+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTU4YjU0YmZlZTk4OTZjNGFkYTdkYzE4YjNiN2Y5NzE5ZGEwNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsusy5QItP/TUoy/MjZdgXdJpPYpB sjDGCwdadxh6YWp2ZYLpR43Ub3wYQDObm6HJKW2W9sbcIf1zY7QtZ+5+LrDhASHB 2krU9+Yulc+74JslwebP9XLBr1pwNvTyCOWDUlOvICO5UCqLNMbxMAmbfZp5aTyi 785RIrNIpM20a7G52QnEHlXLH6YNzr5Jl79Ju4ykXv4f/eO+k1CH6DCAvusp0YSB YqMGd1k2SpZhPzjIJdLCe9nqik9adaA3vWQ9Tq9ey8SUOIgXDUeC+kTXmYGg73Ol /yrCxUlwGbdAGDkQClLdl0RUq9Hw/oeF2X1VMXUYxlyUU/us+KV8/E4XxwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAlYtUv+6YlsStp9wYs7f5cZ2gRrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2E2MGY4 Ni04Yjk0LTQxMGEtYmZkMS1mZjRjNzE4MzAyNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvYTYwZjg2 LThiOTQtNDEwYS1iZmQxLWZmNGM3MTgzMDI0Zi8xL0NWaTFTXzdwaVd4SzJuM0Jp enRfbHhuYUJHcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQDtMA0GCSqGSIb3DQEBCwUAA4IBAQAvhHht zm/Xl4upml5iUqY5tMpht0Rd+hrqfNu5ane6ql9sRdu68PrK+zQYaIcxm38patzC ku1XfJaVzaSmlo7PCeBEHh0tyJmencL5AJTbzlZZlz6IMp1EPnvi4UCfjuKkxXmc pqEVJPBMibiuk+XTmI4D335SLLRI1lNUocwBNFuVf+EC1efo2uhr3lYCjH8PX1yB kdVG65W21WYtpwfbvJCbMXPeeMlUU0ykSgaFJQdc4fYVxKhLNQq8lyjw6rQIKDo4 W35oA+JxokiBOHsH1ZVFyRS4z0zhwY9FKBBBoMZnWkyrTm2zQrNuxsiibC+XGsOD W6kzjYVI6mQIoIu3 -----END CERTIFICATE-----Generated at Tue Jan 27 02:11:27 2026 by rpki-client