This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer File: Cani7ovOptW5GcSjPSbZu_mCqEM.cer (raw, json) Hash identifier: 5LxBufiaC1kwGezDzXJWceid7KyKtc2W8XS/xqIqUyw= Subject key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F03690526A14AE63A15F57A3DA1C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201505 IP: 86.48.60.0/22 IP: 86.58.216.0/21 IP: 93.187.69.0/24 IP: 185.187.144.0/22 IP: 2a13:2540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:03:69:05:26:a1:4a:e6:3a:15:f5:7a:3d:a1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:2c:0c:3d:0e:49:ee:d7:9b:50:48:77:36: 18:8d:b2:59:63:6a:5d:26:18:25:cc:b0:5c:1f:2e: 98:b5:74:23:3f:82:6d:8e:6a:21:5b:c6:0d:8e:ca: 03:61:64:0a:04:41:3f:9f:0c:cb:f5:59:fb:94:9f: f1:97:6a:3b:2c:d7:7b:86:14:95:9c:50:da:21:29: d1:04:9e:61:01:ac:88:0a:63:b9:34:15:f2:b6:ad: 5e:90:d5:a8:9f:b8:d7:c1:b1:ab:46:90:73:ed:ee: c2:13:56:ca:e7:3e:d7:7d:84:eb:4b:f9:8e:e4:88: f5:df:24:52:3d:30:12:b5:75:49:06:11:23:1e:3f: 4d:d6:c5:bd:0d:17:1a:a0:17:de:8f:30:88:db:ce: 14:27:d2:66:e4:40:03:cb:09:91:de:f3:e6:73:a0: b8:f8:97:80:55:35:5f:4a:20:73:68:27:f9:5b:e7: 0f:73:a1:a2:76:d3:87:4b:7a:00:e8:9f:70:4c:d3: d7:30:56:f6:e7:83:45:67:e3:56:5e:06:9d:ab:b8: 7b:aa:7f:9f:82:37:67:97:02:c0:04:c2:cc:15:38: 27:84:16:c3:41:9a:01:8a:d3:82:24:15:c4:a4:1f: dc:17:20:12:ea:f1:c6:18:b2:ea:df:fa:38:7b:9e: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.60.0/22 86.58.216.0/21 93.187.69.0/24 185.187.144.0/22 IPv6: 2a13:2540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201505 Signature Algorithm: sha256WithRSAEncryption 2a:ff:a1:03:ba:66:3a:67:75:d7:97:74:2d:b1:0e:a0:f5:a0: 8f:93:f8:ef:5f:5e:0f:41:cd:1d:7f:a4:d7:1a:1c:2f:61:f2: 39:04:71:24:36:d9:12:c0:18:20:71:4d:da:80:8d:2e:5e:3f: 70:58:d7:15:39:75:fa:d2:fb:ca:aa:4e:e1:98:ec:57:68:ea: a7:2b:f3:e4:cb:03:6e:a8:cf:09:72:08:f5:77:49:b6:33:eb: 4e:5a:2c:0f:40:31:93:19:13:12:67:cd:42:3a:ce:6f:01:68: 0a:26:7f:e6:ad:98:a6:4b:f2:95:55:78:95:9e:3b:d2:e6:6f: 6d:4a:30:b9:c5:2c:5e:5a:9b:4a:52:f1:c0:ef:82:fb:1a:fa: b8:6f:9f:fc:29:c0:f1:b5:6c:87:e6:e3:77:c7:ac:c5:a9:a6: 87:67:52:7f:dc:a1:b3:f0:ec:c5:74:40:7d:7c:12:6b:73:4b: dd:29:fc:de:fc:d5:57:6f:91:3a:46:6b:81:07:76:a5:26:33: 11:18:18:4a:a3:b6:8d:e0:e3:61:74:b2:4c:2b:7f:0e:01:12: ba:b1:0c:9d:ae:64:ab:eb:0b:eb:71:9b:43:85:0e:3f:f2:c9: ee:b8:89:0a:f2:af:df:38:3c:f3:ec:0e:fc:ea:71:67:a0:83: 68:72:b2:1a -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5fwNpBSahSuY6FfV6PaHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWE5ZTJlZThiY2VhNmQ1YjkxOWM0YTMzZDI2ZDliYmY5ODJhODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEMsDD0OSe7Xm1BIdzYYjbJZY2pd JhglzLBcHy6YtXQjP4JtjmohW8YNjsoDYWQKBEE/nwzL9Vn7lJ/xl2o7LNd7hhSV nFDaISnRBJ5hAayICmO5NBXytq1ekNWon7jXwbGrRpBz7e7CE1bK5z7XfYTrS/mO 5Ij13yRSPTAStXVJBhEjHj9N1sW9DRcaoBfejzCI284UJ9Jm5EADywmR3vPmc6C4 +JeAVTVfSiBzaCf5W+cPc6GidtOHS3oA6J9wTNPXMFb254NFZ+NWXgadq7h7qn+f gjdnlwLABMLMFTgnhBbDQZoBitOCJBXEpB/cFyAS6vHGGLLq3/o4e56bPwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFAmp4u6LzqbVuRnEoz0m2bv5gqhDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzU4ZDE1 Yi05ZjAyLTQyYzQtYjAyZC1hMDFlZWE2NWZkMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNThkMTVi LTlmMDItNDJjNC1iMDJkLWEwMWVlYTY1ZmQzMy8xL0Nhbmk3b3ZPcHRXNUdjU2pQ U2JadV9tQ3FFTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCVjA8AwQDVjrYAwQAXbtFAwQCubuQMA0EAgAC MAcDBQMqEyVAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMTITANBgkqhkiG9w0B AQsFAAOCAQEAKv+hA7pmOmd115d0LbEOoPWgj5P4719eD0HNHX+k1xocL2HyOQRx JDbZEsAYIHFN2oCNLl4/cFjXFTl1+tL7yqpO4ZjsV2jqpyvz5MsDbqjPCXII9XdJ tjPrTlosD0AxkxkTEmfNQjrObwFoCiZ/5q2YpkvylVV4lZ470uZvbUowucUsXlqb SlLxwO+C+xr6uG+f/CnA8bVsh+bjd8esxammh2dSf9yhs/DsxXRAfXwSa3NL3Sn8 3vzVV2+ROkZrgQd2pSYzERgYSqO2jeDjYXSyTCt/DgESurEMna5kq+sL63GbQ4UO P/LJ7riJCvKv3zg88+wO/OpxZ6CDaHKyGg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:14 2026 by rpki-client