This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer File: CiebQDjgAue9ZOUHbRo56-lvI8Q.cer (raw, json) Hash identifier: 5lEVITkTxtELGNf6gN1M1pBKZn8EgbR5z82HaX3jHLM= Subject key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834BEBB584E6B8069F36999DADA0CA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.88.112.0/22 IP: 2a03:7f20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:be:bb:58:4e:6b:80:69:f3:69:99:da:da:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:76:1d:4e:47:ba:0d:84:0d:f2:b0:32:73: d5:f4:b6:12:97:d9:12:f8:ca:91:eb:86:b8:cf:c0: 68:c7:44:c3:ff:8a:b2:60:ba:b1:df:38:33:dc:3d: 9c:70:2a:57:ac:4c:c8:f7:a1:bb:15:8c:27:2f:4d: af:fa:15:68:b2:02:10:82:8f:87:c4:25:4e:74:71: 90:a9:53:0d:50:b2:2c:7e:60:d7:1a:5c:72:7a:d5: 4b:e4:ef:e2:bb:5c:aa:f2:8b:dd:4d:49:c6:20:b8: c2:6b:d6:61:44:da:1b:1c:e6:4a:8b:9a:c9:66:2b: 3c:65:1d:bb:e5:9f:df:f8:c7:d3:2d:d7:d6:b7:48: 39:f8:3c:78:3c:80:76:2d:e2:43:4d:eb:a2:f7:bd: ad:5d:b3:52:81:df:c0:13:cf:f8:cb:02:ec:17:55: af:47:78:5b:7a:f4:2a:c9:d8:0e:25:9f:e8:26:56: 06:06:d7:d0:93:8d:c9:72:bf:9b:9d:89:dd:53:a9: 5b:51:82:3d:be:94:4d:7c:0c:da:5c:4f:ff:9a:21: 26:f3:df:f5:24:01:bf:1e:03:96:ab:1b:6e:47:84: bd:bb:62:5e:76:9c:ba:90:ff:49:40:5c:e0:88:ef: 14:66:39:63:38:e1:2c:b6:00:21:22:08:e9:4e:71: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.112.0/22 IPv6: 2a03:7f20::/29 Signature Algorithm: sha256WithRSAEncryption 73:38:93:5a:2f:bd:83:53:3a:f9:53:7b:9b:02:20:5c:0d:b7: 95:9e:a1:f4:e8:50:f3:88:69:eb:fb:62:fc:81:55:71:48:0f: 16:f8:10:1f:8e:86:2e:52:50:37:2c:f7:6c:9f:67:74:d5:88: 10:a5:22:e2:93:39:ca:99:39:e0:a4:4c:ab:a4:15:74:b0:ce: 29:6a:88:8f:02:1e:ae:aa:48:bf:1e:aa:3b:8f:cd:fd:00:d8: 0b:60:db:e3:da:8d:0b:1f:7e:e2:b7:50:db:19:da:73:4f:73: 36:77:9e:49:af:54:a0:e3:e3:eb:c8:fd:35:d8:b8:c7:01:d3: 10:25:26:11:0d:e2:91:25:b9:7e:da:8f:38:60:fe:99:9f:4e: c1:97:6d:cb:72:28:c0:c6:8e:71:4a:98:fa:73:9c:23:cb:34: 27:fb:77:72:25:31:3a:45:92:8e:66:e1:3e:8b:0c:f6:cd:9a: 30:66:3d:d2:47:ac:c3:cf:c9:15:10:ec:48:98:5a:ba:49:55: 55:11:d0:d7:45:6e:09:75:1c:d5:b4:54:9f:67:bd:7a:86:e4: 2b:97:38:49:f7:80:47:d8:37:16:73:17:be:e3:4d:9f:a1:c7: ea:34:46:5b:63:8b:fb:4d:48:5e:3e:4f:2e:c2:cc:1f:7a:ce: 43:0e:1d:da -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NL67WE5rgGnzaZna2gylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTI3OWI0MDM4ZTAwMmU3YmQ2NGU1MDc2ZDFhMzllYmU5NmYyM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy992HU5Hug2EDfKwMnPV9LYSl9kS +MqR64a4z8Box0TD/4qyYLqx3zgz3D2ccCpXrEzI96G7FYwnL02v+hVosgIQgo+H xCVOdHGQqVMNULIsfmDXGlxyetVL5O/iu1yq8ovdTUnGILjCa9ZhRNobHOZKi5rJ Zis8ZR275Z/f+MfTLdfWt0g5+Dx4PIB2LeJDTeui972tXbNSgd/AE8/4ywLsF1Wv R3hbevQqydgOJZ/oJlYGBtfQk43Jcr+bnYndU6lbUYI9vpRNfAzaXE//miEm89/1 JAG/HgOWqxtuR4S9u2Jedpy6kP9JQFzgiO8UZjljOOEstgAhIgjpTnF2JwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAonm0A44ALnvWTlB20aOevpbyPEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzg1MWQ0 NS0xNDIyLTRiMzEtYmQ4Zi03OTkzYjllMDNiMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvODUxZDQ1 LTE0MjItNGIzMS1iZDhmLTc5OTNiOWUwM2IwZi8xL0NpZWJRRGpnQXVlOVpPVUhi Um81Ni1sdkk4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVhwMA0EAgACMAcDBQMqA38gMA0GCSqGSIb3 DQEBCwUAA4IBAQBzOJNaL72DUzr5U3ubAiBcDbeVnqH06FDziGnr+2L8gVVxSA8W +BAfjoYuUlA3LPdsn2d01YgQpSLikznKmTngpEyrpBV0sM4paoiPAh6uqki/Hqo7 j839ANgLYNvj2o0LH37it1DbGdpzT3M2d55Jr1Sg4+PryP012LjHAdMQJSYRDeKR Jbl+2o84YP6Zn07Bl23LcijAxo5xSpj6c5wjyzQn+3dyJTE6RZKOZuE+iwz2zZow Zj3SR6zDz8kVEOxImFq6SVVVEdDXRW4JdRzVtFSfZ716huQrlzhJ94BH2DcWcxe+ 402focfqNEZbY4v7TUhePk8uwswfes5DDh3a -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:46 2026 by rpki-client