This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer File: Co59_NIAyF6zysZvhZtxEKuZsQo.cer (raw, json) Hash identifier: wFFjS3pUdGKS2xnzC+HyI8rOxjR6fIDFa+37XP7exq4= Subject key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385CB42EC39FFCDF11166B1AEF9652 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196740 IP: 109.207.112.0/20 IP: 193.53.83.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5c:b4:2e:c3:9f:fc:df:11:16:6b:1a:ef:96:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:47:7e:80:85:02:fc:67:8c:17:9e:29:f3: d2:3c:da:da:20:16:6b:eb:82:4d:f0:5d:83:bf:56: d9:3a:4f:da:10:c4:ba:89:d7:c1:57:c9:6f:ef:0a: c7:76:9c:eb:f7:68:9b:37:ea:56:f0:21:cf:81:7e: 78:d7:49:a0:ff:d4:44:96:64:34:18:bc:d0:29:2f: 2c:44:e9:39:6c:36:9a:22:d7:fb:2a:c5:7d:04:15: 0d:6f:f2:fc:69:7a:93:41:ec:79:11:79:72:2d:cb: da:d6:f5:6d:f5:92:4d:51:04:0f:61:0e:8f:69:45: 0d:1b:ba:8e:05:1d:4e:43:a1:8c:57:f4:90:d3:59: 9d:c2:28:40:c4:1e:2f:1d:25:e2:c5:67:1c:e5:66: 13:fa:c9:25:a8:ac:fe:7f:c8:b6:ec:31:77:ad:41: ab:29:57:12:92:ac:3b:76:28:a5:1d:b6:b7:33:57: a2:b1:7d:f6:29:26:76:17:ed:cd:60:63:fe:40:bd: c3:0e:c6:99:81:43:fd:a4:65:2d:ba:ed:fc:d2:a1: db:d8:86:a8:9b:ec:e9:b2:d7:87:57:4b:e0:56:27: c0:32:97:64:e3:2c:c5:67:e1:39:3a:5c:c9:0e:70: d7:91:05:b9:ce:8b:dd:73:70:6c:a2:04:e5:7d:ea: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.207.112.0/20 193.53.83.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196740 Signature Algorithm: sha256WithRSAEncryption 80:44:17:bd:b3:94:92:27:9e:5b:0c:9b:d1:28:40:42:d5:26: 7d:85:a0:d1:89:dc:55:5e:7a:26:9a:76:22:e9:21:b6:b7:29: 7b:e8:87:15:3f:1b:28:3c:87:4a:95:6e:db:db:d1:73:7a:20: 20:e8:ab:eb:54:15:55:d8:b6:19:f3:d2:c8:bc:e4:fb:71:7f: ff:a7:39:94:43:1a:cf:a8:9a:b0:73:16:1f:12:3f:02:e3:c0: 56:b1:8f:98:00:49:44:76:a5:1f:a7:2c:b4:52:3f:e5:7f:54: de:00:ad:c9:60:16:51:ac:90:c6:b1:13:e1:17:1e:20:ec:06: 60:d6:fa:27:a3:a3:8f:e7:49:69:2a:4e:82:92:07:88:d5:27: 1c:fd:3f:81:d5:67:8a:69:a5:ff:b6:e8:98:aa:73:98:a5:20: 22:c0:ed:06:c4:a6:e0:a1:9c:33:2a:84:61:59:e5:28:df:61: 2b:63:47:05:d9:4f:d1:2e:fe:c2:f2:14:1d:26:02:5f:de:1f: 2d:69:69:63:64:a6:5d:d5:88:65:1f:05:79:d2:93:4e:8a:d6: bc:83:ab:5f:a7:ed:2a:f8:a1:ca:ff:ad:44:47:7d:5e:d7:f9: 0d:7b:5a:51:06:eb:ef:f1:18:60:cc:27:20:d8:71:a5:60:3e: f7:f4:94:ad -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+OFy0LsOf/N8RFmsa75ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYThlN2RmY2QyMDBjODVlYjNjYWM2NmY4NTliNzExMGFiOTliMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIFHfoCFAvxnjBeeKfPSPNraIBZr 64JN8F2Dv1bZOk/aEMS6idfBV8lv7wrHdpzr92ibN+pW8CHPgX5410mg/9RElmQ0 GLzQKS8sROk5bDaaItf7KsV9BBUNb/L8aXqTQex5EXlyLcva1vVt9ZJNUQQPYQ6P aUUNG7qOBR1OQ6GMV/SQ01mdwihAxB4vHSXixWcc5WYT+sklqKz+f8i27DF3rUGr KVcSkqw7diilHba3M1eisX32KSZ2F+3NYGP+QL3DDsaZgUP9pGUtuu380qHb2Iao m+zpsteHV0vgVifAMpdk4yzFZ+E5OlzJDnDXkQW5zovdc3BsogTlferAWQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFAqOffzSAMhes8rGb4WbcRCrmbEKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzBmOWVm Zi1iNjA4LTQxZGYtOTFkNC1hNDdlYjkzMjk1OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMGY5ZWZm LWI2MDgtNDFkZi05MWQ0LWE0N2ViOTMyOTU5Ny8xL0NvNTlfTklBeUY2enlzWnZo WnR4RUt1WnNRby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQEbc9wAwQAwTVTMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMAhDANBgkqhkiG9w0BAQsFAAOCAQEAgEQXvbOUkieeWwyb0ShAQtUm fYWg0YncVV56Jpp2Iukhtrcpe+iHFT8bKDyHSpVu29vRc3ogIOir61QVVdi2GfPS yLzk+3F//6c5lEMaz6iasHMWHxI/AuPAVrGPmABJRHalH6cstFI/5X9U3gCtyWAW UayQxrET4RceIOwGYNb6J6Ojj+dJaSpOgpIHiNUnHP0/gdVnimml/7bomKpzmKUg IsDtBsSm4KGcMyqEYVnlKN9hK2NHBdlP0S7+wvIUHSYCX94fLWlpY2SmXdWIZR8F edKTTorWvIOrX6ftKvihyv+tREd9Xtf5DXtaUQbr7/EYYMwnINhxpWA+9/SUrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:30 2026 by rpki-client