This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer (raw, json) Hash identifier: t/QGFPBVVs/JfIpUqvQV3XUKhyU6a7NqnQBBlkgSpms= Subject key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC7D75159E996E7EBCBF632C4F9AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12759 AS: 214464 IP: 78.153.64.0/19 IP: 185.128.216.0/22 IP: 188.126.160.0/19 IP: 212.16.224.0/19 IP: 2a01:3d8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c7:d7:51:59:e9:96:e7:eb:cb:f6:32:c4:f9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:8b:94:a4:9f:7e:54:3f:f3:c0:00:1b:fc: 67:ec:6e:74:3c:c0:3f:e5:07:bb:78:55:4b:2f:dd: d6:f7:0c:a6:f9:2f:67:85:08:02:74:66:a0:61:4f: a5:da:81:84:4c:86:58:42:ab:65:bf:5d:1e:7f:a5: f3:2b:fb:df:b4:f8:ca:ba:d9:be:78:82:f6:e2:91: 98:89:92:9a:84:3d:34:80:26:b3:3f:9e:2f:90:bf: 28:c9:72:13:af:d6:53:66:ce:50:d3:85:2b:5e:d6: 10:fa:14:af:e3:67:2d:fc:b5:e3:ac:2c:33:bc:71: 3d:9e:0a:14:94:0d:4e:35:81:e6:65:03:9e:56:bc: 41:da:90:db:0a:a0:05:61:63:19:89:e4:42:69:9d: 79:e8:cb:ff:17:a9:95:9a:23:47:9e:48:a6:8d:0c: 3e:00:ec:2e:d7:83:2a:62:b7:f1:27:65:32:1d:e5: 53:29:b1:aa:98:00:90:e3:d1:09:8f:17:80:91:92: 40:44:71:4a:04:04:68:c9:c5:8b:0c:70:2d:1a:10: fc:4b:49:fb:d8:cc:25:e8:b7:12:d8:38:6e:b3:43: 4d:c6:e5:b3:98:f1:6b:ed:6f:41:f5:94:28:cb:b8: 0b:a8:9c:58:7b:92:71:d8:7e:b4:74:00:67:a0:42: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.64.0/19 185.128.216.0/22 188.126.160.0/19 212.16.224.0/19 IPv6: 2a01:3d8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12759 214464 Signature Algorithm: sha256WithRSAEncryption 84:f7:a6:64:e4:46:ff:e4:69:db:16:d6:83:4e:97:e0:d8:ab: 9b:5c:1c:09:99:d6:df:3b:7d:6b:c8:4b:a2:af:36:51:64:3b: ad:1e:8b:ec:57:9e:d5:78:5e:25:ea:93:a4:f3:d2:80:7b:26: 6a:29:d8:cd:85:21:16:87:0f:d8:14:a6:18:ad:2c:13:64:37: 82:02:18:58:73:7b:0f:a4:e4:e6:cf:e0:d4:e5:c9:03:dd:fe: 39:82:02:26:a0:53:48:1d:01:ce:de:2b:dd:88:d9:c9:f7:91: 5d:9c:7a:28:d7:94:80:e8:d9:19:44:68:18:2c:df:d7:79:98: 3b:4b:fb:bb:8a:b6:e5:c8:8f:88:0a:83:a6:c5:85:83:dd:14: 24:78:b9:d0:c7:c4:87:96:2a:dd:3c:b2:bd:5a:f7:d3:ed:f2: fc:8f:81:75:59:7d:06:aa:ed:3c:fb:28:f6:c6:ce:5c:19:fc: a5:51:42:3e:d0:b3:05:2f:c7:43:ea:53:75:64:11:1a:c4:93: 69:eb:33:e5:99:b6:0d:5f:be:1a:ab:11:97:76:01:cd:ae:0f: cc:6b:b9:a8:f9:7e:a5:34:54:19:c1:c9:d4:87:c6:be:8f:4c: 94:6a:05:da:45:c9:1b:44:cb:6f:e6:b2:9e:b2:99:f2:4e:65: 96:e1:9c:a8 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt6WsfXUVnplufry/YyxPmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWNmM2RjY2VhMzE3ZTM1ZTcwNTQxYTQ4YjI1ODZhNGQzMmJkOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8+LlKSfflQ/88AAG/xn7G50PMA/ 5Qe7eFVLL93W9wym+S9nhQgCdGagYU+l2oGETIZYQqtlv10ef6XzK/vftPjKutm+ eIL24pGYiZKahD00gCazP54vkL8oyXITr9ZTZs5Q04UrXtYQ+hSv42ct/LXjrCwz vHE9ngoUlA1ONYHmZQOeVrxB2pDbCqAFYWMZieRCaZ156Mv/F6mVmiNHnkimjQw+ AOwu14MqYrfxJ2UyHeVTKbGqmACQ49EJjxeAkZJARHFKBARoycWLDHAtGhD8S0n7 2Mwl6LcS2Dhus0NNxuWzmPFr7W9B9ZQoy7gLqJxYe5Jx2H60dABnoEKnzQIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFArPPczqMX415wVBpIslhqTTK9lMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzIxYmJm Ny1jYmYyLTQxOTgtYWZjYy00YmU0ZGQ2Y2QyZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjFiYmY3 LWNiZjItNDE5OC1hZmNjLTRiZTRkZDZjZDJlYy8xL0NzODl6T294ZmpYbkJVR2tp eVdHcE5NcjJVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFTplAAwQCuYDYAwQFvH6gAwQF1BDgMA0EAgAC MAcDBQMqAQPYMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAjHXAgMDRcAwDQYJKoZI hvcNAQELBQADggEBAIT3pmTkRv/kadsW1oNOl+DYq5tcHAmZ1t87fWvIS6KvNlFk O60ei+xXntV4XiXqk6Tz0oB7Jmop2M2FIRaHD9gUphitLBNkN4ICGFhzew+k5ObP 4NTlyQPd/jmCAiagU0gdAc7eK92I2cn3kV2ceijXlIDo2RlEaBgs39d5mDtL+7uK tuXIj4gKg6bFhYPdFCR4udDHxIeWKt08sr1a99Pt8vyPgXVZfQaq7Tz7KPbGzlwZ /KVRQj7QswUvx0PqU3VkERrEk2nrM+WZtg1fvhqrEZd2Ac2uD8xruaj5fqU0VBnB ydSHxr6PTJRqBdpFyRtEy2/msp6ymfJOZZbhnKg= -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:02 2026 by rpki-client