This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer (raw, json) Hash identifier: ou3MRxk11TSQTxBHclTylUN7Z3zUslFRVXYb0ZGRo3E= Subject key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC895332BAD4F124E1BBE0542E421A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16057 IP: 212.78.32.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:95:33:2b:ad:4f:12:4e:1b:be:05:42:e4:21:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:be:e4:84:39:15:91:17:37:b8:35:3d:93: 70:70:14:08:7e:c3:04:0e:22:45:f8:a7:27:9c:2e: fc:55:63:25:0f:b8:58:3a:2e:ed:21:53:b9:11:95: b5:bd:75:e6:1b:51:93:1a:43:c2:a2:83:49:9c:fd: 45:37:88:69:92:d1:47:96:dd:07:23:f4:47:55:ef: 1d:3d:09:f3:98:a7:74:1a:30:0c:34:05:f3:a0:7a: c4:d6:73:c5:10:bb:bc:f7:4f:c7:a0:73:06:1d:8d: b0:00:cf:aa:a2:2c:5c:f3:e2:94:5a:5e:83:2a:9f: 64:6c:9e:9e:c8:23:ca:64:99:a4:10:eb:1e:8f:8a: db:c8:57:d7:2b:1a:ef:bc:bb:6b:63:c8:67:08:c6: 43:10:4c:4b:81:af:1d:11:96:2f:ce:2a:a0:51:65: 2d:de:e3:41:ac:c1:a4:f3:c5:6b:eb:07:b9:6f:00: 7e:46:37:ac:cb:05:07:e4:60:3d:7e:11:d9:32:6a: 41:d9:aa:c6:dd:40:80:14:d4:80:b2:fa:d6:27:e5: 18:e1:1d:9d:a7:d8:6e:f0:85:46:8f:c1:e9:9c:90: 19:67:7a:d5:cd:17:b4:0f:50:06:5e:dd:06:8b:20: c8:ee:2a:4b:3a:48:26:c4:82:10:91:7c:b6:2a:bd: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.78.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16057 Signature Algorithm: sha256WithRSAEncryption 82:f8:d7:f2:f5:99:a9:98:0e:fb:5d:d6:97:ac:64:cf:89:72: 05:43:03:6a:8f:6e:d7:a5:48:84:c6:d3:20:93:c0:bc:7e:f7: 19:4b:b7:31:72:62:2c:d1:95:3a:f8:19:13:06:5b:5b:3a:e7: 03:4a:bc:e0:47:45:81:00:01:d4:30:d4:ae:30:69:0e:fa:16: 9e:fc:71:80:20:bd:8c:d4:d0:36:6f:92:c7:a3:2d:f7:f7:29: 20:1f:52:3c:96:12:45:b8:39:46:47:b2:25:12:5c:6c:1b:ca: 09:3c:c8:c7:93:ce:e2:85:67:b6:b8:89:7e:4b:70:ed:fe:c5: e6:87:c9:b4:75:cc:15:ce:ef:59:ae:73:ad:a3:22:23:11:c9: 44:cd:e6:0c:7d:a6:d6:fc:17:d6:ce:eb:dc:a2:d1:f0:15:3d: 82:21:5b:d0:c3:f8:a5:c8:79:4b:91:62:ef:2b:c2:bd:f8:10: 2b:f3:82:65:ed:d4:12:4e:b9:c8:94:ff:c1:73:74:79:3e:6e: 9b:5f:ec:4e:2c:10:48:d2:9e:28:22:60:9b:68:d3:ea:b7:b2: a2:29:33:b6:15:f8:31:03:93:be:3d:86:d1:ec:14:9f:17:95: 58:b7:e9:17:61:19:18:7a:32:07:15:d9:12:88:30:c5:da:a9: d2:d6:9b:6b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9yJUzK61PEk4bvgVC5CGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjE5MzYyODFiODY3MDdhMDVkNTVhMDFmODhiMmU2NTNkN2IzZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX++5IQ5FZEXN7g1PZNwcBQIfsME DiJF+KcnnC78VWMlD7hYOi7tIVO5EZW1vXXmG1GTGkPCooNJnP1FN4hpktFHlt0H I/RHVe8dPQnzmKd0GjAMNAXzoHrE1nPFELu890/HoHMGHY2wAM+qoixc8+KUWl6D Kp9kbJ6eyCPKZJmkEOsej4rbyFfXKxrvvLtrY8hnCMZDEExLga8dEZYvziqgUWUt 3uNBrMGk88Vr6we5bwB+RjesywUH5GA9fhHZMmpB2arG3UCAFNSAsvrWJ+UY4R2d p9hu8IVGj8HpnJAZZ3rVzRe0D1AGXt0GiyDI7ipLOkgmxIIQkXy2Kr3dEwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFAsZNigbhnB6BdVaAfiLLmU9ez7pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzg1ZWUw Mi02ZjQzLTQ5MjctYWI1ZC1lZDU3YjI0YjQ0NjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvODVlZTAy LTZmNDMtNDkyNy1hYjVkLWVkNTdiMjRiNDQ2NS8xL0N4azJLQnVHY0hvRjFWb0It SXN1WlQxN1B1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQF1E4gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Aj65MA0GCSqGSIb3DQEBCwUAA4IBAQCC+Nfy9ZmpmA77XdaXrGTPiXIFQwNqj27X pUiExtMgk8C8fvcZS7cxcmIs0ZU6+BkTBltbOucDSrzgR0WBAAHUMNSuMGkO+hae /HGAIL2M1NA2b5LHoy339ykgH1I8lhJFuDlGR7IlElxsG8oJPMjHk87ihWe2uIl+ S3Dt/sXmh8m0dcwVzu9ZrnOtoyIjEclEzeYMfabW/BfWzuvcotHwFT2CIVvQw/il yHlLkWLvK8K9+BAr84Jl7dQSTrnIlP/Bc3R5Pm6bX+xOLBBI0p4oImCbaNPqt7Ki KTO2FfgxA5O+PYbR7BSfF5VYt+kXYRkYejIHFdkSiDDF2qnS1ptr -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:54 2026 by rpki-client