This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer File: _CgqeUs_erTNb-tsX9az0lavxGE.cer (raw, json) Hash identifier: bdEH25ja5hddWeBGPg+UsrlAcRhMV6GBAD14dGZexII= Subject key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C123C045671D5E627026B8BF17226CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.144.236.0/22 IP: 2a07:4400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3c:04:56:71:d5:e6:27:02:6b:8b:f1:72:26:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:c0:81:0a:f7:0e:2d:a5:40:69:8f:8a:7c: 88:a0:4b:6a:20:93:d6:09:64:10:e4:3e:f1:b5:0e: 41:1e:5b:34:4b:c4:3f:6e:b7:9e:bb:78:3a:44:54: 8c:37:40:84:a1:65:05:ed:aa:1b:77:d2:b6:37:7e: ad:1d:6d:1c:ef:7d:b4:a0:5e:f6:ce:ef:3a:0c:49: d7:64:24:97:98:85:0f:df:70:bf:0f:54:6c:f0:5e: b6:e5:59:35:6e:da:50:a7:69:a8:12:67:2d:b9:b1: 2e:e9:2b:b5:e5:46:d0:27:49:84:9b:f5:15:52:c1: 46:61:78:2f:8e:57:da:5a:1a:17:f7:10:7a:51:f9: cc:fd:b6:33:6f:c6:e4:32:7c:dc:22:f8:02:fd:1f: 61:37:9f:2a:4e:25:d8:37:95:39:2e:ae:a4:cf:45: ac:12:ce:8f:e7:5e:bb:70:44:dc:f3:8f:c2:fb:51: dc:ff:b2:41:bd:ef:b2:df:c9:a0:75:07:ae:ba:eb: 34:c5:20:0d:da:25:ac:6f:73:3a:ea:83:b1:0d:ee: bd:69:a7:07:f2:f8:50:92:f1:af:bf:c9:86:08:84: 96:c3:06:c9:fa:92:91:3e:28:ac:9e:27:75:92:cd: f1:44:57:ce:8d:a4:8c:64:a0:eb:dc:5f:12:56:a6: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.236.0/22 IPv6: 2a07:4400::/29 Signature Algorithm: sha256WithRSAEncryption 00:2a:c6:78:41:47:43:fc:1a:63:4e:6d:b9:91:d6:d7:bd:cd: 46:54:e6:93:79:1d:27:90:49:1a:64:79:c8:64:83:0d:03:23: f6:18:f0:90:f0:20:b1:ac:46:4c:da:34:5a:1e:20:b3:94:ca: 8f:25:5f:d9:51:16:18:b5:a9:7b:ea:ef:f2:0d:20:e7:58:7f: e7:ff:f7:20:63:f9:cc:af:23:6b:c5:9e:88:d2:74:7d:a7:27: b6:4e:a8:40:51:92:3f:78:d2:01:10:b5:97:63:af:1e:a0:80: ec:d0:b4:fb:36:43:a9:7b:7a:f6:4d:7d:87:29:af:c6:96:1b: 4d:70:ee:9f:29:fd:38:a2:b0:bd:42:51:c1:f9:1e:2c:e5:8f: 1a:1e:39:06:c5:36:98:23:ea:d6:2c:81:b4:83:58:59:34:ae: 10:28:38:6d:e2:ef:e6:e5:1e:3b:24:e6:5a:12:4c:99:6d:f1: 32:43:f3:54:64:d9:95:d5:f8:55:52:5c:66:5f:c5:37:2f:69: a0:e2:57:f0:a4:ee:6d:ad:26:70:fe:18:15:76:71:82:be:b0: 9f:11:52:92:25:14:0b:6d:96:d3:49:56:a5:7c:4b:98:80:a4: 6a:fe:4f:20:da:7e:79:94:37:c5:6d:9d:79:c5:63:6e:03:89: 8e:d2:b4:32 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8EjwEVnHV5icCa4vxcibLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzI4MmE3OTRiM2Y3YWI0Y2Q2ZmViNmM1ZmQ2YjNkMjU2YWZjNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CXAgQr3Di2lQGmPinyIoEtqIJPW CWQQ5D7xtQ5BHls0S8Q/breeu3g6RFSMN0CEoWUF7aobd9K2N36tHW0c7320oF72 zu86DEnXZCSXmIUP33C/D1Rs8F625Vk1btpQp2moEmctubEu6Su15UbQJ0mEm/UV UsFGYXgvjlfaWhoX9xB6UfnM/bYzb8bkMnzcIvgC/R9hN58qTiXYN5U5Lq6kz0Ws Es6P5167cETc84/C+1Hc/7JBve+y38mgdQeuuus0xSAN2iWsb3M66oOxDe69aacH 8vhQkvGvv8mGCISWwwbJ+pKRPiisnid1ks3xRFfOjaSMZKDr3F8SVqbb9QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2U0ODVl MS1hNjVmLTQzZDQtYjU3Mi1kMzMyNmM1OWJjZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvZTQ4NWUx LWE2NWYtNDNkNC1iNTcyLWQzMzI2YzU5YmNkMi8xL19DZ3FlVXNfZXJUTmItdHNY OWF6MGxhdnhHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZDsMA0EAgACMAcDBQMqB0QAMA0GCSqGSIb3 DQEBCwUAA4IBAQAAKsZ4QUdD/BpjTm25kdbXvc1GVOaTeR0nkEkaZHnIZIMNAyP2 GPCQ8CCxrEZM2jRaHiCzlMqPJV/ZURYYtal76u/yDSDnWH/n//cgY/nMryNrxZ6I 0nR9pye2TqhAUZI/eNIBELWXY68eoIDs0LT7NkOpe3r2TX2HKa/GlhtNcO6fKf04 orC9QlHB+R4s5Y8aHjkGxTaYI+rWLIG0g1hZNK4QKDht4u/m5R47JOZaEkyZbfEy Q/NUZNmV1fhVUlxmX8U3L2mg4lfwpO5trSZw/hgVdnGCvrCfEVKSJRQLbZbTSVal fEuYgKRq/k8g2n55lDfFbZ15xWNuA4mO0rQy -----END CERTIFICATE-----Generated at Sat Jan 10 06:02:12 2026 by rpki-client