This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer (raw, json) Hash identifier: xBWRqIP0XN7FJYYv+svNkWBB8quPVqBNUv9deZlYmX0= Subject key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA0B52AEF92FCF613A111DD50B7DFAC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 11:23:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203786 AS: 213842 IP: 193.101.12.0/23 IP: 213.232.193.0/24 IP: 2a01:e540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:0b:52:ae:f9:2f:cf:61:3a:11:1d:d5:0b:7d:fa:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 11:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:3c:56:9a:0b:9a:32:8c:de:24:bd:61:2a: 5b:91:bc:08:75:fd:ce:c8:92:75:be:f9:2f:8e:a8: 36:4d:11:3f:f6:a7:40:4b:87:0a:81:12:5a:de:6f: 52:a2:9f:cc:94:df:9b:27:ad:8e:78:10:37:32:b1: 74:b6:5e:7f:a1:1b:f7:40:ca:84:1a:24:de:be:d5: 5b:93:ce:4f:42:2a:00:3e:38:42:16:fd:6e:79:fe: 27:40:ec:c2:f1:40:05:bd:ad:9c:fd:32:15:e9:d9: de:76:3e:22:6f:0c:0c:81:ed:d9:81:a0:5d:00:a8: 2e:d2:ed:fb:6d:f0:e9:6b:be:6c:ae:0d:54:44:32: ef:a0:b3:58:5b:14:28:2a:0f:c4:8e:e8:82:bf:4a: 02:41:69:1f:6c:86:b5:89:47:40:55:4b:f2:83:49: a6:82:90:2b:ef:84:54:78:48:85:fe:0e:82:4f:2f: 5a:8e:f8:61:e0:ad:95:60:86:d6:58:90:af:d9:7c: 81:0c:47:73:4b:b9:16:c9:32:da:8f:e0:28:c9:3b: 56:54:e1:1a:0f:05:d2:4c:dd:6f:2f:cc:0d:fc:c0: 39:65:82:8e:a6:d4:06:87:fb:26:b2:68:52:44:31: b4:34:74:46:02:dd:bc:4e:67:ea:56:de:41:83:db: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.12.0/23 213.232.193.0/24 IPv6: 2a01:e540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203786 213842 Signature Algorithm: sha256WithRSAEncryption 45:3f:8c:cd:38:d4:65:da:a5:e6:72:83:90:16:90:c5:02:79: fd:b1:69:fe:60:55:d3:4f:a0:00:e6:59:e9:de:db:8c:d1:d5: 2a:c7:85:b5:9e:fe:f5:4c:05:ce:48:06:82:0b:cb:8e:ff:c8: 0b:d5:76:e2:eb:c6:0d:0b:17:75:b3:e2:6f:7c:0a:2e:e1:13: 86:a3:6a:7b:4d:43:3b:8e:57:0c:29:69:87:3a:29:d7:c2:b4: 52:a4:5c:63:9f:e8:e2:c2:89:bd:94:2b:b2:10:4f:93:bd:59: 07:5a:ff:5a:18:f5:00:ae:b4:0e:40:21:10:b9:0a:58:2f:f7: e7:d8:85:41:a3:c9:97:36:a0:6b:fa:7a:50:df:71:0b:68:45: 88:7b:f2:bf:8b:e3:22:24:a1:86:a2:f5:f8:df:19:f9:2d:8e: 48:b1:7c:e0:57:be:8f:3c:36:ea:3b:5c:16:db:09:34:0c:8f: 6e:dd:31:68:7e:85:d4:0a:c9:f2:34:1e:09:17:8c:5c:2d:e0: 42:11:50:7b:a4:46:d4:54:56:20:2d:0e:3d:70:e2:78:a9:b5: 93:cf:7d:d9:ba:8f:52:7f:41:16:9f:6f:40:81:bb:9d:28:21: 13:5d:26:9f:85:98:6b:52:3c:dc:c5:4b:8c:3d:ce:c1:4e:5e: 28:fe:88:9c -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZv6C1Ku+S/PYToRHdULffrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTEyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGM1Njg2NTdlNTBlNmY4ZTVjNmJmZWZhODljZWYzNTBkOTRmODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2o8VpoLmjKM3iS9YSpbkbwIdf3O yJJ1vvkvjqg2TRE/9qdAS4cKgRJa3m9Sop/MlN+bJ62OeBA3MrF0tl5/oRv3QMqE GiTevtVbk85PQioAPjhCFv1uef4nQOzC8UAFva2c/TIV6dnedj4ibwwMge3ZgaBd AKgu0u37bfDpa75srg1URDLvoLNYWxQoKg/EjuiCv0oCQWkfbIa1iUdAVUvyg0mm gpAr74RUeEiF/g6CTy9ajvhh4K2VYIbWWJCv2XyBDEdzS7kWyTLaj+AoyTtWVOEa DwXSTN1vL8wN/MA5ZYKOptQGh/smsmhSRDG0NHRGAt28TmfqVt5Bg9ucwwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFP3FaGV+UOb45ca/76ic7zUNlPguMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzgzNGFh MC1hOGY0LTQ1NGMtYjMxNS00MzVhZjE0YWEwN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvODM0YWEw LWE4ZjQtNDU0Yy1iMzE1LTQzNWFmMTRhYTA3YS8xL19jVm9aWDVRNXZqbHhyX3Zx Snp2TlEyVS1DNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwWUMAwQA1ejBMA0EAgACMAcDBQMqAeVAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMcCgIDA0NSMA0GCSqGSIb3DQEBCwUAA4IB AQBFP4zNONRl2qXmcoOQFpDFAnn9sWn+YFXTT6AA5lnp3tuM0dUqx4W1nv71TAXO SAaCC8uO/8gL1Xbi68YNCxd1s+JvfAou4ROGo2p7TUM7jlcMKWmHOinXwrRSpFxj n+jiwom9lCuyEE+TvVkHWv9aGPUArrQOQCEQuQpYL/fn2IVBo8mXNqBr+npQ33EL aEWIe/K/i+MiJKGGovX43xn5LY5IsXzgV76PPDbqO1wW2wk0DI9u3TFofoXUCsny NB4JF4xcLeBCEVB7pEbUVFYgLQ49cOJ4qbWTz33Zuo9Sf0EWn29AgbudKCETXSaf hZhrUjzcxUuMPc7BTl4o/oic -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:21 2026 by rpki-client