This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer File: cAAC6c0sdKDvi1G0DUTRQaky0oM.cer (raw, json) Hash identifier: TtUXBAGhCO192gyTVuF9622fkd2ueiIu4JHCi2PWTP0= Subject key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD3C27A42B8BF54B65C433AEA6B65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13070 IP: 77.241.160.0/22 IP: 217.145.208.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d3:c2:7a:42:b8:bf:54:b6:5c:43:3a:ea:6b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:9d:cf:29:cb:42:e5:df:00:0b:74:db:9c: d0:dd:06:70:91:9e:b9:31:e1:b7:03:ad:14:b3:18: b3:1a:71:19:0b:94:9d:9e:f6:ca:e2:13:0e:bc:d1: 1d:7c:bb:94:98:47:b5:d4:56:a2:6c:cb:a3:c0:1d: ad:9f:55:18:a4:44:d5:b6:3a:79:93:21:d7:1f:d4: f3:68:f4:27:c0:d9:fa:f8:1c:55:a5:cd:fe:f0:cd: b7:3f:f1:ff:7b:11:42:8b:13:ab:33:c7:0e:7d:a2: ad:06:fe:b0:e0:ac:01:62:7f:62:17:68:c4:f3:ff: ca:33:f2:95:10:c2:f4:a7:1d:1c:8f:b9:04:f0:16: a4:5f:d5:81:c0:ff:0e:18:a2:10:f2:1d:93:96:24: 15:1e:ea:26:bc:05:57:1f:6a:2d:d8:2a:83:80:2d: de:c1:0e:2e:c8:60:71:27:c4:05:ee:67:d7:5e:92: 32:cb:7c:40:c5:2f:98:52:f9:9c:5f:e3:34:42:35: 82:a1:72:8b:86:a8:68:37:80:58:67:65:d5:e8:c1: f2:9f:a3:b0:7b:f3:69:cc:56:93:cb:07:2a:4d:4b: 9a:8a:ab:85:d4:05:eb:ef:a1:46:0a:65:e1:55:c7: 81:f1:13:8d:30:5f:8d:06:73:99:ed:fa:a3:e8:92: ae:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.241.160.0/22 217.145.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13070 Signature Algorithm: sha256WithRSAEncryption 71:b1:d2:61:43:4b:a5:53:a7:18:7b:39:54:66:d2:2d:5d:20: e1:fb:c1:ee:94:59:41:da:29:09:df:ed:d3:ed:ae:8e:43:12: 2c:e4:7d:a6:f0:0e:be:98:98:9e:39:e6:39:84:b5:a6:ed:c8: 5d:68:f6:ca:da:1e:35:05:2d:ee:30:58:c9:62:69:f9:b5:b3: d8:d6:a8:f4:61:1a:ac:75:bb:9d:96:ec:da:c6:d5:30:ee:6b: b4:1b:9a:1a:7a:42:92:0e:b7:30:34:84:27:04:32:91:2f:1e: af:20:92:75:78:4f:0f:50:d6:ed:ff:3f:f0:b3:ba:b1:6a:3b: d1:c5:bd:10:5f:6e:83:fe:5a:9a:34:6c:27:69:52:a9:be:2f: ab:63:75:c3:cd:d5:fb:31:bf:c0:73:00:3c:c7:ff:af:71:5a: 6a:ae:43:04:a2:36:24:70:88:5d:bc:ec:21:f6:5b:30:86:b2: 7e:e9:f5:fd:56:d8:1e:f0:31:b1:6c:36:ca:d9:7b:7b:ca:70: f7:77:14:95:af:5d:e2:18:2d:81:6c:b6:07:d6:f1:29:ac:ca: ca:49:66:df:61:7f:7a:21:7e:3d:3a:64:21:90:cd:ea:61:7e: 38:0e:52:c7:43:70:04:aa:ec:bc:1c:df:88:95:30:f5:f6:66: e6:e1:17:95 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt57NPCekK4v1S2XEM66mtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDAwMDJlOWNkMmM3NGEwZWY4YjUxYjQwZDQ0ZDE0MWE5MzJkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGdzynLQuXfAAt025zQ3QZwkZ65 MeG3A60UsxizGnEZC5SdnvbK4hMOvNEdfLuUmEe11FaibMujwB2tn1UYpETVtjp5 kyHXH9TzaPQnwNn6+BxVpc3+8M23P/H/exFCixOrM8cOfaKtBv6w4KwBYn9iF2jE 8//KM/KVEML0px0cj7kE8BakX9WBwP8OGKIQ8h2TliQVHuomvAVXH2ot2CqDgC3e wQ4uyGBxJ8QF7mfXXpIyy3xAxS+YUvmcX+M0QjWCoXKLhqhoN4BYZ2XV6MHyn6Ow e/NpzFaTywcqTUuaiquF1AXr76FGCmXhVceB8RONMF+NBnOZ7fqj6JKu+QIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFHAAAunNLHSg74tRtA1E0UGpMtKDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzUyZTBi Yy05NjI5LTRhMjAtYTAwMi05MDkyMDkzNTZiMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvNTJlMGJj LTk2MjktNGEyMC1hMDAyLTkwOTIwOTM1NmIyZi8xL2NBQUM2YzBzZEtEdmkxRzBE VVRSUWFreTBvTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCTfGgAwQE2ZHQMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAjMOMA0GCSqGSIb3DQEBCwUAA4IBAQBxsdJhQ0ulU6cYezlUZtItXSDh +8HulFlB2ikJ3+3T7a6OQxIs5H2m8A6+mJieOeY5hLWm7chdaPbK2h41BS3uMFjJ Ymn5tbPY1qj0YRqsdbudluzaxtUw7mu0G5oaekKSDrcwNIQnBDKRLx6vIJJ1eE8P UNbt/z/ws7qxajvRxb0QX26D/lqaNGwnaVKpvi+rY3XDzdX7Mb/AcwA8x/+vcVpq rkMEojYkcIhdvOwh9lswhrJ+6fX9Vtge8DGxbDbK2Xt7ynD3dxSVr13iGC2BbLYH 1vEprMrKSWbfYX96IX49OmQhkM3qYX44DlLHQ3AEquy8HN+IlTD19mbm4ReV -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:11 2026 by rpki-client