This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer File: cAoSMdHCenVORu8Q6SpzCuFdD1U.cer (raw, json) Hash identifier: OahxllUVF4ALy4qiVqFrck3pKDOSuAg6ccxBwwGlQ2s= Subject key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79104BDDAFB3D1E06A7F04712D551E9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33951 IP: 91.193.96.0/22 IP: 95.175.0.0/19 IP: 193.239.206.0/23 IP: 194.63.132.0/22 IP: 217.11.128.0/20 IP: 2a04:1200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4b:dd:af:b3:d1:e0:6a:7f:04:71:2d:55:1e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fb:cd:18:40:07:b5:b6:bc:e7:6c:d0:59:5e: 54:2b:b4:10:a3:4b:40:18:59:8b:9b:49:c6:e0:b8: 1f:92:12:b7:27:e7:c7:05:53:5f:47:35:79:fc:2a: 8d:f7:77:b3:0a:7b:35:93:c6:50:4a:c7:a8:b0:ee: 1e:a1:aa:df:c7:b5:23:79:02:78:94:5a:f0:14:50: a7:d9:f7:d8:06:00:41:41:97:92:47:32:68:fb:4b: 9c:e7:5c:33:7d:26:17:19:be:b1:73:31:b1:83:72: dc:c2:78:78:23:a0:f5:af:c7:6e:ec:b4:8b:d0:14: 58:71:93:f6:2e:45:2b:09:6f:2b:08:aa:f3:a1:08: 40:64:53:ca:56:ba:e3:4e:63:97:48:3d:28:3d:30: 87:d8:40:5c:42:d8:34:9f:f4:0e:61:ef:ed:fc:aa: a8:d7:6a:3c:56:f9:28:e4:5d:78:b6:3b:18:82:68: 36:cf:18:f4:b6:15:9e:26:d0:f0:f0:e2:ff:58:1a: a1:66:b9:14:c5:b3:98:55:63:b7:03:e8:65:1b:89: f2:ed:c2:e5:f9:1a:4c:e0:5e:32:d4:51:f7:8d:b5: 17:69:a5:2a:fc:39:5d:10:b1:c0:55:36:06:05:73: 08:fc:39:e4:3e:8d:ed:78:0e:4a:4a:30:4e:bd:9d: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.96.0/22 95.175.0.0/19 193.239.206.0/23 194.63.132.0/22 217.11.128.0/20 IPv6: 2a04:1200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33951 Signature Algorithm: sha256WithRSAEncryption 61:19:b3:0b:67:90:b3:80:ca:b7:69:bc:b4:ef:63:7f:60:ab: 5a:bc:d1:32:d2:a7:c3:49:fb:d0:4e:6f:64:bb:73:a7:e4:9e: 98:d3:80:bf:80:7d:1d:87:03:1e:c6:5d:68:45:22:1d:e8:79: 33:3e:0b:bc:6c:5f:bf:11:fe:6a:5d:fb:ff:a0:d1:94:e0:58: 2a:bf:60:3b:8b:f6:38:07:57:fc:8a:d2:33:db:cf:79:58:42: 88:ae:ac:91:05:f4:eb:46:b1:1c:9d:f6:0e:8a:4f:21:c4:5e: e9:1f:1c:88:4b:22:4e:5c:47:0d:ff:97:f7:38:53:91:45:27: 6a:e8:d2:f4:c1:f4:d5:0a:97:3c:a5:b7:17:98:6b:97:49:92: 4d:ee:b6:b8:14:99:23:29:8b:5f:21:85:b1:2c:7a:c0:aa:09: 2a:49:38:e2:57:87:45:32:a1:2c:1b:5d:77:59:a1:c9:ae:38: 1b:b3:68:9f:87:9c:20:6d:13:e0:de:b4:24:7a:b4:f5:45:34: 61:8d:5c:09:68:b1:2a:b2:d2:7a:6e:ed:50:f8:3a:48:8a:5b: 5d:cc:f7:f0:a9:cb:09:d1:d5:3e:9b:8d:d1:22:79:bf:99:b6: 59:96:fb:b6:45:ea:15:7a:ca:72:6b:c5:4a:a4:a8:fb:f1:f8: 42:d5:d6:b5 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt5EEvdr7PR4Gp/BHEtVR6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDBhMTIzMWQxYzI3YTc1NGU0NmVmMTBlOTJhNzMwYWUxNWQwZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/vNGEAHtba852zQWV5UK7QQo0tA GFmLm0nG4LgfkhK3J+fHBVNfRzV5/CqN93ezCns1k8ZQSseosO4eoarfx7UjeQJ4 lFrwFFCn2ffYBgBBQZeSRzJo+0uc51wzfSYXGb6xczGxg3Lcwnh4I6D1r8du7LSL 0BRYcZP2LkUrCW8rCKrzoQhAZFPKVrrjTmOXSD0oPTCH2EBcQtg0n/QOYe/t/Kqo 12o8Vvko5F14tjsYgmg2zxj0thWeJtDw8OL/WBqhZrkUxbOYVWO3A+hlG4ny7cLl +RpM4F4y1FH3jbUXaaUq/DldELHAVTYGBXMI/DnkPo3teA5KSjBOvZ2eTQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExL2RjYzJi NC05ZGVkLTQ2NzgtODM5OC1hYjc5YTM3ODlmOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvZGNjMmI0 LTlkZWQtNDY3OC04Mzk4LWFiNzlhMzc4OWY4Zi8xL2NBb1NNZEhDZW5WT1J1OFE2 U3B6Q3VGZEQxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCW8FgAwQFX68AAwQBwe/OAwQCwj+EAwQE2QuA MA0EAgACMAcDBQMqBBIAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCEnzANBgkq hkiG9w0BAQsFAAOCAQEAYRmzC2eQs4DKt2m8tO9jf2CrWrzRMtKnw0n70E5vZLtz p+SemNOAv4B9HYcDHsZdaEUiHeh5Mz4LvGxfvxH+al37/6DRlOBYKr9gO4v2OAdX /IrSM9vPeVhCiK6skQX060axHJ32DopPIcRe6R8ciEsiTlxHDf+X9zhTkUUnaujS 9MH01QqXPKW3F5hrl0mSTe62uBSZIymLXyGFsSx6wKoJKkk44leHRTKhLBtdd1mh ya44G7Non4ecIG0T4N60JHq09UU0YY1cCWixKrLSem7tUPg6SIpbXcz38KnLCdHV PpuN0SJ5v5m2WZb7tkXqFXrKcmvFSqSo+/H4QtXWtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:06 2026 by rpki-client