This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer File: cBKlLoiwGDLPDuN8zath3s59EsY.cer (raw, json) Hash identifier: Lb2gYAxcx6o+PpuyFJxI3TtIq73ujprKhO0BEwhZhmM= Subject key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AAE1AFD60388B1C08A96C25319E82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206094 IP: 185.192.240.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ae:1a:fd:60:38:8b:1c:08:a9:6c:25:31:9e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:d9:5f:76:61:a9:6d:c0:bc:bd:54:03:4e: 69:09:a5:e3:fa:b9:c0:fa:21:03:52:e4:3e:45:4a: 77:3e:61:74:7a:63:dd:49:b8:bf:bb:88:73:40:54: 46:e7:14:47:12:7e:a7:73:ed:7e:6a:bb:bf:f3:3a: 05:6e:36:09:a7:ff:19:67:2d:fd:56:2e:fe:b5:69: 51:bd:31:70:21:af:8c:73:9d:25:36:cf:f9:75:1e: f3:33:bd:84:8a:68:a7:96:04:6a:7c:cd:3a:f7:b8: 79:a2:6e:0c:da:73:5c:0a:64:d1:dd:c6:43:5f:b6: cf:38:93:7e:11:1c:08:8e:83:e3:3c:1a:21:05:bb: 00:8c:7e:7f:49:46:82:c4:2c:a3:cf:b3:41:54:2c: 67:a5:f4:e5:7e:40:77:a1:c0:2f:37:31:31:d8:3d: 61:9f:87:e7:db:a0:14:61:5c:e8:85:ed:1c:1c:93: e7:57:11:6a:8e:08:0c:fe:45:cd:50:80:cf:d6:b4: 42:54:44:62:94:34:c8:43:e6:d3:3e:87:1d:29:13: 3e:3f:a5:bd:5c:65:ae:27:26:70:06:83:23:47:a9: be:2f:fb:9b:3e:06:e1:f1:9a:da:94:e7:3b:f8:ea: 92:0c:79:bf:60:b6:22:7d:0b:e2:0d:9f:90:5e:e8: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.240.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206094 Signature Algorithm: sha256WithRSAEncryption 2f:94:fd:64:b7:55:20:e6:d8:62:62:9b:fb:5c:b2:cf:0a:de: b1:f9:8c:e7:e0:18:8f:7f:44:1c:3a:1e:5f:c1:00:16:fa:2d: c3:37:5a:51:79:b4:9e:a4:5c:70:e0:4a:1f:51:2e:84:1e:5e: 09:0f:93:a9:61:ec:66:08:6a:ac:2e:59:11:83:11:a4:94:41: 17:6e:f8:4a:63:d1:5f:1d:5a:28:01:6a:bc:0f:cb:a8:bf:f2: 56:36:24:54:77:72:cd:66:53:39:7d:9c:0a:80:2d:1d:60:c7: c8:ca:53:d1:db:7d:c8:4d:71:3a:de:ad:95:1d:e5:d8:cc:d6: bf:ff:18:23:d2:94:42:53:ae:0e:5d:be:0d:13:a7:64:0b:04: b2:32:10:68:df:75:27:b4:06:82:2c:a0:85:64:fd:03:e0:77: 28:04:eb:cb:4a:6f:65:38:31:e6:fe:65:17:31:9e:6e:3d:c5: c7:35:37:a2:58:73:27:a4:fb:12:1e:f8:b4:38:6f:7d:2b:e6: 75:fb:0c:b5:d4:ee:49:0a:1b:90:8d:3f:69:7f:af:d4:1e:9d: c8:30:40:d0:6b:82:38:65:38:aa:b9:82:7f:7f:5d:e4:6b:c1: 62:00:dc:e0:54:22:e3:74:99:60:41:2e:2a:b1:aa:f7:56:31: e4:f5:70:40 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9Wq4a/WA4ixwIqWwlMZ6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDEyYTUyZTg4YjAxODMyY2YwZWUzN2NjZGFiNjFkZWNlN2QxMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo/ZX3ZhqW3AvL1UA05pCaXj+rnA +iEDUuQ+RUp3PmF0emPdSbi/u4hzQFRG5xRHEn6nc+1+aru/8zoFbjYJp/8ZZy39 Vi7+tWlRvTFwIa+Mc50lNs/5dR7zM72EiminlgRqfM0697h5om4M2nNcCmTR3cZD X7bPOJN+ERwIjoPjPBohBbsAjH5/SUaCxCyjz7NBVCxnpfTlfkB3ocAvNzEx2D1h n4fn26AUYVzohe0cHJPnVxFqjggM/kXNUIDP1rRCVERilDTIQ+bTPocdKRM+P6W9 XGWuJyZwBoMjR6m+L/ubPgbh8ZralOc7+OqSDHm/YLYifQviDZ+QXui3rQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHASpS6IsBgyzw7jfM2rYd7OfRLGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzBlNTQ1 Yi00NDNmLTRjZmItOGMyOC0zMjAxYjg3ZjE0OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvMGU1NDVi LTQ0M2YtNGNmYi04YzI4LTMyMDFiODdmMTQ5MC8xL2NCS2xMb2l3R0RMUER1Tjh6 YXRoM3M1OUVzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCucDwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMlDjANBgkqhkiG9w0BAQsFAAOCAQEAL5T9ZLdVIObYYmKb+1yyzwresfmM5+AY j39EHDoeX8EAFvotwzdaUXm0nqRccOBKH1EuhB5eCQ+TqWHsZghqrC5ZEYMRpJRB F274SmPRXx1aKAFqvA/LqL/yVjYkVHdyzWZTOX2cCoAtHWDHyMpT0dt9yE1xOt6t lR3l2MzWv/8YI9KUQlOuDl2+DROnZAsEsjIQaN91J7QGgiyghWT9A+B3KATry0pv ZTgx5v5lFzGebj3FxzU3olhzJ6T7Eh74tDhvfSvmdfsMtdTuSQobkI0/aX+v1B6d yDBA0GuCOGU4qrmCf39d5GvBYgDc4FQi43SZYEEuKrGq91Yx5PVwQA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:33 2026 by rpki-client