This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer File: cCjsnM1thh9fGv2tAEbzPJEDugY.cer (raw, json) Hash identifier: U93yMyiDMznsauwo7IuHxujCkNn1VeJZ4loXO8lOTq0= Subject key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910341B97439BF88324F268E26C2AB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31721 IP: 5.191.0.0 -- 5.191.239.255 IP: 217.168.176.0/20 IP: 2a03:4480::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:34:1b:97:43:9b:f8:83:24:f2:68:e2:6c:2a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:27:c8:64:91:40:fb:5e:fa:5a:56:7d:66: a2:ef:5b:45:24:8e:d6:06:94:df:fd:a3:0d:fe:09: f1:f9:fb:09:02:1e:74:7b:b4:55:70:81:05:e6:dc: 33:f5:51:89:15:e8:ca:07:70:ba:af:4a:b3:bf:a1: 80:29:00:02:f7:2d:dd:25:9b:28:6e:fe:04:cf:9a: ab:d6:f4:72:15:80:fa:e1:11:f7:34:94:8c:36:cf: f1:a5:dd:16:f7:7d:ea:ff:17:c6:99:80:ac:56:f3: 56:38:4c:5e:8b:47:6c:62:1c:c4:ed:cf:a2:64:f1: 0c:70:00:b4:59:66:f2:33:4b:6a:69:e3:8d:dc:3e: 9e:f0:e4:93:82:46:d1:2a:54:5c:ae:31:51:bd:81: 84:41:29:8f:89:61:c7:58:e5:06:58:6b:b1:db:ec: 66:7d:e6:32:a8:36:27:3d:a2:e4:61:7f:a0:2a:8d: c8:11:2e:28:ad:52:95:0f:87:e3:48:79:9f:2d:5b: ee:30:85:cc:97:d8:db:04:53:0b:68:a6:e5:a4:26: 34:2c:d3:50:93:f5:6a:f5:97:1e:4f:46:ae:30:d8: c7:c1:42:30:b4:0a:a2:30:d9:5f:79:ba:18:ef:2e: 6b:d3:1e:eb:23:31:0d:39:06:8e:c2:32:a0:71:0a: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.191.0.0-5.191.239.255 217.168.176.0/20 IPv6: 2a03:4480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31721 Signature Algorithm: sha256WithRSAEncryption 69:df:4e:34:0e:aa:38:14:4a:55:aa:53:d1:ca:2e:16:ae:f2: 44:fe:fd:29:c1:1c:ea:46:03:9e:6a:ec:cc:f5:c3:62:f6:b3: bb:3a:25:a2:83:dc:33:37:63:47:66:51:eb:2d:cf:61:30:0c: 74:9d:21:34:ed:2f:1a:b2:ba:e5:8a:d5:19:ed:e3:f6:a5:d6: b2:03:bb:a6:b7:f7:5c:11:da:61:3d:78:f3:1f:c7:af:27:ab: f7:ba:e6:0c:bb:e6:7e:44:31:4b:12:1e:e8:ec:61:a8:c2:dc: a5:22:67:2e:44:d9:c0:45:79:bc:45:82:ac:e1:a8:da:59:67: fc:49:91:4a:e2:3a:a1:03:d5:2a:79:00:c2:bd:4a:37:68:36: 25:91:1a:d3:2b:63:a0:85:b9:e8:33:fa:5a:fd:51:85:5e:20: a2:0a:45:5a:3b:d2:96:fa:45:8f:9e:6a:33:01:76:33:f1:ea: c8:9c:0d:6f:13:f3:24:23:c9:42:95:fa:b7:dd:25:0f:9b:3f: 5b:56:9b:d1:9a:fc:af:33:f3:ae:88:d9:e5:79:f7:a0:25:99: c4:92:a7:80:91:4a:10:38:26:88:92:41:3f:75:2c:a8:c1:75: f9:9b:eb:12:43:f6:0b:24:54:79:93:88:f7:cb:8f:fb:0d:70: ca:87:62:93 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5EDQbl0Ob+IMk8mjibCqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDI4ZWM5Y2NkNmQ4NjFmNWYxYWZkYWQwMDQ2ZjMzYzkxMDNiYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRAnyGSRQPte+lpWfWai71tFJI7W BpTf/aMN/gnx+fsJAh50e7RVcIEF5twz9VGJFejKB3C6r0qzv6GAKQAC9y3dJZso bv4Ez5qr1vRyFYD64RH3NJSMNs/xpd0W933q/xfGmYCsVvNWOExei0dsYhzE7c+i ZPEMcAC0WWbyM0tqaeON3D6e8OSTgkbRKlRcrjFRvYGEQSmPiWHHWOUGWGux2+xm feYyqDYnPaLkYX+gKo3IES4orVKVD4fjSHmfLVvuMIXMl9jbBFMLaKblpCY0LNNQ k/Vq9ZceT0auMNjHwUIwtAqiMNlfeboY7y5r0x7rIzENOQaOwjKgcQqB0wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHAo7JzNbYYfXxr9rQBG8zyRA7oGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzNjMzE1 NC03ODAzLTRlYzYtYmY3MC1jY2RkMDY1NjNhNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvM2MzMTU0 LTc4MDMtNGVjNi1iZjcwLWNjZGQwNjU2M2E1Zi8xL2NDanNuTTF0aGg5Zkd2MnRB RWJ6UEpFRHVnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjAZBAIAATATMAsDAwAFvwMEBAW/4AMEBNmosDANBAIAAjAHAwUA KgNEgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ76TANBgkqhkiG9w0BAQsFAAOC AQEAad9ONA6qOBRKVapT0couFq7yRP79KcEc6kYDnmrszPXDYvazuzolooPcMzdj R2ZR6y3PYTAMdJ0hNO0vGrK65YrVGe3j9qXWsgO7prf3XBHaYT148x/Hryer97rm DLvmfkQxSxIe6OxhqMLcpSJnLkTZwEV5vEWCrOGo2lln/EmRSuI6oQPVKnkAwr1K N2g2JZEa0ytjoIW56DP6Wv1RhV4gogpFWjvSlvpFj55qMwF2M/HqyJwNbxPzJCPJ QpX6t90lD5s/W1ab0Zr8rzPzrojZ5Xn3oCWZxJKngJFKEDgmiJJBP3UsqMF1+Zvr EkP2CyRUeZOI98uP+w1wyodikw== -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:30 2026 by rpki-client