This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer File: cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer (raw, json) Hash identifier: iD7cFxpKd4xHpUFKdEDDBYm4FFvuaVofm8CHHvdfKKQ= Subject key identifier: 70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F85877B946E8DF12594EAFD67EDD12A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216023 IP: 92.119.248.0/22 IP: 212.115.112.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:87:7b:94:6e:8d:f1:25:94:ea:fd:67:ed:d1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:58:8f:53:40:40:65:dc:76:c3:e8:36:40: fb:48:ef:22:cd:96:42:21:05:c7:60:d7:aa:cc:d4: 9e:91:8d:b1:29:57:d2:48:c9:f9:af:33:a7:25:0d: 2b:77:ef:b1:db:e4:53:1a:0e:fa:63:93:a2:2c:f3: f9:4a:8e:fb:e9:e3:4a:b1:47:99:6e:48:83:c1:a7: 9e:bc:e8:72:ad:03:34:18:36:68:fb:5d:4a:19:04: 19:2e:5f:ad:a1:cc:bc:af:b6:04:61:56:90:7a:8c: 8b:91:89:42:80:03:e4:bc:63:6e:8e:7c:50:1a:d1: 37:67:47:90:9e:f5:c9:28:98:63:f4:2d:37:f1:1b: d0:3d:5f:c5:0e:1b:c4:62:d1:42:cf:5d:c4:f5:ae: aa:e6:03:25:ab:98:8a:ea:58:27:2b:ef:3a:16:ef: 83:15:c4:7d:e5:e3:72:a3:61:64:51:0d:62:be:c3: 27:2c:78:73:38:a0:99:88:05:c8:fd:8b:39:12:01: 12:bd:e5:c4:92:28:28:d3:b0:23:22:1b:36:10:6b: 4f:99:c6:cb:a8:0f:4c:7f:a3:61:7a:68:67:cb:33: fb:ec:7f:b4:10:43:8f:66:c0:8b:47:2e:0d:5d:ec: fc:85:bb:d0:86:ea:e3:73:97:bf:3a:3c:cb:5f:c8: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.248.0/22 212.115.112.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216023 Signature Algorithm: sha256WithRSAEncryption 91:81:1f:88:47:8d:f6:c1:a9:78:54:f8:c8:1e:8b:cd:ab:c4: e9:d2:1c:27:f0:01:80:99:64:5d:35:bb:ae:01:73:94:11:f4: e3:b9:42:96:83:c6:71:24:6d:10:5b:34:47:a2:40:76:c4:c9: ba:21:48:b1:64:d9:94:9d:73:2f:b7:69:62:6d:c3:f8:c8:c7: 23:5f:66:1e:ff:c2:6d:fe:f6:6f:23:f7:4b:c7:44:f4:99:6e: 3f:f5:c8:5c:48:3e:cd:c6:51:f6:20:e7:42:96:ea:35:af:c7: 28:a0:ff:70:7e:25:91:83:d5:31:ed:20:fa:8d:99:e6:95:c4: b1:af:dd:63:27:62:e3:09:e9:ba:20:cd:25:f2:46:bb:8a:94: 1e:0e:52:bc:f6:23:93:81:93:90:8e:97:2b:17:82:fc:61:9f: 64:2d:31:e8:ae:ea:d7:90:47:45:5a:25:1b:d2:cb:c3:fa:ee: 50:8b:e2:9b:f6:fa:36:9e:f5:07:59:21:65:bc:28:8d:2d:28: 31:93:c4:f6:0d:0d:86:fc:02:d4:f9:db:f9:ce:41:56:c7:53: 97:ad:12:7e:7d:9f:66:c5:ef:43:51:35:74:1f:cc:ee:dd:0d: 52:95:9f:a2:3f:40:7c:c7:05:48:28:e9:43:c4:8c:e5:c0:5d: 5a:5d:ee:34 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/hYd7lG6N8SWU6v1n7dEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDM3OGUzY2Q4ZjNhNTliZGE1MjMzZmY2ZTlhOWM5OTY0OGQ3MTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOJYj1NAQGXcdsPoNkD7SO8izZZC IQXHYNeqzNSekY2xKVfSSMn5rzOnJQ0rd++x2+RTGg76Y5OiLPP5So776eNKsUeZ bkiDwaeevOhyrQM0GDZo+11KGQQZLl+tocy8r7YEYVaQeoyLkYlCgAPkvGNujnxQ GtE3Z0eQnvXJKJhj9C038RvQPV/FDhvEYtFCz13E9a6q5gMlq5iK6lgnK+86Fu+D FcR95eNyo2FkUQ1ivsMnLHhzOKCZiAXI/Ys5EgESveXEkigo07AjIhs2EGtPmcbL qA9Mf6NhemhnyzP77H+0EEOPZsCLRy4NXez8hbvQhurjc5e/OjzLX8hyrwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFHA3jjzY86Wb2lIz/26anJlkjXEFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2ViNzM5 NC05ZDlmLTQ1N2UtYjM2OC04MDk3M2IzYzA2MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvZWI3Mzk0 LTlkOWYtNDU3ZS1iMzY4LTgwOTczYjNjMDYyNy8xL2NEZU9QTmp6cFp2YVVqUF9i cHFjbVdTTmNRVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCXHf4AwQC1HNwMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwNL1zANBgkqhkiG9w0BAQsFAAOCAQEAkYEfiEeN9sGpeFT4yB6LzavE 6dIcJ/ABgJlkXTW7rgFzlBH047lCloPGcSRtEFs0R6JAdsTJuiFIsWTZlJ1zL7dp Ym3D+MjHI19mHv/Cbf72byP3S8dE9JluP/XIXEg+zcZR9iDnQpbqNa/HKKD/cH4l kYPVMe0g+o2Z5pXEsa/dYydi4wnpuiDNJfJGu4qUHg5SvPYjk4GTkI6XKxeC/GGf ZC0x6K7q15BHRVolG9LLw/ruUIvim/b6Np71B1khZbwojS0oMZPE9g0NhvwC1Pnb +c5BVsdTl60Sfn2fZsXvQ1E1dB/M7t0NUpWfoj9AfMcFSCjpQ8SM5cBdWl3uNA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:33 2026 by rpki-client