This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer (raw, json) Hash identifier: YQJXKpMjw70IDTeVII3cZGAoCLkWb2YRNuFShxGBGS0= Subject key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAE05BB514ED638F15E77B52CB5449 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.110.95.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e0:5b:b5:14:ed:63:8f:15:e7:7b:52:cb:54:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=703c48ed46cb79490e1662db01c31d02d02effe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:df:44:6f:ea:9a:f0:63:45:2f:b8:41:ab: 2d:08:92:3c:ef:e3:08:b8:27:bc:00:89:16:ce:a9: 42:96:cd:5a:09:24:54:dc:97:04:35:8d:42:60:46: e1:d9:15:cf:c1:1b:16:ce:31:1d:a7:cc:38:b6:98: f6:aa:14:a4:75:94:72:24:1b:ea:73:86:90:63:3b: 1c:a1:f3:f0:c1:b4:b8:06:e1:09:ee:61:40:40:e2: 1a:6c:bc:38:b0:ea:d2:22:35:0d:9b:ce:88:46:1d: b2:dc:e7:7f:95:f0:4d:49:98:d5:d7:b4:9a:3e:c4: 61:d6:c8:11:6d:67:8c:e3:1a:f4:fc:9c:09:8e:33: d2:18:2d:0d:2b:c1:0c:4e:e8:62:2a:98:f2:30:93: c2:08:a9:e1:81:8d:b5:ca:73:19:ce:20:dc:a1:2a: a2:ae:8e:ea:4b:63:a2:05:99:7c:7e:d6:d4:54:5b: 60:77:a5:57:14:e2:db:40:88:e8:a9:96:d9:85:55: 34:fe:ad:23:1a:8a:56:dc:5e:16:2f:8e:fc:9f:1a: 71:d2:8e:c0:f1:28:c6:2c:d1:7d:54:0e:e8:33:41: 46:b9:f4:f6:d6:7e:eb:3d:04:55:bb:45:67:18:d3: cd:24:8f:44:43:12:06:cb:60:bb:ea:f8:68:7d:8e: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.95.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ab:87:c6:8f:d2:1c:51:19:7b:01:24:67:ac:60:bc:21:4f: 98:d4:dc:2f:e3:22:90:a1:ee:db:31:f4:e5:ab:bf:9c:2b:1b: 86:ea:1c:02:72:9f:de:fa:d7:41:07:43:f5:e8:a1:85:2f:5a: 56:4c:ed:1d:e4:02:13:58:c1:c2:b1:bc:64:8a:32:a4:f9:6a: 23:f9:e9:2f:b9:b7:95:78:ee:03:13:81:70:dc:cb:5c:8d:95: f7:e4:56:d3:f1:c0:7a:ab:4b:e4:9a:1f:2d:c2:3b:51:c3:58: e9:2a:0a:7a:aa:eb:ca:90:27:e7:ac:9e:6c:47:74:d1:87:35: c5:56:17:0f:7a:71:92:83:a9:36:fc:eb:0b:74:6b:d0:07:4a: 5c:d9:71:ac:07:64:a4:0f:ad:f9:8f:f3:c7:d6:3c:f8:a6:fc: 3b:6f:58:30:6c:a8:bd:f7:f3:c2:43:7a:02:2c:81:48:03:e1: 2f:55:d9:5d:d1:b2:17:8a:ff:cf:df:4c:23:21:46:55:bd:35: 66:aa:c3:64:56:ac:03:fb:e6:cd:15:19:aa:82:46:b8:00:d5: 77:49:52:a6:b9:00:17:1b:ea:50:43:de:b1:50:b2:2b:b2:b4: bb:be:58:64:03:84:1b:d8:41:be:d8:74:f5:87:74:53:f3:f3: fa:2d:b1:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9yuBbtRTtY48V53tSy1RJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDNjNDhlZDQ2Y2I3OTQ5MGUxNjYyZGIwMWMzMWQwMmQwMmVmZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9ffRG/qmvBjRS+4QastCJI87+MI uCe8AIkWzqlCls1aCSRU3JcENY1CYEbh2RXPwRsWzjEdp8w4tpj2qhSkdZRyJBvq c4aQYzscofPwwbS4BuEJ7mFAQOIabLw4sOrSIjUNm86IRh2y3Od/lfBNSZjV17Sa PsRh1sgRbWeM4xr0/JwJjjPSGC0NK8EMTuhiKpjyMJPCCKnhgY21ynMZziDcoSqi ro7qS2OiBZl8ftbUVFtgd6VXFOLbQIjoqZbZhVU0/q0jGopW3F4WL478nxpx0o7A 8SjGLNF9VA7oM0FGufT21n7rPQRVu0VnGNPNJI9EQxIGy2C76vhofY6/RQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2RhMWM0 My0xOTE2LTQ2YWUtODQ5MS0zNTg4M2FmOWEzMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvZGExYzQz LTE5MTYtNDZhZS04NDkxLTM1ODgzYWY5YTMyMy8xL2NEeEk3VWJMZVVrT0ZtTGJB Y01kQXRBdV8tSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwW5fMA0GCSqGSIb3DQEBCwUAA4IBAQAjq4fG j9IcURl7ASRnrGC8IU+Y1Nwv4yKQoe7bMfTlq7+cKxuG6hwCcp/e+tdBB0P16KGF L1pWTO0d5AITWMHCsbxkijKk+Woj+ekvubeVeO4DE4Fw3MtcjZX35FbT8cB6q0vk mh8twjtRw1jpKgp6quvKkCfnrJ5sR3TRhzXFVhcPenGSg6k2/OsLdGvQB0pc2XGs B2SkD635j/PH1jz4pvw7b1gwbKi99/PCQ3oCLIFIA+EvVdld0bIXiv/P30wjIUZV vTVmqsNkVqwD++bNFRmqgka4ANV3SVKmuQAXG+pQQ96xULIrsrS7vlhkA4Qb2EG+ 2HT1h3RT8/P6LbHa -----END CERTIFICATE-----Generated at Mon Feb 2 20:46:33 2026 by rpki-client