This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer File: cFo7sRdTjbbbnFz9WnlL899pfCc.cer (raw, json) Hash identifier: uGuqBq43mBYUcaI3b6gjNfRTyk4qDjR5zv7mSTT5Bb4= Subject key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE16DD8812673F9EA5784C693DA3F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42207 IP: 185.206.184.0/22 IP: 2a0b:15c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:16:dd:88:12:67:3f:9e:a5:78:4c:69:3d:a3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:1e:be:a2:b7:f9:c4:bb:c1:00:87:33:55: 00:6d:4f:2a:b0:ad:52:fe:c7:3e:80:fe:76:37:53: 2c:a2:0a:c9:b9:5a:73:a6:95:e6:d3:3d:ff:9e:63: 8d:2b:be:e1:30:e6:99:8b:ba:d8:27:8a:96:97:29: 63:86:7a:ee:92:cf:2e:04:ab:b6:44:0d:54:76:a2: 8c:34:81:41:31:98:d9:3d:7e:0b:75:80:41:f3:d4: 88:b8:90:7b:7a:8c:3c:18:4f:ef:dd:b1:18:59:95: 1b:f8:5c:4b:81:51:45:93:db:7c:71:c1:20:79:ee: 00:09:59:83:7b:19:4f:c7:12:c3:fa:45:35:c6:85: 92:96:88:5f:eb:dd:b1:9b:60:c1:05:de:11:79:28: b2:a8:6d:84:4d:cd:7b:84:5e:71:66:20:d7:94:3d: ac:d8:8c:d7:f2:e4:99:18:e3:72:51:66:2b:15:9f: ba:41:6e:d0:e5:e5:e7:c3:af:c0:79:f3:cd:fb:9a: 31:b6:83:08:52:2e:9f:ca:21:55:ae:e2:1f:28:8b: b8:0a:b0:df:6f:09:c5:f0:d9:3f:c5:58:ca:3d:5e: 39:96:9a:38:74:2a:00:cd:c5:68:c8:f7:1f:2b:20: bf:71:e9:29:7a:01:16:e4:24:71:ac:7c:5c:83:28: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.184.0/22 IPv6: 2a0b:15c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42207 Signature Algorithm: sha256WithRSAEncryption 26:ac:30:f6:84:92:fe:e8:cf:77:10:eb:ac:96:2a:86:d2:54: 5b:26:89:f8:ee:f2:1e:85:f9:aa:8c:a3:08:86:6f:5c:c2:44: 6d:5f:85:8f:0a:ef:51:23:56:32:ed:4c:13:cb:56:28:51:77: ce:e6:85:72:c7:dd:79:5e:96:4b:27:b4:5f:4b:ff:82:19:18: 65:c8:16:6e:fc:99:4e:4c:ef:69:43:93:d5:7a:26:80:3e:cd: 48:97:9c:8c:91:22:28:5b:70:3e:2e:47:ad:3e:04:68:d2:c6: bc:c7:16:d4:cc:cc:54:cc:fd:92:5e:ef:89:e9:6b:76:e6:92: 48:82:c5:49:b9:cf:2b:e6:d8:0a:a0:11:fa:d4:8f:76:98:97: a6:02:e7:67:65:5a:5b:d0:42:e2:d4:8c:fc:84:16:ef:e1:f4: bb:f2:44:eb:2c:90:85:f1:c5:a1:dd:46:07:ed:33:32:9b:c1: e9:f0:ef:59:89:f9:41:ea:32:75:46:0a:56:fd:3e:a1:f7:b2: bb:b2:93:b3:8c:2b:9b:94:ac:8d:a7:b9:4b:9f:4f:59:85:3e: 70:f9:bd:15:68:84:1b:c9:47:cb:e7:e5:a5:31:4b:d8:3e:bb: f5:40:a9:85:ac:f4:fa:68:fa:b1:75:f1:66:7d:c9:af:fc:1a: 2e:7e:91:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87hbdiBJnP56leExpPaPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDVhM2JiMTE3NTM4ZGI2ZGI5YzVjZmQ1YTc5NGJmM2RmNjk3YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvEevqK3+cS7wQCHM1UAbU8qsK1S /sc+gP52N1MsogrJuVpzppXm0z3/nmONK77hMOaZi7rYJ4qWlyljhnruks8uBKu2 RA1UdqKMNIFBMZjZPX4LdYBB89SIuJB7eow8GE/v3bEYWZUb+FxLgVFFk9t8ccEg ee4ACVmDexlPxxLD+kU1xoWSlohf692xm2DBBd4ReSiyqG2ETc17hF5xZiDXlD2s 2IzX8uSZGONyUWYrFZ+6QW7Q5eXnw6/AefPN+5oxtoMIUi6fyiFVruIfKIu4CrDf bwnF8Nk/xVjKPV45lpo4dCoAzcVoyPcfKyC/cekpegEW5CRxrHxcgyhxqQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHBaO7EXU42225xc/Vp5S/PfaXwnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzNmN2Fi OC02YjM5LTQzNjItYTI3ZS03NzY2MDM3MWExZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvM2Y3YWI4 LTZiMzktNDM2Mi1hMjdlLTc3NjYwMzcxYTFlYy8xL2NGbzdzUmRUamJiYm5GejlX bmxMODk5cGZDYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuc64MA0EAgACMAcDBQMqCxXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCk3zANBgkqhkiG9w0BAQsFAAOCAQEAJqww9oSS/ujP dxDrrJYqhtJUWyaJ+O7yHoX5qoyjCIZvXMJEbV+FjwrvUSNWMu1ME8tWKFF3zuaF csfdeV6WSye0X0v/ghkYZcgWbvyZTkzvaUOT1XomgD7NSJecjJEiKFtwPi5HrT4E aNLGvMcW1MzMVMz9kl7vielrduaSSILFSbnPK+bYCqAR+tSPdpiXpgLnZ2VaW9BC 4tSM/IQW7+H0u/JE6yyQhfHFod1GB+0zMpvB6fDvWYn5QeoydUYKVv0+ofeyu7KT s4wrm5Ssjae5S59PWYU+cPm9FWiEG8lHy+flpTFL2D679UCphaz0+mj6sXXxZn3J r/waLn6RLw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:10 2026 by rpki-client