This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer File: cJ1plX0zNDKsysgQIx4ok4jjAuI.cer (raw, json) Hash identifier: 41iDIxxnuYcAJoWZ6v/aYarHWY3BTTsFby8wTnKTBJU= Subject key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791073449CA6030C2D8C188325AE4342 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197183 IP: 178.255.224.0/21 IP: 185.114.172.0/22 IP: 2a00:a220::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:73:44:9c:a6:03:0c:2d:8c:18:83:25:ae:43:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=709d69957d333432accac810231e289388e302e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:6b:3e:7b:8b:8f:42:39:ab:35:ef:cc:f6: 8c:f6:70:f5:ea:7f:76:ce:b7:62:9b:0f:17:e6:67: 03:eb:7b:2c:7c:4c:8d:03:dc:f5:23:5e:c1:cb:71: 57:6c:38:0f:f2:b6:0d:fa:7b:b2:1d:0d:d4:01:33: f1:af:f2:57:de:82:ca:f0:2d:5d:98:af:b4:37:d2: d2:36:f2:4a:fe:fc:6c:c3:40:44:67:5a:39:38:b3: ad:19:34:cb:a4:24:93:bb:1b:5a:24:fe:cb:24:15: 20:3b:ba:6d:43:87:17:48:38:84:17:e9:44:f0:9f: ab:e0:2d:75:fc:85:0b:f1:73:56:41:80:8b:32:1d: 60:8e:f4:fa:cb:22:ae:3e:61:28:75:f1:0a:2a:80: fb:45:36:d6:77:af:95:f2:5a:72:e8:51:45:8e:ae: fe:40:0a:5f:41:42:11:97:3d:dc:39:3a:09:1f:e9: 89:a1:b0:37:a8:ff:23:02:b5:50:c1:0c:2a:66:18: 90:f1:62:72:2f:53:86:7c:0d:69:02:29:90:b2:1c: cf:86:cc:64:b2:27:be:ce:b7:d3:28:3a:91:87:a6: 5c:1c:ff:9f:a0:4c:55:1d:dc:36:42:e7:17:f7:f4: 5a:ad:76:67:b6:5e:5c:70:70:8a:9c:12:b1:69:56: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.224.0/21 185.114.172.0/22 IPv6: 2a00:a220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197183 Signature Algorithm: sha256WithRSAEncryption 67:9c:fa:d5:b6:70:43:69:9c:83:b6:dd:55:93:88:e5:97:07: e3:99:ff:87:ab:a4:a7:7f:6a:ee:5d:d3:ff:d2:56:1a:cb:de: a5:a8:0f:d0:f2:79:b4:35:89:e6:79:3d:bf:08:80:8a:d7:06: 1b:97:fd:55:84:cd:0a:39:63:6e:ec:f7:dd:74:46:70:00:51: c6:2b:32:a3:ca:c8:de:a9:b5:ac:4a:71:25:04:ca:2f:3b:4a: de:96:3d:d5:56:07:d5:63:f7:a4:db:ab:c9:6b:88:70:29:44: 22:f0:9a:60:14:b5:b2:8b:d7:0f:8c:e2:11:fb:f6:e6:f3:66: 31:01:6f:b8:7c:08:55:97:d6:d8:f0:21:3a:e3:8f:9c:f2:24: 0f:ce:e3:2f:d5:ea:cd:9d:8d:21:6c:7d:cd:12:61:c6:49:2a: c1:8c:46:e4:a7:49:5b:2e:77:14:79:2a:8f:79:50:39:29:bd: 4b:a4:36:69:76:0e:ee:cf:83:64:87:0f:ea:a9:1d:30:e9:f4: f1:39:b4:22:9c:05:38:87:d1:75:83:b4:31:b5:ff:d3:1b:83: 4d:3b:e5:96:e0:5e:ba:85:70:b0:bd:66:b8:af:64:09:20:8a: 0a:c8:50:60:7d:90:6d:a0:7c:e2:e5:54:ea:ae:9c:12:3a:cc: f2:79:00:ba -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EHNEnKYDDC2MGIMlrkNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDlkNjk5NTdkMzMzNDMyYWNjYWM4MTAyMzFlMjg5Mzg4ZTMwMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkNrPnuLj0I5qzXvzPaM9nD16n92 zrdimw8X5mcD63ssfEyNA9z1I17By3FXbDgP8rYN+nuyHQ3UATPxr/JX3oLK8C1d mK+0N9LSNvJK/vxsw0BEZ1o5OLOtGTTLpCSTuxtaJP7LJBUgO7ptQ4cXSDiEF+lE 8J+r4C11/IUL8XNWQYCLMh1gjvT6yyKuPmEodfEKKoD7RTbWd6+V8lpy6FFFjq7+ QApfQUIRlz3cOToJH+mJobA3qP8jArVQwQwqZhiQ8WJyL1OGfA1pAimQshzPhsxk sie+zrfTKDqRh6ZcHP+foExVHdw2QucX9/RarXZntl5ccHCKnBKxaVaxpQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHCdaZV9MzQyrMrIECMeKJOI4wLiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzUzZDU2 YS0wOTZlLTQ1OGEtOWE5NC0wOGE2ODYzMmE2M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvNTNkNTZh LTA5NmUtNDU4YS05YTk0LTA4YTY4NjMyYTYzYS8xL2NKMXBsWDB6TkRLc3lzZ1FJ eDRvazRqakF1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDsv/gAwQCuXKsMA0EAgACMAcDBQAqAKIgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCPzANBgkqhkiG9w0BAQsFAAOCAQEAZ5z6 1bZwQ2mcg7bdVZOI5ZcH45n/h6ukp39q7l3T/9JWGsvepagP0PJ5tDWJ5nk9vwiA itcGG5f9VYTNCjljbuz33XRGcABRxisyo8rI3qm1rEpxJQTKLztK3pY91VYH1WP3 pNuryWuIcClEIvCaYBS1sovXD4ziEfv25vNmMQFvuHwIVZfW2PAhOuOPnPIkD87j L9XqzZ2NIWx9zRJhxkkqwYxG5KdJWy53FHkqj3lQOSm9S6Q2aXYO7s+DZIcP6qkd MOn08Tm0IpwFOIfRdYO0MbX/0xuDTTvlluBeuoVwsL1muK9kCSCKCshQYH2QbaB8 4uVU6q6cEjrM8nkAug== -----END CERTIFICATE-----Generated at Tue Jan 27 19:37:00 2026 by rpki-client