This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer File: cJ626qpJ3WtIPgSxQ05NrHntnTE.cer (raw, json) Hash identifier: vBPAL4JkJXKFX/aZ96Wks4V+c2S0HwpX1qMSccmuqvc= Subject key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F06A9F8C9945CB05483CAC75E053C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30768 AS: 49825 IP: 193.19.82.0/23 IP: 194.165.0.0/23 IP: 195.211.76.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:06:a9:f8:c9:94:5c:b0:54:83:ca:c7:5e:05:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:2f:16:88:52:21:89:2c:26:2c:ae:d2:63: f5:07:6b:3b:21:7a:c6:db:de:72:03:cf:fe:b1:be: c7:e8:8a:a0:f8:9a:54:96:6b:75:d2:07:f7:30:52: 90:08:fc:c8:24:08:9b:40:4d:3d:cc:c8:b7:5e:0d: 4b:dd:fa:a2:17:08:14:75:c5:fd:38:9e:6c:fe:a5: 36:5e:8d:48:49:ea:2f:36:19:77:6b:7b:a9:b5:a1: 3e:c0:62:36:92:95:5b:1c:4c:7b:d8:f4:62:04:98: f9:f0:14:d2:7b:6d:09:a3:4b:64:c4:21:52:5e:86: 38:23:bc:52:3b:66:fa:a2:e9:b7:1e:3d:62:5c:3b: f6:b5:3b:40:fa:28:06:51:18:68:d3:8e:6e:1f:ca: d6:50:b8:84:7a:6d:ea:56:50:89:05:ba:37:33:e8: 53:6f:49:b1:3a:a2:d5:41:a4:4d:c0:05:6a:1e:2f: df:d8:95:5b:cb:4f:3c:c6:14:87:7e:d6:2a:e4:a5: 39:45:57:94:79:48:6a:a0:7a:21:fb:79:5a:c2:59: b8:20:e0:e2:ec:ee:45:c3:cf:08:52:75:47:c5:b3: 4f:ff:0a:64:88:37:86:02:99:64:6e:d7:fe:23:83: 21:b1:25:fc:9c:7f:ee:6a:a0:df:0d:92:20:06:78: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.82.0/23 194.165.0.0/23 195.211.76.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30768 49825 Signature Algorithm: sha256WithRSAEncryption 84:b7:30:f7:26:fe:f3:28:15:41:de:50:39:13:83:54:36:94: c8:15:58:6e:ff:d3:f4:f6:8b:d4:73:be:47:57:8c:9c:ec:e3: 1c:7d:4b:30:4c:cd:b3:16:46:12:83:a2:d7:55:20:e0:29:d1: 76:aa:3e:15:52:6f:5f:3f:4f:1a:72:7a:ad:c8:a2:63:1f:83: 83:73:0c:04:1b:8c:f7:ec:0e:1f:e9:da:d8:38:b4:0e:f0:b0: ae:ea:0b:83:a2:e3:51:57:2e:97:36:1d:24:ce:b4:16:8e:02: db:0f:ad:68:f3:a5:74:33:59:55:45:a8:b7:c3:75:e7:df:13: f3:3d:b9:97:d7:9c:f6:8f:33:7a:0d:f6:30:16:f1:9a:04:b1: 13:05:f3:5a:53:b3:a4:d7:06:06:29:9c:b5:34:f5:65:5c:b5: b2:37:d1:cc:46:30:56:54:cf:b5:04:11:25:40:d1:43:fd:43: 60:19:93:f4:33:80:3e:14:46:8b:3e:06:08:2f:38:da:97:b1: 35:02:a2:2a:47:d3:a2:65:3a:92:7d:ae:d6:72:08:18:09:59: ff:d5:0f:57:15:49:32:b8:8b:1b:48:e3:5d:e2:dd:9b:68:4e: 8f:b5:08:84:b6:5d:db:ea:8d:8a:d9:96:06:20:d0:36:06:64: 4f:73:47:4e -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt8fwap+MmUXLBUg8rHXgU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDllYjZlYWFhNDlkZDZiNDgzZTA0YjE0MzRlNGRhYzc5ZWQ5ZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA014vFohSIYksJiyu0mP1B2s7IXrG 295yA8/+sb7H6Iqg+JpUlmt10gf3MFKQCPzIJAibQE09zMi3Xg1L3fqiFwgUdcX9 OJ5s/qU2Xo1ISeovNhl3a3uptaE+wGI2kpVbHEx72PRiBJj58BTSe20Jo0tkxCFS XoY4I7xSO2b6oum3Hj1iXDv2tTtA+igGURho045uH8rWULiEem3qVlCJBbo3M+hT b0mxOqLVQaRNwAVqHi/f2JVby088xhSHftYq5KU5RVeUeUhqoHoh+3lawlm4IODi 7O5Fw88IUnVHxbNP/wpkiDeGAplkbtf+I4MhsSX8nH/uaqDfDZIgBnibgwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFHCetuqqSd1rSD4EsUNOTax57Z0xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzRiZWJl Ny0zZjhlLTQ5NDktODk4MC05ZjZmYTBlMWE1YTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNGJlYmU3 LTNmOGUtNDk0OS04OTgwLTlmNmZhMGUxYTVhNS8xL2NKNjI2cXBKM1d0SVBnU3hR MDVOckhudG5URS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBwRNSAwQBwqUAAwQCw9NMMB4GCCsGAQUFBwEI AQH/BA8wDaALMAkCAngwAgMAwqEwDQYJKoZIhvcNAQELBQADggEBAIS3MPcm/vMo FUHeUDkTg1Q2lMgVWG7/0/T2i9RzvkdXjJzs4xx9SzBMzbMWRhKDotdVIOAp0Xaq PhVSb18/Txpyeq3IomMfg4NzDAQbjPfsDh/p2tg4tA7wsK7qC4Oi41FXLpc2HSTO tBaOAtsPrWjzpXQzWVVFqLfDdeffE/M9uZfXnPaPM3oN9jAW8ZoEsRMF81pTs6TX BgYpnLU09WVctbI30cxGMFZUz7UEESVA0UP9Q2AZk/QzgD4URos+BggvONqXsTUC oipH06JlOpJ9rtZyCBgJWf/VD1cVSTK4ixtI413i3ZtoTo+1CIS2XdvqjYrZlgYg 0DYGZE9zR04= -----END CERTIFICATE-----Generated at Tue Feb 10 10:13:35 2026 by rpki-client