This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer (raw, json) Hash identifier: O0w1ltIYgnQpNJg5/JxSEzLpNlobtRoMxZ2aZmvOdOs= Subject key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BF05677996819838CB6C773E57296 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.162.17.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f0:56:77:99:68:19:83:8c:b6:c7:73:e5:72:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d1:f4:a9:5b:52:c9:e3:f2:a6:8c:14:36:7f: 7b:6c:67:6c:b8:08:af:34:23:73:d7:c4:9b:aa:43: fb:19:25:f4:66:c8:60:7e:4b:ba:50:f9:1e:c3:73: fe:45:3b:b0:e8:0f:44:cb:4a:8b:75:fe:04:64:17: e4:c6:49:b2:42:c8:69:30:11:12:6d:ad:e4:4a:40: e1:b4:64:b6:65:1c:eb:91:6e:28:b3:3d:02:e5:a1: bd:50:01:a4:90:16:93:35:f1:fc:9a:d3:25:66:fa: 26:cc:aa:d2:cb:50:fe:d9:2b:ef:a2:6b:5f:86:de: 1b:ee:b6:27:d8:ad:a3:9a:4b:f0:ad:47:12:ed:34: 72:0f:24:44:9e:18:4e:c8:13:82:57:85:9e:fc:fb: bb:72:9a:b5:e9:36:ce:ac:15:76:75:d4:31:a4:7d: c4:86:b0:97:27:68:a1:1e:c9:3d:bb:fa:1c:8d:66: 2b:e7:cf:ef:64:35:00:b6:8d:55:f7:fa:b7:96:81: b5:35:30:7d:f2:67:db:fb:74:b8:86:c4:af:dd:be: a6:48:fe:b5:7d:32:0c:c7:5c:48:6b:af:3b:5c:81: 2d:f4:0c:bd:37:cd:df:7f:63:a1:b6:86:a7:03:0d: f6:03:bb:9c:fb:7a:75:98:d1:db:e2:ab:f5:70:39: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.17.0/24 Signature Algorithm: sha256WithRSAEncryption 98:31:c2:6f:f7:4c:b9:7c:89:c4:60:38:33:82:27:54:d0:a6: c5:70:4f:d9:5a:3d:4a:74:72:e9:80:6f:c2:f4:46:ab:86:93: 86:b6:00:1a:88:38:34:a5:34:1f:47:54:3f:ef:9d:db:9e:16: e4:c1:8d:5b:5e:02:6e:d8:c5:ca:08:2b:84:b8:7e:99:f1:fb: 3d:bf:37:35:0e:a5:af:e2:98:42:83:ad:c8:9b:0a:11:94:a6: c2:6b:53:93:1b:41:cf:21:f5:f4:1d:be:9e:ed:4e:02:89:ec: e7:85:d9:4f:e3:63:28:bc:f3:a9:e0:ef:74:76:a1:79:57:59: d7:92:b0:8b:9d:83:69:96:10:db:2f:88:12:84:94:3b:63:a2: a6:9d:22:64:e7:4c:f1:71:90:4a:54:0f:50:64:9a:53:02:4d: f9:7a:d0:9e:ad:81:0f:84:13:a9:d5:14:d6:45:b6:45:6f:09: 1d:33:3f:ac:ad:a4:ca:ab:23:99:37:0c:4f:77:99:29:8e:ab: 82:df:9a:56:23:89:9c:94:05:ea:b6:38:03:15:27:d3:4a:1f: 02:77:5b:cb:9a:1d:81:fa:4d:0b:82:07:af:69:35:88:48:60: 6d:b8:06:2e:14:06:86:9f:90:32:cf:31:9d:19:66:a2:b4:cf: 91:b9:74:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9W/BWd5loGYOMtsdz5XKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGEwYjVhY2E3MzFlYTcxZjI2ZDYzZDIzYzIyYzEyM2IyYmIxMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09H0qVtSyePypowUNn97bGdsuAiv NCNz18SbqkP7GSX0Zshgfku6UPkew3P+RTuw6A9Ey0qLdf4EZBfkxkmyQshpMBES ba3kSkDhtGS2ZRzrkW4osz0C5aG9UAGkkBaTNfH8mtMlZvomzKrSy1D+2Svvomtf ht4b7rYn2K2jmkvwrUcS7TRyDyREnhhOyBOCV4We/Pu7cpq16TbOrBV2ddQxpH3E hrCXJ2ihHsk9u/ocjWYr58/vZDUAto1V9/q3loG1NTB98mfb+3S4hsSv3b6mSP61 fTIMx1xIa687XIEt9Ay9N83ff2OhtoanAw32A7uc+3p1mNHb4qv1cDnlvwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHCgtaynMepx8m1j0jwiwSOyuxIPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2Y2NDll NS1hN2NiLTQyMTgtOTNlMC00M2UzMTgwMGRmMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvZjY0OWU1 LWE3Y2ItNDIxOC05M2UwLTQzZTMxODAwZGYwYy8xL2NLQzFyS2N4Nm5IeWJXUFNQ Q0xCSTdLN0VnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwKIRMA0GCSqGSIb3DQEBCwUAA4IBAQCYMcJv 90y5fInEYDgzgidU0KbFcE/ZWj1KdHLpgG/C9EarhpOGtgAaiDg0pTQfR1Q/753b nhbkwY1bXgJu2MXKCCuEuH6Z8fs9vzc1DqWv4phCg63ImwoRlKbCa1OTG0HPIfX0 Hb6e7U4CieznhdlP42MovPOp4O90dqF5V1nXkrCLnYNplhDbL4gShJQ7Y6KmnSJk 50zxcZBKVA9QZJpTAk35etCerYEPhBOp1RTWRbZFbwkdMz+sraTKqyOZNwxPd5kp jquC35pWI4mclAXqtjgDFSfTSh8Cd1vLmh2B+k0LggevaTWISGBtuAYuFAaGn5Ay zzGdGWaitM+RuXTm -----END CERTIFICATE-----Generated at Tue Jan 27 14:57:22 2026 by rpki-client