This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer (raw, json) Hash identifier: KFrQl6YwLgAa0SWtZuzxmwVaxJSTxGVHd3OjjhFsvro= Subject key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F156C2B00228A0CAAB323B15CA67233 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206331 IP: 185.189.108.0/22 IP: 185.229.180.0/22 IP: 193.203.28.0/22 IP: 2a0b:e480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6c:2b:00:22:8a:0c:aa:b3:23:b1:5c:a6:72:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:24:4a:13:3c:24:cf:ad:46:2c:82:cf:5d: 4b:3c:8b:a6:15:bd:a8:f0:68:8b:26:18:f7:77:41: cf:93:12:8b:20:23:7d:6d:65:ac:ff:59:a9:de:aa: dd:88:ec:84:3d:0c:ac:17:f1:6b:ca:52:a0:11:c7: 87:e1:3b:8f:b3:b9:88:d0:c6:36:fb:80:ab:a4:7a: ff:5e:61:a7:81:50:e0:ec:69:4b:d6:f1:90:ad:50: 5f:3b:81:a9:fd:6c:de:f6:58:f9:83:5f:fe:99:68: 67:be:38:79:26:52:c9:fc:16:9e:45:aa:be:14:97: a6:d7:20:db:f7:fd:c5:b8:93:e4:e2:31:40:b9:70: 0b:67:99:73:ee:6d:9d:f1:66:a9:46:ef:cb:23:24: 00:ec:76:11:af:5f:35:ca:c7:6b:f8:73:53:11:9e: 0f:3d:10:2f:fb:50:fb:77:1f:4c:54:b8:22:bb:8a: 92:e6:01:78:87:7f:48:bb:7a:d6:3e:10:56:e6:fc: 6b:58:fc:d0:b6:83:c0:d3:76:ae:0f:e4:53:4d:04: 40:8c:cd:71:8d:02:33:e9:5d:9f:f1:d5:36:de:d3: 26:68:d8:54:c9:9e:70:bd:68:c0:b8:1b:bc:88:c2: f0:06:98:2e:9c:fc:86:81:ae:74:48:26:4a:09:7e: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.108.0/22 185.229.180.0/22 193.203.28.0/22 IPv6: 2a0b:e480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206331 Signature Algorithm: sha256WithRSAEncryption b2:02:1b:6d:e1:96:97:48:ce:f7:47:ac:50:56:0c:eb:fa:92: f0:97:5a:71:6f:77:f0:7b:ea:88:9d:18:51:7f:cc:b8:0e:99: f2:79:42:26:c6:47:59:f2:75:bb:eb:62:01:81:ea:95:33:4c: 41:1e:be:ee:02:24:bd:88:18:90:07:76:c1:1b:4b:f5:cc:40: 69:20:16:f5:44:17:c5:f2:d5:41:ff:4a:75:77:ea:eb:2a:75: 4b:fc:b2:16:15:f1:e5:41:82:f6:4d:9a:78:a3:af:99:0e:2c: 61:4a:2d:a9:49:ac:b4:20:3c:3a:86:23:2a:89:a3:cb:6a:cd: 37:05:ca:00:e8:9c:24:74:21:72:26:05:a3:ad:e2:f3:b3:99: a7:32:62:46:9a:70:f9:a4:a0:4e:8d:bc:c1:29:d7:61:f7:6c: 41:d8:96:91:b3:ea:57:2b:fb:7a:f9:c8:ec:65:3c:9f:a1:f3: 82:5e:6e:14:c4:fa:50:23:e7:98:9d:48:0f:27:51:0c:8e:3b: 58:84:9d:a7:42:50:26:d0:db:ac:99:d8:da:8b:4c:41:92:8e: c5:d0:6e:be:ee:c1:b3:96:31:e4:6a:02:e6:13:33:7c:f9:f6: d9:88:2b:5d:25:b4:1c:b8:3e:9a:4e:5f:d1:24:a4:72:14:7d: 4b:49:39:d6 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/FWwrACKKDKqzI7FcpnIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGIxOTBkNmY4OWE0MzRjY2U1Y2I4YzBkNGIzOGExNjY5ZGVmYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiokShM8JM+tRiyCz11LPIumFb2o 8GiLJhj3d0HPkxKLICN9bWWs/1mp3qrdiOyEPQysF/FrylKgEceH4TuPs7mI0MY2 +4CrpHr/XmGngVDg7GlL1vGQrVBfO4Gp/Wze9lj5g1/+mWhnvjh5JlLJ/BaeRaq+ FJem1yDb9/3FuJPk4jFAuXALZ5lz7m2d8WapRu/LIyQA7HYRr181ysdr+HNTEZ4P PRAv+1D7dx9MVLgiu4qS5gF4h39Iu3rWPhBW5vxrWPzQtoPA03auD+RTTQRAjM1x jQIz6V2f8dU23tMmaNhUyZ5wvWjAuBu8iMLwBpgunPyGga50SCZKCX44kQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHCxkNb4mkNMzly4wNSzihZp3vtZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzIzZGM2 MS03ZTlkLTQwYjMtOTFiNi00NmJkN2Q3OTRmYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMjNkYzYx LTdlOWQtNDBiMy05MWI2LTQ2YmQ3ZDc5NGZiNi8xL2NMR1ExdmlhUTB6T1hMakEx TE9LRm1uZS0xay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCub1sAwQCueW0AwQCwcscMA0EAgACMAcDBQMq C+SAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMl+zANBgkqhkiG9w0BAQsFAAOC AQEAsgIbbeGWl0jO90esUFYM6/qS8JdacW938HvqiJ0YUX/MuA6Z8nlCJsZHWfJ1 u+tiAYHqlTNMQR6+7gIkvYgYkAd2wRtL9cxAaSAW9UQXxfLVQf9KdXfq6yp1S/yy FhXx5UGC9k2aeKOvmQ4sYUotqUmstCA8OoYjKomjy2rNNwXKAOicJHQhciYFo63i 87OZpzJiRppw+aSgTo28wSnXYfdsQdiWkbPqVyv7evnI7GU8n6Hzgl5uFMT6UCPn mJ1IDydRDI47WISdp0JQJtDbrJnY2otMQZKOxdBuvu7Bs5Yx5GoC5hMzfPn22Ygr XSW0HLg+mk5f0SSkchR9S0k51g== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:43 2026 by rpki-client