This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer File: cNvqB1PfCD5XgrufOAtdeZy3igY.cer (raw, json) Hash identifier: oxx0zI+S57Y5RDHhR/QpjROrqESKk6iejdC83PnBa1o= Subject key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7ACE50DF0D37AA863E513222245FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 132.252.0.0/16 IP: 134.91.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ac:e5:0d:f0:d3:7a:a8:63:e5:13:22:22:45:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:9c:fb:fe:78:05:ba:ee:3d:4e:77:ef:1a: c6:10:48:30:fb:f9:c3:91:0e:63:b9:99:c5:23:80: f7:ac:2f:aa:ce:b7:35:8e:7e:a1:59:2c:3d:b2:6b: 7c:6a:f5:dd:59:38:f1:a1:23:e1:5f:9a:af:a3:01: 52:ce:05:49:0e:7c:e9:71:72:58:93:d1:a8:b9:4b: bd:7b:6d:40:e2:60:3b:54:27:cd:3f:94:22:2b:52: 56:9b:4c:33:89:2b:6f:3a:cf:ac:23:23:a4:cb:be: eb:f3:c4:16:c8:f6:51:9f:60:d8:26:4e:71:5f:b0: ed:d3:2a:ee:38:58:aa:d4:c6:2f:fb:43:c4:96:12: 9d:8d:aa:0b:f2:10:1f:27:91:3f:76:95:4e:6b:dc: b0:e7:d3:b2:16:73:1d:53:34:5b:08:11:ba:b7:7a: d9:3b:d0:de:e0:b4:66:af:9f:c0:23:f3:55:44:b8: d5:ca:7c:0d:d8:89:54:f5:6b:ad:43:25:b8:47:bf: b5:1a:f4:b2:53:8e:1a:af:d3:bf:a1:94:17:d8:e0: 08:ca:05:8e:d7:45:3c:e2:54:6b:a6:ba:4b:d8:e3: f6:07:0f:52:10:07:56:ae:83:10:80:db:f7:5a:f2: 5d:85:64:5d:b4:fd:62:2e:62:27:10:94:49:8a:84: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.252.0.0/16 134.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9e:cd:84:f5:45:07:87:5c:52:d3:03:4d:29:c2:2a:09:6d:b7: 05:c8:4a:48:d4:c3:1d:d4:be:af:35:4a:f9:93:ec:05:1e:ff: 0a:da:e0:30:e3:5f:83:71:80:d5:da:cc:98:2f:37:f4:9f:b7: 84:20:8e:b8:32:75:9a:eb:00:ae:5b:cc:e7:0e:d2:bf:0e:56: 01:4f:5d:95:ff:95:72:e3:88:eb:6b:6d:8e:eb:f9:73:c4:10: 21:6f:50:a9:3e:2d:c3:45:e4:75:f8:7b:55:28:bc:22:1f:b6: 6b:cc:ce:2f:a4:1b:97:77:b9:0d:a5:a3:3f:e6:1d:eb:07:38: 17:7f:15:26:21:f6:17:dd:c2:1c:0e:e2:56:8c:02:a3:90:d9: f1:66:0b:8d:73:c9:d1:01:b2:43:45:75:55:e2:1a:00:b3:80: 45:62:fc:cf:94:2e:6a:59:a0:5d:f9:fa:9c:86:2a:d7:e0:dc: aa:16:10:3c:bd:de:08:dc:f2:c6:73:71:dd:e7:18:42:50:17: 1a:66:5c:be:73:da:16:ae:ff:14:d7:18:d9:c5:ce:28:01:8d: 9f:61:a5:03:de:34:db:87:9b:c7:da:47:46:79:44:5a:93:bc: 4d:ec:6f:86:8d:b7:86:be:74:53:aa:9a:6e:9e:8e:7e:18:e6: fc:75:33:c9 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt6x6zlDfDTeqhj5RMiIkX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGRiZWEwNzUzZGYwODNlNTc4MmJiOWYzODBiNWQ3OTljYjc4YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovec+/54BbruPU537xrGEEgw+/nD kQ5juZnFI4D3rC+qzrc1jn6hWSw9smt8avXdWTjxoSPhX5qvowFSzgVJDnzpcXJY k9GouUu9e21A4mA7VCfNP5QiK1JWm0wziStvOs+sIyOky77r88QWyPZRn2DYJk5x X7Dt0yruOFiq1MYv+0PElhKdjaoL8hAfJ5E/dpVOa9yw59OyFnMdUzRbCBG6t3rZ O9De4LRmr5/AI/NVRLjVynwN2IlU9WutQyW4R7+1GvSyU44ar9O/oZQX2OAIygWO 10U84lRrprpL2OP2Bw9SEAdWroMQgNv3WvJdhWRdtP1iLmInEJRJioTM6wIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFHDb6gdT3wg+V4K7nzgLXXmct4oGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2RlZWMy ZS0wY2Q2LTQxMTMtYjJiOS0yYTBjZjEzMTczZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZGVlYzJl LTBjZDYtNDExMy1iMmI5LTJhMGNmMTMxNzNkOC8xL2NOdnFCMVBmQ0Q1WGdydWZP QXRkZVp5M2lnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF BwEHAQH/BBQwEjAQBAIAATAKAwMAhPwDAwCGWzANBgkqhkiG9w0BAQsFAAOCAQEA ns2E9UUHh1xS0wNNKcIqCW23BchKSNTDHdS+rzVK+ZPsBR7/CtrgMONfg3GA1drM mC839J+3hCCOuDJ1musArlvM5w7Svw5WAU9dlf+VcuOI62ttjuv5c8QQIW9QqT4t w0Xkdfh7VSi8Ih+2a8zOL6Qbl3e5DaWjP+Yd6wc4F38VJiH2F93CHA7iVowCo5DZ 8WYLjXPJ0QGyQ0V1VeIaALOARWL8z5QualmgXfn6nIYq1+DcqhYQPL3eCNzyxnNx 3ecYQlAXGmZcvnPaFq7/FNcY2cXOKAGNn2GlA94024ebx9pHRnlEWpO8Texvho23 hr50U6qabp6Ofhjm/HUzyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:03 2026 by rpki-client