This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer File: cRcdWnbTurk3KszJJz66ffHFnPI.cer (raw, json) Hash identifier: awTiHpBLaWaDG0SEQ9khcBR+qtuIKFJuSVq+8LRxLIA= Subject key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8C8BA866CD18E5A08F0CB23631548 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.220.209.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c8:ba:86:6c:d1:8e:5a:08:f0:cb:23:63:15:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:05:75:13:90:9b:f1:b0:be:fd:de:01:12: be:e2:70:c1:7b:71:12:19:f8:dd:63:18:d7:34:5d: 45:d4:93:dc:c0:dc:c7:2b:06:19:51:ca:f8:96:32: d4:ec:aa:da:38:c6:04:a1:34:2d:f3:b2:d6:00:b3: 54:b8:4a:94:1e:24:81:3e:b2:01:a5:a5:64:7a:ae: 57:77:b0:86:64:1c:4d:5b:69:f6:ff:38:3c:d0:18: c8:22:56:9c:ec:5f:34:a1:95:1d:a4:e0:7d:e4:d9: 84:ad:da:89:9a:35:f7:bd:30:3e:4f:ce:11:c4:c1: c1:a3:d1:2f:0c:b1:7a:3d:6a:45:d4:5e:19:0f:eb: cf:35:20:86:6d:1c:c9:17:dd:b3:2e:a3:0c:9d:bc: d9:36:33:08:0e:b5:22:eb:22:20:62:65:cf:29:42: c3:5f:22:39:dc:6e:51:ca:59:28:d2:2a:82:b2:77: be:5c:73:7f:02:73:0b:4b:c4:e5:a4:bc:b7:8c:a6: d6:5d:02:85:83:61:95:71:dc:b0:3a:33:14:94:8e: e4:13:40:cd:b0:89:39:0c:db:18:e7:8c:c2:3a:ee: 73:44:2c:82:4a:0c:9e:ca:18:94:ea:f1:cd:dc:e2: 30:87:24:be:b3:f7:5c:98:a8:5a:d7:1e:3e:01:f8: 5d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.209.0/24 Signature Algorithm: sha256WithRSAEncryption 60:ea:d2:d2:68:16:f5:32:f4:33:07:95:e9:dc:34:1f:53:64: 71:4c:30:05:b5:2c:b4:8b:71:6b:ac:9f:bc:41:38:1b:38:58: cc:5e:9f:3a:72:40:60:1f:74:b4:ca:22:f7:28:69:19:55:9f: e2:05:1e:14:27:0d:93:38:74:c2:db:d8:ca:4a:cb:7b:58:77: 89:88:82:47:da:7d:3d:36:b2:46:40:73:68:45:e6:3c:f0:38: 0b:49:f3:c5:bd:32:94:a3:5f:c4:68:a1:9b:af:ab:99:06:5f: d8:e9:3e:58:f9:30:10:f4:f9:0e:ec:bf:45:9b:ec:ed:a9:1a: c4:65:b9:76:a8:35:62:cb:fb:89:b1:0d:cb:aa:a3:c8:32:8b: 4a:8f:06:79:0b:dd:ef:11:0f:c8:a5:f2:32:fa:06:c1:6f:e4: aa:09:1f:33:25:42:3d:8f:bf:d6:1a:68:51:23:fb:fd:12:e2: 04:75:db:03:82:ff:ed:b1:93:1c:55:1f:3f:26:9a:47:ed:33: f8:6b:26:a7:c3:6b:54:63:d8:02:e1:76:df:e4:b9:71:97:2b: 68:6d:81:cd:e6:47:fa:cf:8d:9d:da:4d:4b:95:6c:d9:ea:c8: c2:3a:81:04:a3:32:8a:1e:00:bf:0f:6d:60:c3:a4:30:80:96: 01:03:a4:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yMi6hmzRjloI8MsjYxVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTE3MWQ1YTc2ZDNiYWI5MzcyYWNjYzkyNzNlYmE3ZGYxYzU5Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfQFdROQm/Gwvv3eARK+4nDBe3ES GfjdYxjXNF1F1JPcwNzHKwYZUcr4ljLU7KraOMYEoTQt87LWALNUuEqUHiSBPrIB paVkeq5Xd7CGZBxNW2n2/zg80BjIIlac7F80oZUdpOB95NmErdqJmjX3vTA+T84R xMHBo9EvDLF6PWpF1F4ZD+vPNSCGbRzJF92zLqMMnbzZNjMIDrUi6yIgYmXPKULD XyI53G5Rylko0iqCsne+XHN/AnMLS8TlpLy3jKbWXQKFg2GVcdywOjMUlI7kE0DN sIk5DNsY54zCOu5zRCyCSgyeyhiU6vHN3OIwhyS+s/dcmKha1x4+AfhdJQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHEXHVp207q5NyrMySc+un3xxZzyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2RlZThi OS1jMzAwLTQ1ZWItODllMS04MDY5OTUyOWNjZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZGVlOGI5 LWMzMDAtNDVlYi04OWUxLTgwNjk5NTI5Y2NlYi8xL2NSY2RXbmJUdXJrM0tzekpK ejY2ZmZIRm5QSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9zRMA0GCSqGSIb3DQEBCwUAA4IBAQBg6tLS aBb1MvQzB5Xp3DQfU2RxTDAFtSy0i3FrrJ+8QTgbOFjMXp86ckBgH3S0yiL3KGkZ VZ/iBR4UJw2TOHTC29jKSst7WHeJiIJH2n09NrJGQHNoReY88DgLSfPFvTKUo1/E aKGbr6uZBl/Y6T5Y+TAQ9PkO7L9Fm+ztqRrEZbl2qDViy/uJsQ3LqqPIMotKjwZ5 C93vEQ/IpfIy+gbBb+SqCR8zJUI9j7/WGmhRI/v9EuIEddsDgv/tsZMcVR8/JppH 7TP4ayanw2tUY9gC4Xbf5LlxlytobYHN5kf6z42d2k1LlWzZ6sjCOoEEozKKHgC/ D21gw6QwgJYBA6TL -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:14 2026 by rpki-client