This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer File: cSsCxFx16_ctVtM8KAKXwq6H6y0.cer (raw, json) Hash identifier: X3j504lJm8l3bIHekLna2dz2hMyK07ScSrkxhn5wW38= Subject key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC88423E00D7B4DA7EB32F5D3CA66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213709 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c8:84:23:e0:0d:7b:4d:a7:eb:32:f5:d3:ca:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:2b:07:5d:2c:78:a5:f0:f6:1f:17:b9:f0: ff:78:d3:00:a7:a3:32:5a:15:a8:b2:ef:ac:21:f0: d0:ca:d6:21:8b:30:6c:8d:81:39:42:50:99:6c:89: 3e:96:9e:e2:d0:37:23:06:ec:e8:90:e7:e5:91:86: 4f:0a:ce:03:90:48:90:13:9f:5d:80:07:3b:9f:c2: c5:7b:2c:7d:88:53:4e:e9:93:41:03:f0:5f:4c:20: 6c:df:17:bd:6b:0f:6f:a7:f8:8d:0e:f8:47:b5:6b: ae:d6:86:bc:eb:98:65:ee:e9:e1:56:c7:47:37:6a: 21:83:55:19:00:9c:12:f4:c1:fe:fb:74:be:51:93: 0c:b9:6c:c2:9a:11:3c:3a:44:37:c9:2a:75:3c:7e: e6:66:fa:62:28:2d:43:ad:ef:47:41:92:d4:82:cd: a8:2b:aa:6d:1c:91:cc:23:de:f4:45:31:f8:b1:2e: 30:9d:c2:3d:f4:7a:07:c3:ff:e2:7f:0e:50:0a:d5: 3a:5f:f5:dd:d0:9d:d0:38:ec:fd:76:c9:8a:ba:28: 35:1e:e4:94:eb:bd:b0:f9:af:48:59:dd:62:ad:5c: dd:f3:e2:1b:75:4c:31:5f:0a:77:3a:9f:84:40:10: 6e:fc:69:d1:94:4c:93:f6:8f:fa:bd:a4:97:7e:51: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213709 Signature Algorithm: sha256WithRSAEncryption 3f:4a:90:b1:a0:ff:76:fd:29:30:a7:6e:d0:8d:08:61:8f:90: 18:fb:4f:36:d4:fc:1b:4e:96:de:2c:f4:b6:9e:b4:f4:1e:89: 47:dc:97:85:65:93:2b:a9:af:c5:b2:7a:1d:37:cd:9d:d5:d1: 1c:2a:24:ef:d4:6e:6b:d7:1f:d9:74:70:16:16:e7:0e:af:4c: c0:75:c5:9e:4a:30:b2:f9:d6:b2:85:b5:31:c2:e0:8e:88:5f: b6:c2:ae:4e:74:ce:39:58:ae:f1:c2:21:91:d7:45:44:35:43: 04:ad:86:db:32:e5:e9:b2:2c:97:d0:fa:56:60:cb:1d:f1:0b: b3:a8:37:6c:65:2c:e2:5f:1f:19:a8:a2:93:8c:b1:1f:17:59: 32:80:ac:08:79:2e:eb:97:a5:d2:80:84:7f:ac:69:29:7a:a8: 8a:55:1c:23:c8:15:57:b7:f7:d4:18:4e:69:0e:7c:ef:73:72: 8e:f7:13:93:15:88:28:d0:c6:b8:88:cb:91:ce:ec:1d:c8:28: 8b:26:a7:ab:ae:1b:63:17:ac:26:c7:85:63:47:4d:75:d2:b3: c3:91:be:f3:26:6b:6c:57:91:57:bf:aa:9a:e2:f3:3c:45:c3: ff:96:d5:68:0b:33:fc:64:c9:72:dd:8a:a2:b5:db:25:3c:12: eb:49:8f:0e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57MiEI+ANe02n6zL108pmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJiMDJjNDVjNzVlYmY3MmQ1NmQzM2MyODAyOTdjMmFlODdlYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9srB10seKXw9h8XufD/eNMAp6My WhWosu+sIfDQytYhizBsjYE5QlCZbIk+lp7i0DcjBuzokOflkYZPCs4DkEiQE59d gAc7n8LFeyx9iFNO6ZNBA/BfTCBs3xe9aw9vp/iNDvhHtWuu1oa865hl7unhVsdH N2ohg1UZAJwS9MH++3S+UZMMuWzCmhE8OkQ3ySp1PH7mZvpiKC1Dre9HQZLUgs2o K6ptHJHMI970RTH4sS4wncI99HoHw//ifw5QCtU6X/Xd0J3QOOz9dsmKuig1HuSU 672w+a9IWd1irVzd8+IbdUwxXwp3Op+EQBBu/GnRlEyT9o/6vaSXflE5iwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHErAsRcdev3LVbTPCgCl8Kuh+stMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzdjM2M0 ZS0yNmRiLTQxMDUtOTkxOC0zNTI0NzNkZDUxNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvN2MzYzRl LTI2ZGItNDEwNS05OTE4LTM1MjQ3M2RkNTE3OS8xL2NTc0N4RngxNl9jdFZ0TThL QUtYd3E2SDZ5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCzTANBgkqhkiG9w0BAQsFAAOCAQEAP0qQsaD/dv0p MKdu0I0IYY+QGPtPNtT8G06W3iz0tp609B6JR9yXhWWTK6mvxbJ6HTfNndXRHCok 79Rua9cf2XRwFhbnDq9MwHXFnkowsvnWsoW1McLgjohftsKuTnTOOViu8cIhkddF RDVDBK2G2zLl6bIsl9D6VmDLHfELs6g3bGUs4l8fGaiik4yxHxdZMoCsCHku65el 0oCEf6xpKXqoilUcI8gVV7f31BhOaQ5873NyjvcTkxWIKNDGuIjLkc7sHcgoiyan q64bYxesJseFY0dNddKzw5G+8yZrbFeRV7+qmuLzPEXD/5bVaAsz/GTJct2KorXb JTwS60mPDg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:17 2026 by rpki-client