This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer File: cTm8XO866t8yYT99lZ7I5Ap0KRg.cer (raw, json) Hash identifier: 0yE7LXPnHQfy46PLg/dCe1xF29KUFXlSEiOV2cEw9bU= Subject key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14FB3C68AB80A74C3A6313E71488DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211450 IP: 193.36.90.0/24 IP: 2a10:e340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fb:3c:68:ab:80:a7:4c:3a:63:13:e7:14:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:50:2a:46:fd:70:ea:10:60:8c:0f:1f:a2: 59:f7:7d:ec:5a:95:e0:67:1c:7a:1c:a2:5f:03:46: 7b:26:11:69:d5:a0:af:c5:8b:9c:a2:d5:c5:8e:98: d7:0f:00:f2:41:80:60:df:6a:af:11:f4:9d:6d:22: 49:6b:b3:d9:00:25:86:54:bc:42:c9:23:bc:b9:d6: 38:10:c1:1a:56:5d:4f:14:cd:61:65:af:e9:c6:d9: 64:47:0d:ec:28:c1:0b:42:40:b4:91:61:b2:f4:9b: 59:2a:e3:65:33:76:0c:b1:bc:1d:9b:66:86:64:a4: ce:e1:ac:73:3c:4c:cb:f6:9c:a4:75:65:62:d6:e5: a7:d5:52:31:ae:51:ac:ec:db:18:ec:55:30:3e:ee: 85:c8:ff:4a:75:06:40:9e:86:0b:d2:79:f9:81:5e: cf:f9:fd:61:06:f7:46:b6:19:c0:eb:2e:97:3d:e7: 69:16:d7:5e:6b:f8:42:02:87:f9:de:d9:97:1f:44: f4:90:46:94:f2:c5:b3:85:25:0b:19:7b:09:fa:be: 79:11:94:28:b0:b3:70:23:30:f0:42:02:34:f7:4c: a2:37:ec:7c:74:b3:bb:84:5c:2a:97:e9:83:a1:3d: d1:f9:71:4b:6d:ae:03:69:91:fb:e7:94:5e:bb:66: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.90.0/24 IPv6: 2a10:e340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211450 Signature Algorithm: sha256WithRSAEncryption ae:88:82:1d:8f:10:15:d7:76:10:34:b9:d4:bf:14:4c:b6:5f: c1:15:24:71:19:e7:11:e6:97:b4:9b:2c:a1:19:5b:c9:f6:bc: db:7d:83:94:91:79:ee:d9:76:3a:ca:e5:1b:bc:21:9b:24:c2: 8b:58:9a:ff:06:f1:bf:7d:08:38:00:7f:db:2d:c7:9e:3a:9f: 52:0f:15:46:3a:d0:94:42:68:cb:a8:ee:f6:2b:a4:63:d0:1f: bb:78:4d:06:e8:ed:2f:8c:d9:bd:57:ae:26:54:6d:3d:35:87: d1:16:17:5a:4c:d3:d2:ed:89:bf:13:9b:50:6c:b1:02:cb:c8: ad:8d:45:c3:a5:73:d7:b2:32:59:d9:d3:40:55:c3:04:3d:fc: 7e:06:5f:ad:9e:f8:1b:bf:21:20:40:1d:87:1c:af:99:e8:dc: c9:0c:b1:35:68:ef:fb:92:56:f9:0f:fa:73:00:d0:7e:5a:a1: 92:54:43:66:e3:63:7c:14:d5:7d:3a:24:41:f9:76:60:c0:2b: 4d:32:3b:38:4c:50:b2:1c:ea:32:65:01:9f:37:66:60:3c:de: d0:b7:f2:f1:38:8c:0c:ca:7d:1c:ea:01:78:e2:07:27:0f:3f: fb:0b:81:2a:38:e1:de:06:ec:77:47:2a:12:65:e9:4f:b8:ba: 92:90:b5:6d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FPs8aKuAp0w6YxPnFIjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTM5YmM1Y2VmM2FlYWRmMzI2MTNmN2Q5NTllYzhlNDBhNzQyOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbhQKkb9cOoQYIwPH6JZ933sWpXg Zxx6HKJfA0Z7JhFp1aCvxYucotXFjpjXDwDyQYBg32qvEfSdbSJJa7PZACWGVLxC ySO8udY4EMEaVl1PFM1hZa/pxtlkRw3sKMELQkC0kWGy9JtZKuNlM3YMsbwdm2aG ZKTO4axzPEzL9pykdWVi1uWn1VIxrlGs7NsY7FUwPu6FyP9KdQZAnoYL0nn5gV7P +f1hBvdGthnA6y6XPedpFtdea/hCAof53tmXH0T0kEaU8sWzhSULGXsJ+r55EZQo sLNwIzDwQgI090yiN+x8dLO7hFwql+mDoT3R+XFLba4DaZH755Reu2Y8VwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHE5vFzvOurfMmE/fZWeyOQKdCkYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2NhZTY1 Mi1hMjE4LTQyZjYtOTdhZi03OTRiMjhlYjE2YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvY2FlNjUy LWEyMTgtNDJmNi05N2FmLTc5NGIyOGViMTZjNS8xL2NUbThYTzg2NnQ4eVlUOTls WjdJNUFwMEtSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSRaMA0EAgACMAcDBQMqEONAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM5+jANBgkqhkiG9w0BAQsFAAOCAQEAroiCHY8QFdd2 EDS51L8UTLZfwRUkcRnnEeaXtJssoRlbyfa8232DlJF57tl2OsrlG7whmyTCi1ia /wbxv30IOAB/2y3HnjqfUg8VRjrQlEJoy6ju9iukY9Afu3hNBujtL4zZvVeuJlRt PTWH0RYXWkzT0u2JvxObUGyxAsvIrY1Fw6Vz17IyWdnTQFXDBD38fgZfrZ74G78h IEAdhxyvmejcyQyxNWjv+5JW+Q/6cwDQflqhklRDZuNjfBTVfTokQfl2YMArTTI7 OExQshzqMmUBnzdmYDze0Lfy8TiMDMp9HOoBeOIHJw8/+wuBKjjh3gbsd0cqEmXp T7i6kpC1bQ== -----END CERTIFICATE-----Generated at Sat Jan 10 06:51:16 2026 by rpki-client