This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer (raw, json) Hash identifier: HVoKGA1MrNfhIgszHg9C+NEYxWv/V50DGLatQGhbvBw= Subject key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E053B2423CF369C48E736967B542 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25234 IP: 31.15.8.0/21 IP: 45.10.97.0/24 IP: 45.81.42.0/23 IP: 45.148.80.0/22 IP: 81.95.96.0/20 IP: 185.12.196.0/22 IP: 2a02:4a8::/32 IP: 2a10:bbc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e0:53:b2:42:3c:f3:69:c4:8e:73:69:67:b5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:74:d8:82:69:73:c4:f3:db:17:89:f6:7b:f5: 0d:15:3b:37:c9:f8:b3:83:3a:1f:41:8e:77:3b:d2: cb:3c:08:13:af:93:31:4c:72:5c:d2:1d:09:70:2d: 8b:85:72:68:98:68:5e:2d:a8:01:21:38:8e:8b:de: c7:d0:5f:fb:69:6e:36:bc:48:4a:0f:1a:c0:6a:8e: 32:54:3d:0c:e6:e1:db:45:f1:90:a7:29:8f:b6:2f: 60:d8:92:19:a0:5c:67:75:b3:80:ce:e9:bc:6a:b6: b9:6a:f7:26:c8:36:ff:fb:9e:59:39:2f:92:01:e4: 74:4e:4d:27:f2:8d:7f:bd:bb:8e:af:1a:d6:68:d7: 17:94:fa:19:88:4a:f0:b1:c8:4b:44:d2:1a:28:5c: 87:c2:5d:7e:96:00:ad:e3:49:9f:10:e7:d2:79:f6: 60:29:47:dd:70:77:22:87:85:a8:4c:4b:d1:6d:a4: bf:3a:68:18:ae:14:93:c9:d0:06:a4:83:86:e7:62: cf:09:4e:55:db:f1:a5:eb:ca:9e:c4:aa:a5:26:74: 61:aa:7a:3c:d2:97:20:f3:ce:12:7e:0f:6c:67:7f: e5:d2:91:f8:6b:14:09:b7:64:b1:01:d6:80:64:f3: ee:5a:48:c6:20:e0:8d:22:3b:7a:0a:c0:c3:db:d7: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.8.0/21 45.10.97.0/24 45.81.42.0/23 45.148.80.0/22 81.95.96.0/20 185.12.196.0/22 IPv6: 2a02:4a8::/32 2a10:bbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25234 Signature Algorithm: sha256WithRSAEncryption 09:3c:89:e3:bd:bb:53:e6:5e:28:aa:2f:16:d0:df:7b:39:f8: e0:d8:91:43:4b:54:ab:1d:96:bc:90:56:6f:7f:72:f2:13:59: d9:96:89:9c:d3:80:d0:94:73:23:5c:21:6a:b5:a6:bb:dd:a8: e0:7a:a8:3d:12:28:3b:ea:dd:de:48:f8:fe:2d:75:28:fb:cb: e8:cc:a7:4c:35:02:9d:80:19:bd:3a:55:85:13:ac:57:a6:00: e8:51:45:01:4b:03:30:30:3b:13:66:db:fe:ae:65:5a:03:54: 1a:59:bf:d5:47:8e:f4:34:94:42:ec:28:1f:f9:89:05:f0:bb: 6d:fd:92:c6:55:11:bc:5f:e3:56:e8:0f:6f:6a:ca:17:4f:5a: f0:4c:7b:f3:a3:fa:c6:a2:95:2d:19:ac:c0:f9:ce:d9:a6:1b: 55:91:60:7c:5c:10:d1:4f:99:4c:a6:67:ac:a6:d0:a1:75:84: 84:0a:03:18:82:bf:97:81:8a:09:08:ff:cf:58:61:80:18:67: 7e:64:07:fb:9b:4c:c2:11:a0:3c:ba:00:8e:6c:39:0e:5a:fe: d1:cd:e9:be:43:42:92:55:60:5e:2b:a8:11:7a:9c:cb:2e:c7: 6b:91:33:67:cc:24:6d:c2:8b:db:b3:fe:e2:a6:34:bf:fc:98: b0:35:aa:52 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt5EOBTskI882nEjnNpZ7VCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTNiOTQwNGEwYzQzMjIzYWRkYzhlYTFiMTBhYjc0Yjc3N2EyYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XTYgmlzxPPbF4n2e/UNFTs3yfiz gzofQY53O9LLPAgTr5MxTHJc0h0JcC2LhXJomGheLagBITiOi97H0F/7aW42vEhK DxrAao4yVD0M5uHbRfGQpymPti9g2JIZoFxndbOAzum8ara5avcmyDb/+55ZOS+S AeR0Tk0n8o1/vbuOrxrWaNcXlPoZiErwschLRNIaKFyHwl1+lgCt40mfEOfSefZg KUfdcHcih4WoTEvRbaS/OmgYrhSTydAGpIOG52LPCU5V2/Gl68qexKqlJnRhqno8 0pcg884Sfg9sZ3/l0pH4axQJt2SxAdaAZPPuWkjGIOCNIjt6CsDD29dnswIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFHE7lASgxDIjrdyOobEKt0t3eioBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzdlYzdh Mi04MzE4LTQ2MmYtOTY2ZS03YTUzMWQ0ODM3NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvN2VjN2Ey LTgzMTgtNDYyZi05NjZlLTdhNTMxZDQ4Mzc0Ny8xL2NUdVVCS0RFTWlPdDNJNmhz UXEzUzNkNktnRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQDHw8IAwQALQphAwQBLVEqAwQCLZRQAwQEUV9g AwQCuQzEMBQEAgACMA4DBQAqAgSoAwUAKhC7wDAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgJikjANBgkqhkiG9w0BAQsFAAOCAQEACTyJ4727U+ZeKKovFtDfezn44NiR Q0tUqx2WvJBWb39y8hNZ2ZaJnNOA0JRzI1wharWmu92o4HqoPRIoO+rd3kj4/i11 KPvL6MynTDUCnYAZvTpVhROsV6YA6FFFAUsDMDA7E2bb/q5lWgNUGlm/1UeO9DSU QuwoH/mJBfC7bf2SxlURvF/jVugPb2rKF09a8Ex786P6xqKVLRmswPnO2aYbVZFg fFwQ0U+ZTKZnrKbQoXWEhAoDGIK/l4GKCQj/z1hhgBhnfmQH+5tMwhGgPLoAjmw5 Dlr+0c3pvkNCklVgXiuoEXqcyy7Ha5EzZ8wkbcKL27P+4qY0v/yYsDWqUg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:28 2026 by rpki-client