This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer File: cVOwKU08jbFTBqsQnVBtp0rnCXk.cer (raw, json) Hash identifier: reIVauhklPcE/XcAGO9K74bh3L2HDEnxienxKdXFdqw= Subject key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED327BE3FC6B6B260DC1BAB23F3BB5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5470 IP: 155.207.0.0/16 IP: 192.104.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:32:7b:e3:fc:6b:6b:26:0d:c1:ba:b2:3f:3b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7153b0294d3c8db15306ab109d506da74ae70979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:6e:ce:ff:37:d6:a6:02:93:61:01:5c:0e: c2:b4:56:df:63:3e:4b:50:36:9e:26:ed:2c:17:c8: 1e:0a:4f:7b:8d:6e:6c:90:9a:94:ec:89:11:82:e3: c2:c2:1d:ba:7c:60:c9:bd:c7:13:a0:8a:fa:6e:2e: f7:58:cd:80:56:ac:cf:f8:23:55:7d:ef:ac:95:13: b4:aa:29:26:ff:b5:c7:84:4a:89:0a:ab:4e:17:9d: b1:3e:53:24:bd:f2:6d:61:0f:f6:94:13:ae:c7:83: ce:02:eb:81:0d:cc:8e:ce:21:33:a6:1d:39:00:2f: 05:a9:40:f9:ca:f7:1c:be:80:96:97:c7:63:f3:b3: 47:02:ab:4c:3c:89:2e:e3:90:05:de:21:be:f5:52: 34:8f:b5:25:f4:ed:a3:90:78:1a:dd:01:d6:b4:43: ea:ad:83:f6:37:7e:a4:d0:24:70:0e:b7:81:f8:5b: 7f:75:c0:d9:1b:9b:1c:e8:56:9b:03:99:91:97:9c: ab:3b:34:bf:99:92:42:21:d1:d6:12:25:ad:7e:8b: 34:09:b3:1a:ac:b6:e1:2d:16:57:43:97:7e:d5:d8: ce:6c:af:4e:b1:22:17:81:e5:23:e0:07:8c:f6:84: b3:c5:b5:9e:cc:d9:e3:2a:bf:8c:66:3b:27:13:d2: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.207.0.0/16 192.104.147.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5470 Signature Algorithm: sha256WithRSAEncryption 20:aa:15:05:82:02:81:f9:f0:75:cf:2f:b2:33:75:a8:cd:77: 00:bf:13:09:f2:67:40:f3:6f:e3:7c:08:4f:ec:ee:de:01:89: ee:21:b3:04:68:dd:f8:3e:11:5c:81:53:c0:be:23:91:b0:d1: 84:5c:4a:a4:c4:a3:c9:6d:07:35:f4:64:71:90:25:e7:3e:7a: 6e:88:cb:e5:e8:07:ec:bd:71:73:54:a5:80:6f:5a:e0:31:93: 76:c4:71:aa:20:59:02:9b:58:c8:9e:61:3b:e7:e9:4a:be:ec: 43:5d:c1:96:37:9a:a3:4a:38:f7:41:5e:36:fa:45:a0:f3:5f: 08:f9:b6:9d:cf:0c:25:63:83:e3:81:f9:e3:be:1d:17:94:6d: 74:8a:d7:d9:6a:e6:e6:34:f7:c1:a5:64:71:4b:50:5f:6d:7e: c9:2b:97:78:b4:b0:86:a6:8c:ad:46:0d:24:22:43:67:bf:ec: 93:c3:e4:cc:6d:6b:8a:a0:f9:6e:18:40:5e:5d:20:45:f6:94: dc:14:33:4d:00:8e:e6:b0:6b:3a:a9:54:d5:27:bd:ee:e7:1f: c3:ea:0a:84:97:66:e0:5f:58:99:6c:74:08:08:da:e9:a3:63: f9:be:8d:f7:c6:8c:26:79:4b:64:7c:66:1d:33:35:dc:92:9c: 74:a6:6e:ac -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt87TJ74/xrayYNwbqyPzu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTUzYjAyOTRkM2M4ZGIxNTMwNmFiMTA5ZDUwNmRhNzRhZTcwOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVNuzv831qYCk2EBXA7CtFbfYz5L UDaeJu0sF8geCk97jW5skJqU7IkRguPCwh26fGDJvccToIr6bi73WM2AVqzP+CNV fe+slRO0qikm/7XHhEqJCqtOF52xPlMkvfJtYQ/2lBOux4POAuuBDcyOziEzph05 AC8FqUD5yvccvoCWl8dj87NHAqtMPIku45AF3iG+9VI0j7Ul9O2jkHga3QHWtEPq rYP2N36k0CRwDreB+Ft/dcDZG5sc6FabA5mRl5yrOzS/mZJCIdHWEiWtfos0CbMa rLbhLRZXQ5d+1djObK9OsSIXgeUj4AeM9oSzxbWezNnjKr+MZjsnE9K8FwIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFHFTsClNPI2xUwarEJ1QbadK5wl5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzc2NmUx Mi05YTA5LTQ1NTMtOGY2Mi0yMjk0Y2RkYTZhNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvNzY2ZTEy LTlhMDktNDU1My04ZjYyLTIyOTRjZGRhNmE0MC8xL2NWT3dLVTA4amJGVEJxc1Fu VkJ0cDBybkNYay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAm88DBADAaJMwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICFV4wDQYJKoZIhvcNAQELBQADggEBACCqFQWCAoH58HXPL7IzdajNdwC/ EwnyZ0Dzb+N8CE/s7t4Bie4hswRo3fg+EVyBU8C+I5Gw0YRcSqTEo8ltBzX0ZHGQ Jec+em6Iy+XoB+y9cXNUpYBvWuAxk3bEcaogWQKbWMieYTvn6Uq+7ENdwZY3mqNK OPdBXjb6RaDzXwj5tp3PDCVjg+OB+eO+HReUbXSK19lq5uY098GlZHFLUF9tfskr l3i0sIamjK1GDSQiQ2e/7JPD5Mxta4qg+W4YQF5dIEX2lNwUM00AjuawazqpVNUn ve7nH8PqCoSXZuBfWJlsdAgI2umjY/m+jffGjCZ5S2R8Zh0zNdySnHSmbqw= -----END CERTIFICATE-----Generated at Mon Feb 2 15:56:11 2026 by rpki-client