This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer (raw, json) Hash identifier: RQ4J8djJadFjcZzAlFOYzoHVZaaOiRayGCeyj9NsVvU= Subject key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791146404DFCD7EB98E5DF662766352E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211937 IP: 185.230.199.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:40:4d:fc:d7:eb:98:e5:df:66:27:66:35:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=716752b91747957dccff0e71da674f329d832de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:85:14:f0:18:0a:b8:29:ea:07:d2:6b:c1: d6:25:61:38:3b:bf:d7:91:8c:da:8e:2c:07:c4:72: 72:53:f2:e5:ae:bd:c8:ec:d7:bd:c9:33:0e:66:a8: ae:8d:9c:30:be:e7:54:17:38:6b:08:2f:73:36:18: 92:74:36:e9:f5:22:64:53:12:be:32:77:40:d4:a7: 2f:c9:36:fe:3f:2f:f4:97:8a:32:41:82:5a:ba:45: 35:a3:80:a8:e5:57:4a:66:a6:b7:3d:15:ec:96:1f: 6b:f4:0c:c1:7f:50:25:e9:5a:26:58:70:6d:6b:9c: 39:8d:56:77:39:1f:18:6f:f6:fd:d2:e7:9e:c0:6c: b4:a2:83:6e:e7:35:57:d4:96:28:91:d8:64:99:88: a8:97:e9:c3:42:d0:f8:b7:de:e2:1a:a8:18:87:bd: f5:d1:74:5b:90:da:67:59:e1:07:90:2f:54:8a:13: f1:56:b9:da:5d:19:7b:3f:1d:c5:fa:24:d3:81:87: 0c:40:d0:21:dc:38:4e:c4:5b:90:64:27:da:a5:aa: 5a:89:5f:cd:47:fe:11:4b:28:c5:30:45:e9:b7:4a: 30:43:ca:95:3c:1f:88:6f:f3:61:fb:de:6b:4c:31: 17:65:ed:88:e4:8a:e6:02:0d:11:81:a0:04:c0:c6: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.199.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211937 Signature Algorithm: sha256WithRSAEncryption 49:ac:82:83:37:4c:a7:16:8b:9a:5e:81:40:8c:a3:ea:fe:fd: 7e:73:5d:c8:8d:d4:79:b5:92:bc:21:47:03:c6:b1:ae:f0:0b: ba:10:ef:0e:36:f2:90:c3:1f:c2:f0:c5:29:e9:b3:32:38:50: 90:62:be:fb:93:85:c8:07:af:44:91:70:3d:00:af:02:80:d6: f7:a8:ca:38:b5:4d:ef:0c:7d:bd:8f:51:47:15:28:08:a2:57: a8:3f:fe:9d:9e:b1:33:3b:ae:a1:ee:e2:d8:d4:a1:b0:87:fe: d4:41:cb:d0:d1:2c:b6:7c:4b:8d:12:dd:7b:45:5d:b9:96:0a: 79:a6:a4:20:bb:4e:d2:1a:8f:29:1a:d4:6c:cd:f4:8e:44:3a: 68:a8:ce:1a:90:0c:55:3b:64:51:4e:35:f8:2a:6c:d8:72:1a: 5d:d6:57:23:11:cd:b9:b8:86:9b:ca:0c:14:b4:df:45:d3:15: e1:ab:20:ce:f7:32:fe:79:da:4e:5f:9c:63:8c:c1:1c:78:0d: 3e:4e:dd:b1:2a:07:00:cf:eb:e9:90:33:27:9a:82:78:5f:14: 1e:92:2a:5a:1d:f3:18:33:1c:18:61:7a:fc:1a:ff:8a:58:d6: 37:57:8d:5a:3b:cc:54:c2:43:5e:0d:a5:3b:de:18:5f:8c:32: 36:30:11:1b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EUZATfzX65jl32YnZjUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTY3NTJiOTE3NDc5NTdkY2NmZjBlNzFkYTY3NGYzMjlkODMyZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7+FFPAYCrgp6gfSa8HWJWE4O7/X kYzajiwHxHJyU/Llrr3I7Ne9yTMOZqiujZwwvudUFzhrCC9zNhiSdDbp9SJkUxK+ MndA1KcvyTb+Py/0l4oyQYJaukU1o4Co5VdKZqa3PRXslh9r9AzBf1Al6VomWHBt a5w5jVZ3OR8Yb/b90ueewGy0ooNu5zVX1JYokdhkmYiol+nDQtD4t97iGqgYh731 0XRbkNpnWeEHkC9UihPxVrnaXRl7Px3F+iTTgYcMQNAh3DhOxFuQZCfapapaiV/N R/4RSyjFMEXpt0owQ8qVPB+Ib/Nh+95rTDEXZe2I5IrmAg0RgaAEwMZDnwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHFnUrkXR5V9zP8OcdpnTzKdgy3jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzcwZDQ1 MC04MGU0LTQ0ZjktOTlmMy0yMWJjNjNmMTY1ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvNzBkNDUw LTgwZTQtNDRmOS05OWYzLTIxYmM2M2YxNjVmOC8xL2NXZFN1UmRIbFgzTV93NXgy bWRQTXAyRExlTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuebHMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM74TANBgkqhkiG9w0BAQsFAAOCAQEASayCgzdMpxaLml6BQIyj6v79fnNdyI3U ebWSvCFHA8axrvALuhDvDjbykMMfwvDFKemzMjhQkGK++5OFyAevRJFwPQCvAoDW 96jKOLVN7wx9vY9RRxUoCKJXqD/+nZ6xMzuuoe7i2NShsIf+1EHL0NEstnxLjRLd e0VduZYKeaakILtO0hqPKRrUbM30jkQ6aKjOGpAMVTtkUU41+Cps2HIaXdZXIxHN ubiGm8oMFLTfRdMV4asgzvcy/nnaTl+cY4zBHHgNPk7dsSoHAM/r6ZAzJ5qCeF8U HpIqWh3zGDMcGGF6/Br/iljWN1eNWjvMVMJDXg2lO94YX4wyNjARGw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:36 2026 by rpki-client