This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer File: cZLyKnioBxsCo2Ko2zPo8_ct00g.cer (raw, json) Hash identifier: vgT18pYBtKdESkT5XtkTRMALRazwHS2nfi2muJCOFqY= Subject key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C86F60DC94661F68C79808404ECD6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.145.108.0/22 IP: 2a09:5d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:86:f6:0d:c9:46:61:f6:8c:79:80:84:04:ec:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:04:e6:d5:c6:2d:7d:19:16:7a:93:49:c1: 18:a4:b5:36:90:e8:58:aa:7e:a3:65:e2:65:af:ca: ce:a4:c9:ac:d3:9a:c2:65:6b:84:f1:b7:0f:38:f3: f2:63:fb:47:2e:12:78:b1:59:75:5f:d9:ee:5b:6c: 02:2b:44:94:5d:1a:ac:38:1a:96:73:0d:fc:d3:57: 20:8c:74:64:46:b8:d5:7b:64:12:b4:b2:33:b7:7a: 88:57:de:c7:23:3c:b4:c1:44:03:00:4c:4e:0f:fa: 27:98:a5:32:5a:61:db:7b:51:3e:80:7d:c5:c5:76: bd:7c:ea:e9:dd:10:bc:8f:e4:1d:6b:eb:af:83:e9: 2d:ac:82:03:24:9b:0c:a5:e8:fa:d2:c1:20:3f:90: 09:8f:0b:6a:6e:01:12:ac:e9:b2:64:37:b0:e4:f8: e6:9f:dd:65:b1:ff:47:b5:74:64:1f:84:38:28:90: a5:94:c3:a9:6c:f5:d7:9f:78:25:de:fc:e1:42:6b: 2c:88:21:05:76:f0:a0:74:34:95:da:63:35:c1:6f: 75:f3:f3:ef:85:31:a1:ac:19:ef:1a:dd:57:57:03: e1:53:91:41:a0:97:7f:ab:2b:0c:91:4a:3b:1c:08: ab:82:08:0b:ad:3b:a8:5c:70:dc:6b:fe:6f:44:ab: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.108.0/22 IPv6: 2a09:5d80::/29 Signature Algorithm: sha256WithRSAEncryption a2:17:d0:84:d9:cd:b9:27:12:6c:3c:f3:18:56:01:64:61:fc: 9a:61:b8:d5:e0:ee:07:92:0c:48:ff:7c:fe:75:05:19:5f:03: 90:04:68:f5:49:16:26:0f:72:22:e0:ae:36:83:24:0a:bd:f2: e5:59:4f:b8:f1:fb:00:26:1c:6e:cc:79:5a:c5:1f:0d:60:fa: 57:93:78:67:f5:1a:2b:2e:ad:04:7e:4d:1c:7a:aa:ac:bd:42: ca:2d:2a:3b:13:25:15:88:5b:7a:af:e2:d5:2b:5f:86:20:be: 5e:f4:b7:e4:14:0b:9d:9d:e2:59:fc:98:29:9e:af:64:11:d1: 93:ba:6a:89:e4:07:20:d7:dc:e2:a5:bf:a0:66:26:67:d0:ab: 66:d6:ad:75:56:24:02:f2:2b:6c:4f:76:61:91:ee:31:60:ab: 4c:2d:63:ae:1f:c3:1d:41:f7:42:23:94:9e:bf:0a:7f:62:ae: 98:a6:fb:34:cd:43:7a:15:31:2d:6f:ad:b2:dd:61:21:86:4b: cc:99:9c:36:04:81:d5:aa:02:a9:17:02:e6:2a:79:38:80:ae: 08:42:2a:48:f1:1f:59:f2:f2:e0:b3:9c:3b:67:48:2b:8d:4c: 54:01:13:8a:f7:00:f2:8b:f6:e5:7a:eb:70:b5:be:da:18:43: fc:e7:92:2b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XIb2DclGYfaMeYCEBOzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTkyZjIyYTc4YTgwNzFiMDJhMzYyYThkYjMzZThmM2Y3MmRkMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg4E5tXGLX0ZFnqTScEYpLU2kOhY qn6jZeJlr8rOpMms05rCZWuE8bcPOPPyY/tHLhJ4sVl1X9nuW2wCK0SUXRqsOBqW cw3801cgjHRkRrjVe2QStLIzt3qIV97HIzy0wUQDAExOD/onmKUyWmHbe1E+gH3F xXa9fOrp3RC8j+Qda+uvg+ktrIIDJJsMpej60sEgP5AJjwtqbgESrOmyZDew5Pjm n91lsf9HtXRkH4Q4KJCllMOpbPXXn3gl3vzhQmssiCEFdvCgdDSV2mM1wW918/Pv hTGhrBnvGt1XVwPhU5FBoJd/qysMkUo7HAirgggLrTuoXHDca/5vRKvZuwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHGS8ip4qAcbAqNiqNsz6PP3LdNIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2Y3NDUz ZC05NmVjLTRkNGUtOWYzZS0wZThiYzhlODEyZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvZjc0NTNk LTk2ZWMtNGQ0ZS05ZjNlLTBlOGJjOGU4MTJlZS8xL2NaTHlLbmlvQnhzQ28yS28y elBvOF9jdDAwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwJFsMA0EAgACMAcDBQMqCV2AMA0GCSqGSIb3 DQEBCwUAA4IBAQCiF9CE2c25JxJsPPMYVgFkYfyaYbjV4O4HkgxI/3z+dQUZXwOQ BGj1SRYmD3Ii4K42gyQKvfLlWU+48fsAJhxuzHlaxR8NYPpXk3hn9RorLq0Efk0c eqqsvULKLSo7EyUViFt6r+LVK1+GIL5e9LfkFAudneJZ/Jgpnq9kEdGTumqJ5Acg 19zipb+gZiZn0Ktm1q11ViQC8itsT3Zhke4xYKtMLWOuH8MdQfdCI5Sevwp/Yq6Y pvs0zUN6FTEtb62y3WEhhkvMmZw2BIHVqgKpFwLmKnk4gK4IQipI8R9Z8vLgs5w7 Z0grjUxUAROK9wDyi/bleutwtb7aGEP855Ir -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:48 2026 by rpki-client