This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer File: cc2ljxUk2CM2224M8qKf-vLaifg.cer (raw, json) Hash identifier: cS9fvxm751kvGBxrEaySh6TaQCBmJX/4b1UvCRzPMgo= Subject key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE594E7A7E7DE9554E96881032D107 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13059 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:59:4e:7a:7e:7d:e9:55:4e:96:88:10:32:d1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:0f:69:3b:4a:8b:b8:7d:68:89:2b:8e:d1: e6:cd:31:d4:a1:c0:e5:68:5f:55:32:33:3c:93:32: 1c:a7:9b:34:d3:82:fe:3f:ab:7c:67:65:2f:77:c2: 65:2e:0b:d8:bc:03:a0:2e:12:5c:4d:f2:95:b0:3a: 95:5c:e5:22:4b:64:5e:86:a0:f8:2c:d6:d1:e3:92: a8:43:0f:c0:88:12:95:36:23:eb:95:c1:28:ec:09: 4c:f8:89:60:bc:88:dd:b3:81:81:30:57:32:11:4b: 5d:95:5b:51:b3:93:c4:37:f2:e6:b4:35:b4:da:5b: a4:06:9f:cb:55:1b:42:63:c5:80:c3:ef:ff:d8:0a: 5b:69:6d:67:85:a3:ff:98:08:94:03:25:cc:b0:9e: 62:b9:74:6d:7e:93:67:15:39:33:03:ad:a5:a5:01: 69:e9:34:9f:b4:48:9a:19:ac:dc:d0:29:73:54:a0: a7:2d:c2:a4:54:2a:c5:9f:d6:ce:5d:a9:7a:78:e0: 29:5b:79:33:9b:3f:67:97:b8:9f:aa:58:fb:de:ad: 26:81:ae:8a:cf:54:ac:2c:e1:57:9f:f7:db:57:11: 6e:ab:7f:6b:8d:14:e1:a8:17:29:1f:f7:f9:e3:95: da:1f:cd:29:04:21:79:c0:62:93:71:78:38:79:36: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 13059 Signature Algorithm: sha256WithRSAEncryption 54:b1:8c:7b:f3:58:2e:da:c3:6d:0c:27:06:78:46:0f:01:c6: fc:24:40:95:d7:52:04:11:39:10:1d:d8:fb:a7:31:2d:0f:8b: 05:56:df:c4:d8:bf:c0:bd:97:bc:ab:6e:7d:84:c5:4e:8d:9d: d8:2e:99:59:0a:79:06:4c:49:bd:a8:3a:59:2c:7c:b0:18:70: 68:ec:91:68:06:71:56:09:cc:99:3e:24:5f:51:6e:d7:b6:01: be:df:f2:45:e7:28:0d:e8:8e:f6:56:c1:6a:00:d1:74:e4:d7: e0:a8:4a:14:15:4a:5d:cc:04:ba:c1:79:ea:93:84:2e:51:a4: b2:b8:d4:a9:f8:cd:f7:2d:e4:78:0b:af:1d:9f:42:e2:85:02: 92:09:8c:33:2f:bf:9f:6a:4e:5a:02:de:47:78:25:a7:fa:7e: 6e:7d:02:0a:73:5e:3d:4c:33:fc:38:6e:79:17:d2:b6:c5:68: 59:30:60:b1:bf:bf:ee:76:d9:c9:68:97:3e:f5:50:5e:7f:a1: 23:d8:ac:33:e1:4f:2b:1f:47:c7:e2:ec:cf:4b:e5:ef:bf:83: 80:de:83:e0:4b:b1:92:3a:1a:de:88:ac:ce:05:10:50:83:f5: af:e9:45:d1:cc:bb:12:7e:34:dd:49:17:13:c2:8c:91:1d:32: d4:61:bb:b0 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt87llOen596VVOlogQMtEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWNkYTU4ZjE1MjRkODIzMzZkYjZlMGNmMmEyOWZmYWYyZGE4OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrcPaTtKi7h9aIkrjtHmzTHUocDl aF9VMjM8kzIcp5s004L+P6t8Z2Uvd8JlLgvYvAOgLhJcTfKVsDqVXOUiS2RehqD4 LNbR45KoQw/AiBKVNiPrlcEo7AlM+IlgvIjds4GBMFcyEUtdlVtRs5PEN/LmtDW0 2lukBp/LVRtCY8WAw+//2ApbaW1nhaP/mAiUAyXMsJ5iuXRtfpNnFTkzA62lpQFp 6TSftEiaGazc0ClzVKCnLcKkVCrFn9bOXal6eOApW3kzmz9nl7ifqlj73q0mga6K z1SsLOFXn/fbVxFuq39rjRThqBcpH/f545XaH80pBCF5wGKTcXg4eTYS0wIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFHHNpY8VJNgjNttuDPKin/ry2on4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2EzNTU0 MC1hYTU4LTRhM2MtYWI0NS1iYzJkMTdmZThiZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYTM1NTQw LWFhNTgtNGEzYy1hYjQ1LWJjMmQxN2ZlOGJlYi8xL2NjMmxqeFVrMkNNMjIyNE04 cUtmLXZMYWlmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjMDMA0GCSqGSIb3DQEBCwUAA4IBAQBUsYx781gu2sNt DCcGeEYPAcb8JECV11IEETkQHdj7pzEtD4sFVt/E2L/AvZe8q259hMVOjZ3YLplZ CnkGTEm9qDpZLHywGHBo7JFoBnFWCcyZPiRfUW7XtgG+3/JF5ygN6I72VsFqANF0 5NfgqEoUFUpdzAS6wXnqk4QuUaSyuNSp+M33LeR4C68dn0LihQKSCYwzL7+fak5a At5HeCWn+n5ufQIKc149TDP8OG55F9K2xWhZMGCxv7/udtnJaJc+9VBef6Ej2Kwz 4U8rH0fH4uzPS+Xvv4OA3oPgS7GSOhreiKzOBRBQg/Wv6UXRzLsSfjTdSRcTwoyR HTLUYbuw -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:56 2026 by rpki-client