This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer (raw, json) Hash identifier: hPv5fISk+qaa6yTmkvYVh6lxO2jLhj1orx2pJsEGFdA= Subject key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D4B9D5C5691707CD8D172AC21478 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58333 IP: 193.35.62.0/24 IP: 193.222.51.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d4:b9:d5:c5:69:17:07:cd:8d:17:2a:c2:14:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:80:a6:97:68:6b:f0:fd:2e:d0:55:7f:cf: a4:34:eb:41:b9:b1:cd:2e:e0:2a:14:ba:c1:61:05: 32:d9:f9:94:1e:e9:27:ec:59:c0:9d:e3:b2:54:38: e8:a5:04:78:dd:7f:09:ce:74:db:59:a6:da:d1:c4: 63:fe:02:8a:d0:d9:01:2b:19:ff:fe:cf:fe:ad:84: fb:1b:25:56:f4:6a:d3:65:f9:f4:6f:b4:0f:8a:d3: 89:de:51:ac:4d:70:f3:ff:0f:6b:fd:ac:b8:b4:b0: 60:31:de:79:b4:d3:f2:72:db:47:1e:a1:1c:5e:d0: 6a:8b:98:12:e6:29:a5:89:2f:c5:16:9a:a3:49:d2: fd:d0:90:91:58:ca:23:34:5a:1b:a3:76:0c:f5:95: 46:2a:03:95:2f:51:ef:d8:35:57:e2:5c:bf:c2:2f: 99:09:d4:d7:e8:78:22:0d:77:d8:73:14:2a:18:cf: aa:1b:97:66:de:fc:2e:bb:6b:ac:61:ca:b0:6e:9d: 72:28:d4:25:d6:3c:a2:1f:a6:78:3d:28:a9:51:c0: fc:4b:f4:38:55:88:21:3d:8e:fb:d9:57:47:d0:25: a0:34:d9:5e:4e:83:d3:c7:d6:4a:a4:3f:21:fc:62: 12:03:07:88:35:10:0f:dc:5d:f8:71:9e:bb:38:11: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.62.0/24 193.222.51.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58333 Signature Algorithm: sha256WithRSAEncryption 93:b7:9f:3e:9b:16:4a:1e:32:d7:1c:5d:7e:cf:7b:94:8f:33: 8e:b7:d3:47:03:c7:7b:b2:27:28:92:c9:3a:9d:e2:d5:2c:d1: fd:45:31:6d:59:12:13:a6:5e:49:b1:91:a2:27:b1:b7:89:c2: 7e:9b:c5:6e:91:69:8f:c1:59:5b:4b:0a:9f:1a:24:e6:92:8a: 3e:18:09:a7:56:4a:aa:d7:48:31:92:b7:b2:03:a0:64:0b:66: ba:55:b0:d1:58:a1:d7:37:ad:74:ee:a5:b8:9a:18:0e:84:0e: 7e:e2:94:bf:bc:a2:54:36:6c:9c:a1:57:bc:83:fb:b3:a9:58: 36:fd:fe:c1:cb:ba:6a:55:9c:dc:f5:8b:ca:23:ea:a4:0e:a2: 71:9d:9b:d1:23:fc:a7:b5:55:e5:6b:b4:c2:e7:d9:b9:c9:f5: 9e:08:74:d0:7d:34:eb:18:90:66:54:b1:41:c1:62:17:51:ff: d8:f9:b6:66:d9:ff:69:42:22:d4:f6:31:81:a4:97:01:5a:5c: 62:e2:90:49:c9:69:f0:77:98:d2:28:cf:42:11:2c:75:88:35: 17:c8:64:d9:22:75:7e:eb:47:6d:6a:0a:b8:d7:41:aa:44:1f: 07:3b:53:ec:8d:3f:bf:3a:94:b6:73:fc:9d:f8:28:1d:e4:d7: b2:62:7c:0c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5ENS51cVpFwfNjRcqwhR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQzOWQ2YzUwZGQzMDllZTkyODZjMzAyZGZiMTUyNDViZGJhZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3CAppdoa/D9LtBVf8+kNOtBubHN LuAqFLrBYQUy2fmUHukn7FnAneOyVDjopQR43X8JznTbWaba0cRj/gKK0NkBKxn/ /s/+rYT7GyVW9GrTZfn0b7QPitOJ3lGsTXDz/w9r/ay4tLBgMd55tNPycttHHqEc XtBqi5gS5imliS/FFpqjSdL90JCRWMojNFobo3YM9ZVGKgOVL1Hv2DVX4ly/wi+Z CdTX6HgiDXfYcxQqGM+qG5dm3vwuu2usYcqwbp1yKNQl1jyiH6Z4PSipUcD8S/Q4 VYghPY772VdH0CWgNNleToPTx9ZKpD8h/GISAweINRAP3F34cZ67OBH44wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFHHTnWxQ3TCe6ShsMC37FSRb268jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2IxZTYz Yi0wMWFiLTRjMDUtODRhNy00NWUxYzc3YTE4YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYjFlNjNi LTAxYWItNGMwNS04NGE3LTQ1ZTFjNzdhMThjMC8xL2NkT2RiRkRkTUo3cEtHd3dM ZnNWSkZ2YnJ5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwSM+AwQAwd4zMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDj3TANBgkqhkiG9w0BAQsFAAOCAQEAk7efPpsWSh4y1xxdfs97lI8z jrfTRwPHe7InKJLJOp3i1SzR/UUxbVkSE6ZeSbGRoiext4nCfpvFbpFpj8FZW0sK nxok5pKKPhgJp1ZKqtdIMZK3sgOgZAtmulWw0Vih1zetdO6luJoYDoQOfuKUv7yi VDZsnKFXvIP7s6lYNv3+wcu6alWc3PWLyiPqpA6icZ2b0SP8p7VV5Wu0wufZucn1 ngh00H006xiQZlSxQcFiF1H/2Pm2Ztn/aUIi1PYxgaSXAVpcYuKQSclp8HeY0ijP QhEsdYg1F8hk2SJ1futHbWoKuNdBqkQfBztT7I0/vzqUtnP8nfgoHeTXsmJ8DA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:23 2026 by rpki-client