This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer File: cfXp6ogwX30xahKh1J2w6fuJbOE.cer (raw, json) Hash identifier: hipSbQ02OefJ9ylVrDdsfm2CdhzgdG/r7Ln5xkSnUZE= Subject key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD697F862AF5E62862DD0664478FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.191.0/24 IP: 193.56.225.0/24 IP: 193.57.66.0 -- 193.57.71.255 IP: 193.57.156.0 -- 193.57.158.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d6:97:f8:62:af:5e:62:86:2d:d0:66:44:78:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:f6:01:0d:8f:ef:46:42:91:d0:e1:41:79: da:50:28:14:19:49:6a:04:06:32:47:39:8c:32:c6: 74:d8:29:58:46:af:22:21:66:23:4e:9a:6d:ba:2e: 83:7c:c3:23:25:35:3a:aa:e1:08:a0:16:d8:6e:fb: a9:3b:e0:86:07:01:50:20:c8:66:fe:a6:54:73:e1: c8:64:bb:0a:cf:61:e9:69:18:c0:87:02:50:38:39: 0c:f0:77:94:c5:d5:cc:d3:63:77:b3:72:c3:7b:e3: e3:01:87:74:90:5c:1e:01:45:d2:23:f0:e1:f7:a0: ee:c1:2c:5e:d4:a6:3e:35:ac:60:e0:50:c5:4a:d3: 37:33:f9:02:a4:75:49:cd:c4:12:7f:b3:6b:1d:39: 32:60:6f:59:f3:c9:7b:9e:ba:a8:71:73:ab:c7:e4: 59:eb:03:ea:74:a7:c9:db:1a:59:8d:80:97:41:87: e0:3c:e5:28:ed:2d:59:d1:a6:39:8a:3e:2a:ba:db: f9:47:94:2a:68:b6:2e:39:4b:dc:b1:1d:31:4a:ef: 9a:a1:d7:64:4c:25:36:57:0d:9c:07:d9:64:ea:35: bd:9e:e7:52:07:58:8b:31:56:80:1e:d7:68:a0:59: a1:c8:a0:7f:4b:b4:c0:ca:cd:e8:c2:40:7f:d3:b1: 32:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.191.0/24 193.56.225.0/24 193.57.66.0-193.57.71.255 193.57.156.0-193.57.158.255 Signature Algorithm: sha256WithRSAEncryption 6b:a1:29:fc:db:03:7a:46:8c:0e:82:4c:03:e0:a0:1e:bf:02: e9:21:be:8b:58:3c:10:6f:0b:7c:17:37:ee:4f:4e:79:dc:5c: 80:d9:00:8e:f2:a8:19:d5:e8:a3:94:e5:3f:88:6d:83:10:f7: 6c:35:20:c2:a1:56:de:0e:15:13:00:07:bd:9c:1f:ef:c3:b9: d1:8c:d0:e1:cc:71:ba:a9:14:78:7e:a4:1e:fe:95:8f:af:2a: 1f:89:56:67:60:d1:bd:5c:e3:b5:b9:bc:41:c7:6d:fb:80:d2: 6f:fd:3c:fa:69:c1:4f:b9:03:3c:ea:d0:ed:df:89:d1:4f:02: 43:22:b8:43:70:b1:96:a0:c6:27:b5:e3:b6:3d:c3:f5:39:23: ee:38:35:62:13:83:49:0e:d4:b9:b0:9a:95:2c:c5:80:4d:bd: c8:4c:96:e3:fe:63:aa:8c:dd:46:2b:00:77:a5:b7:22:70:b3: b7:b5:7b:49:8c:ea:9d:78:39:4a:c8:cf:05:31:e1:c4:2f:ba: 29:fd:7b:ff:36:2e:a6:e0:8f:c5:f1:a9:77:53:c4:df:e3:09: 05:af:de:fb:7c:ab:5c:a8:a7:80:79:8d:04:fa:1d:cf:78:7d: 42:ed:2f:59:21:a9:4a:a9:f5:57:8e:eb:cb:25:ad:f8:4c:83: 5e:c7:46:9c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt26taX+GKvXmKGLdBmRHj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWY1ZTllYTg4MzA1ZjdkMzE2YTEyYTFkNDlkYjBlOWZiODk2Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiP2AQ2P70ZCkdDhQXnaUCgUGUlq BAYyRzmMMsZ02ClYRq8iIWYjTpptui6DfMMjJTU6quEIoBbYbvupO+CGBwFQIMhm /qZUc+HIZLsKz2HpaRjAhwJQODkM8HeUxdXM02N3s3LDe+PjAYd0kFweAUXSI/Dh 96DuwSxe1KY+Naxg4FDFStM3M/kCpHVJzcQSf7NrHTkyYG9Z88l7nrqocXOrx+RZ 6wPqdKfJ2xpZjYCXQYfgPOUo7S1Z0aY5ij4qutv5R5QqaLYuOUvcsR0xSu+aoddk TCU2Vw2cB9lk6jW9nudSB1iLMVaAHtdooFmhyKB/S7TAys3owkB/07EydwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFHH16eqIMF99MWoSodSdsOn7iWzhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmLzc0OTM0 Ni1iMDhmLTQ5MzEtOGQ0YS0wNTM4YTNhMTRkZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvNzQ5MzQ2 LWIwOGYtNDkzMS04ZDRhLTA1MzhhM2ExNGRmZC8xL2NmWHA2b2d3WDMweGFoS2gx SjJ3NmZ1SmJPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAuBAIAATAoAwQAW8a/AwQAwTjhMAwDBAHBOUIDBAPBOUAwDAME AsE5nAMEAME5njANBgkqhkiG9w0BAQsFAAOCAQEAa6Ep/NsDekaMDoJMA+CgHr8C 6SG+i1g8EG8LfBc37k9OedxcgNkAjvKoGdXoo5TlP4htgxD3bDUgwqFW3g4VEwAH vZwf78O50YzQ4cxxuqkUeH6kHv6Vj68qH4lWZ2DRvVzjtbm8Qcdt+4DSb/08+mnB T7kDPOrQ7d+J0U8CQyK4Q3CxlqDGJ7Xjtj3D9Tkj7jg1YhODSQ7UubCalSzFgE29 yEyW4/5jqozdRisAd6W3InCzt7V7SYzqnXg5SsjPBTHhxC+6Kf17/zYupuCPxfGp d1PE3+MJBa/e+3yrXKingHmNBPodz3h9Qu0vWSGpSqn1V47ryyWt+EyDXsdGnA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:36:28 2026 by rpki-client