This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer File: cnPNrMHijwIT37KPPf2LnL3Txi4.cer (raw, json) Hash identifier: s5MFUh7dewCF+D3f+g5+jWu4Goa57yWbOu9lKRlPojs= Subject key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CCDECB62EFBAFC97D481273A06444 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208141 IP: 84.234.118.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cd:ec:b6:2e:fb:af:c9:7d:48:12:73:a0:64:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:b2:3b:78:fc:24:d7:ef:fd:57:0b:1e:91: 99:2a:81:60:ee:64:85:b1:a1:a0:7b:23:e4:a5:fa: e4:76:fa:da:1b:12:dc:fd:f3:28:8b:03:3f:a2:e2: d3:06:93:cc:cb:ce:da:fe:fd:59:57:2b:95:58:1a: 42:7a:dd:c5:25:dc:2a:88:76:46:ae:16:fc:ec:37: 6b:32:75:1f:ab:18:0c:4c:87:a8:e2:a5:d4:8f:db: 1f:f1:11:d1:bd:43:7d:dc:59:ee:ad:aa:a0:94:00: c7:40:ba:ed:3a:d0:bc:0d:e5:11:bb:98:f6:25:92: 0c:8b:7c:84:85:4f:7a:eb:a3:35:60:2b:f9:36:c1: 7e:0e:f3:2c:22:0a:db:89:45:5d:71:a2:b4:6e:36: ea:4a:76:34:4a:d7:ec:5b:f5:ca:05:86:8d:c3:f6: e5:3f:58:98:cb:f9:9d:92:ef:c9:ea:e8:5a:f8:cf: 8c:bb:fb:d9:56:c4:81:2f:23:b7:ce:bd:cf:65:97: bf:51:a3:93:e5:e4:5b:45:e6:45:7c:cb:2a:fa:6d: e9:27:bd:85:26:74:a4:ac:e5:2c:59:7b:68:f5:d4: 6a:28:83:8a:e6:b5:5b:b7:02:4e:3e:43:ba:53:4e: 3d:bc:c5:1e:12:62:c2:f7:93:55:32:46:8d:b6:19: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.118.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208141 Signature Algorithm: sha256WithRSAEncryption 7a:3b:3d:14:58:97:c4:9a:30:64:da:bf:f8:73:ff:de:4d:f9: d2:2c:43:8c:c7:b3:a6:a0:5b:ac:62:c1:6b:9d:56:70:c6:e0: 69:8a:2a:e6:41:7b:d0:35:31:f7:4b:2d:61:08:ce:b1:f0:38: d0:ba:3c:22:0b:00:e9:a3:7a:fe:dc:50:b4:c5:d5:5b:90:4b: c0:b2:32:49:ac:56:9c:7a:26:99:de:bb:4e:16:05:2b:b6:4e: e7:d0:6c:e9:97:0f:db:cb:0b:57:cf:2f:95:2e:59:f4:bb:e3: 25:39:72:38:5d:3a:e4:0f:5b:2b:7a:c8:20:7d:27:9f:35:09: 0a:c1:9f:fe:48:3c:48:4e:75:b1:23:42:f7:35:07:93:da:c3: f6:90:7a:84:fc:b5:9a:60:26:50:4f:a1:5e:95:76:73:ea:d1: 6a:8c:fa:f3:60:53:cb:06:38:e4:e2:4a:e3:0c:48:65:83:fd: bf:97:9a:37:ea:41:f2:5f:00:0d:30:cf:5a:2e:84:e9:1a:83: 58:77:c8:28:6c:05:49:27:e7:67:b7:37:be:24:b5:ab:07:da: ab:11:b1:2a:4d:ca:d6:60:a5:a4:ec:f4:b0:d6:ca:2e:ae:80: 42:61:a9:64:72:f3:88:82:3d:11:67:80:42:2f:1d:d2:4b:eb: 63:31:63:a0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XM3sti77r8l9SBJzoGREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjczY2RhY2MxZTI4ZjAyMTNkZmIyOGYzZGZkOGI5Y2JkZDNjNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosGyO3j8JNfv/VcLHpGZKoFg7mSF saGgeyPkpfrkdvraGxLc/fMoiwM/ouLTBpPMy87a/v1ZVyuVWBpCet3FJdwqiHZG rhb87DdrMnUfqxgMTIeo4qXUj9sf8RHRvUN93FnuraqglADHQLrtOtC8DeURu5j2 JZIMi3yEhU9666M1YCv5NsF+DvMsIgrbiUVdcaK0bjbqSnY0StfsW/XKBYaNw/bl P1iYy/mdku/J6uha+M+Mu/vZVsSBLyO3zr3PZZe/UaOT5eRbReZFfMsq+m3pJ72F JnSkrOUsWXto9dRqKIOK5rVbtwJOPkO6U049vMUeEmLC95NVMkaNthnJpwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHJzzazB4o8CE9+yjz39i5y908YuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1Lzk4YzMw NC02NTMyLTRhYzYtYTE2Mi1jMGEyNWIxMDkwMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOThjMzA0 LTY1MzItNGFjNi1hMTYyLWMwYTI1YjEwOTAyYS8xL2NuUE5yTUhpandJVDM3S1BQ ZjJMbkwzVHhpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBVOp2MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMtDTANBgkqhkiG9w0BAQsFAAOCAQEAejs9FFiXxJowZNq/+HP/3k350ixDjMez pqBbrGLBa51WcMbgaYoq5kF70DUx90stYQjOsfA40Lo8IgsA6aN6/txQtMXVW5BL wLIySaxWnHommd67ThYFK7ZO59Bs6ZcP28sLV88vlS5Z9LvjJTlyOF065A9bK3rI IH0nnzUJCsGf/kg8SE51sSNC9zUHk9rD9pB6hPy1mmAmUE+hXpV2c+rRaoz682BT ywY45OJK4wxIZYP9v5eaN+pB8l8ADTDPWi6E6RqDWHfIKGwFSSfnZ7c3viS1qwfa qxGxKk3K1mClpOz0sNbKLq6AQmGpZHLziII9EWeAQi8d0kvrYzFjoA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:55 2026 by rpki-client