This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer File: cspFbK0jiDCzjs1NJnys-lzV8fE.cer (raw, json) Hash identifier: uEVPVxZ8gJGe7oEAc0LbT304PQEkI7fZ/+Q+ttF0W2Q= Subject key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED36E49DB1F4D27438254F51152618 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39146 IP: 194.26.76.0/22 IP: 2a0c:fbc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:36:e4:9d:b1:f4:d2:74:38:25:4f:51:15:26:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:5c:a3:a4:bd:8c:db:a7:bd:e7:10:50:3b: 6a:81:57:03:13:c6:a7:be:33:c1:70:63:4f:b2:01: 23:cd:c4:29:8e:ba:81:57:d7:9b:70:5b:84:c3:cb: 92:5e:ba:53:bb:fc:82:ec:3d:4b:5e:e2:32:c4:72: 48:d4:ce:70:d5:3a:09:ec:7a:c2:68:dc:cc:8a:8a: 36:bd:dd:bc:ea:55:ce:40:a0:78:6e:e5:35:62:aa: fc:4b:e7:0a:b8:73:15:03:aa:5e:52:a8:96:cc:55: 61:1a:cd:89:59:6e:6f:08:3d:7e:f0:89:95:54:a5: bd:26:d6:e0:f3:55:cd:ec:9c:d8:25:d4:ad:87:9d: 5b:48:f2:55:65:54:5e:8f:1a:4d:f5:91:ac:78:f1: c0:89:80:bb:df:d2:10:90:7c:51:68:e3:99:55:86: 1e:bb:96:ab:71:9c:02:8c:64:33:91:48:27:40:3b: ea:77:23:21:87:f5:2d:76:1b:c7:2d:a5:34:0b:e3: 0d:59:23:09:14:2c:8c:17:e0:6d:c9:a7:90:23:52: c3:72:f7:7d:ae:87:12:bb:b3:ca:2c:87:63:48:86: c3:06:ab:b0:7b:0b:5a:c8:52:86:27:cc:01:03:27: 6d:a0:d5:79:98:3d:f7:89:51:1e:b8:db:74:f4:e4: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.76.0/22 IPv6: 2a0c:fbc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39146 Signature Algorithm: sha256WithRSAEncryption 52:9c:e8:bc:8a:41:d8:e6:fa:95:15:75:2a:5d:06:16:25:84: 39:cd:74:45:e7:11:75:a5:50:8f:c0:a4:bb:4a:6f:c8:93:73: 5e:b9:a9:ef:50:58:8b:71:c7:a8:01:75:e0:f6:97:cd:c5:ab: e2:64:98:b3:b2:f5:1d:24:40:21:2d:0f:cd:6e:25:af:fb:49: a6:61:74:d0:b1:d0:a9:00:1f:01:5c:ed:e5:12:3d:53:f6:5c: dc:f7:cf:a8:3d:73:78:d2:82:57:28:e2:00:18:f9:c3:e2:2e: 18:fc:1e:06:2e:53:69:b4:cb:4b:e2:e7:e4:69:c8:43:70:ac: ad:97:12:55:4f:26:66:8f:37:b8:60:7a:cf:50:4a:c1:ae:50: 89:22:fe:33:dc:db:79:f8:48:93:f6:09:44:79:ce:9c:8f:d5: 3b:95:9a:c8:ae:96:4a:6f:61:43:76:e0:13:0e:70:bd:25:15: b8:02:ac:10:d5:da:9c:fc:85:8f:1e:1d:c8:35:c6:c1:0d:82: a4:f2:52:68:05:93:2c:1a:a5:86:7d:10:01:c0:1c:6d:26:57: 33:98:e5:ad:71:11:9d:52:34:9a:76:7c:0a:76:1a:a6:dc:92: 15:74:80:ed:fa:61:9e:9d:f8:68:ef:ee:08:df:e7:d4:d7:c7: 70:af:5a:0a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87TbknbH00nQ4JU9RFSYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmNhNDU2Y2FkMjM4ODMwYjM4ZWNkNGQyNjdjYWNmYTVjZDVmMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM9co6S9jNunvecQUDtqgVcDE8an vjPBcGNPsgEjzcQpjrqBV9ebcFuEw8uSXrpTu/yC7D1LXuIyxHJI1M5w1ToJ7HrC aNzMioo2vd286lXOQKB4buU1Yqr8S+cKuHMVA6peUqiWzFVhGs2JWW5vCD1+8ImV VKW9Jtbg81XN7JzYJdSth51bSPJVZVRejxpN9ZGsePHAiYC739IQkHxRaOOZVYYe u5arcZwCjGQzkUgnQDvqdyMhh/UtdhvHLaU0C+MNWSMJFCyMF+BtyaeQI1LDcvd9 rocSu7PKLIdjSIbDBquwewtayFKGJ8wBAydtoNV5mD33iVEeuNt09OR+pQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHLKRWytI4gws47NTSZ8rPpc1fHxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzU3MzFm My1iMTgwLTQwNTQtOGFjYi0yY2ExM2RkMWRiNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNTczMWYz LWIxODAtNDA1NC04YWNiLTJjYTEzZGQxZGI2My8xL2NzcEZiSzBqaURDempzMU5K bnlzLWx6VjhmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwhpMMA0EAgACMAcDBQMqDPvAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCY6jANBgkqhkiG9w0BAQsFAAOCAQEAUpzovIpB2Ob6 lRV1Kl0GFiWEOc10RecRdaVQj8Cku0pvyJNzXrmp71BYi3HHqAF14PaXzcWr4mSY s7L1HSRAIS0PzW4lr/tJpmF00LHQqQAfAVzt5RI9U/Zc3PfPqD1zeNKCVyjiABj5 w+IuGPweBi5TabTLS+Ln5GnIQ3CsrZcSVU8mZo83uGB6z1BKwa5QiSL+M9zbefhI k/YJRHnOnI/VO5WayK6WSm9hQ3bgEw5wvSUVuAKsENXanPyFjx4dyDXGwQ2CpPJS aAWTLBqlhn0QAcAcbSZXM5jlrXERnVI0mnZ8CnYaptySFXSA7fphnp34aO/uCN/n 1NfHcK9aCg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:44 2026 by rpki-client