This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer File: 1-cuQlMt82hOL0BABPrnswzGQMEE.cer (raw, json) Hash identifier: rPYhsSp8JADXkxR5dqAzPu1OClVbfLPsi4k4YPfg+H4= Subject key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E5B95DA10A5459BF323CD3C8880D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60391 IP: 2001:67c:12ac::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5b:95:da:10:a5:45:9b:f3:23:cd:3c:88:80:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:d7:23:6e:b1:49:3f:ee:42:f0:3a:4d:1d: 87:4c:d3:20:a8:65:c6:fd:45:07:5d:74:c1:4d:04: ef:17:31:8d:4f:f9:e7:34:15:2f:e4:b4:06:30:1b: 64:58:6f:5a:40:fb:6c:92:53:ba:df:cd:4f:15:92: fd:a7:cf:fe:76:65:02:2e:b8:13:53:de:ac:1a:14: c5:83:8d:48:ae:1b:11:a4:4e:b5:4d:e6:4b:19:0b: 2d:6c:bb:b1:f4:6f:e7:46:ab:84:50:3e:74:06:6b: 5b:33:63:1a:00:99:c7:55:29:62:f7:4d:11:94:12: 35:ae:28:4a:db:4d:ed:74:e8:f2:4b:9e:d5:cc:a2: 44:03:4b:ec:41:89:88:31:f8:b7:10:6e:58:f0:ec: fd:e7:02:6e:79:c4:a9:1b:c8:df:42:20:56:4f:fc: b3:56:e4:a7:9c:c4:4a:7a:73:a5:52:95:cf:f9:34: 13:11:d1:5b:c8:59:5e:fd:bd:86:e6:05:77:3f:c2: ba:4f:e2:1c:77:9d:62:1c:0b:82:fc:f6:ca:d6:03: f4:c9:75:0b:52:dc:2c:59:08:5f:38:04:99:4d:58: 55:e2:9c:31:0b:de:e6:f3:44:3f:e5:fd:19:62:98: 59:05:0d:35:be:0f:d3:73:e1:43:de:23:e2:a7:81: 0f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:12ac::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60391 Signature Algorithm: sha256WithRSAEncryption 09:fd:3f:1d:59:56:b5:59:23:2c:43:06:4b:9f:09:ec:85:c3: b0:29:d6:6d:76:04:12:7a:66:21:b5:eb:47:c3:c7:66:74:72: 00:70:40:19:e5:30:51:02:16:6b:d7:b8:61:6f:98:62:15:b0: a2:af:52:8f:1f:19:88:36:3f:c1:d0:ff:58:70:0a:0f:c0:4d: 5f:99:f5:e4:b8:98:17:06:1f:5b:f2:d2:77:58:85:b4:8b:fb: ae:9b:61:d0:3f:56:ee:f1:8b:c8:70:02:23:10:a1:6d:90:b8: 5a:05:c9:e0:3d:e2:9a:4a:f9:9f:57:1c:49:23:d9:3f:c5:37: 18:b5:51:12:82:b5:7b:a0:62:ab:1c:ef:ba:68:5f:ba:6c:b9: 7a:05:11:99:0e:aa:ae:7e:d2:64:89:e1:51:b1:69:3b:9d:39: e4:cb:76:cd:ce:a5:6c:2d:99:d5:aa:fe:a2:4a:bb:f3:11:b4: 96:8d:ce:6c:60:98:94:93:8f:53:74:8a:66:a3:5d:52:da:6f: 9b:ca:23:ae:4d:44:a4:8c:5b:6a:01:3e:67:85:35:2d:3d:7d: 2b:c5:72:81:35:22:6c:83:0a:af:70:6f:40:bc:41:1f:4b:01: a8:a6:a4:1b:78:3d:98:b4:65:9d:60:e1:cd:0b:0a:cd:29:97: 71:ae:1d:47 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt5fluV2hClRZvzI808iIDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWNiOTA5NGNiN2NkYTEzOGJkMDEwMDEzZWI5ZWNjMzMxOTAzMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1zXI26xST/uQvA6TR2HTNMgqGXG /UUHXXTBTQTvFzGNT/nnNBUv5LQGMBtkWG9aQPtsklO6381PFZL9p8/+dmUCLrgT U96sGhTFg41IrhsRpE61TeZLGQstbLux9G/nRquEUD50BmtbM2MaAJnHVSli900R lBI1rihK203tdOjyS57VzKJEA0vsQYmIMfi3EG5Y8Oz95wJuecSpG8jfQiBWT/yz VuSnnMRKenOlUpXP+TQTEdFbyFle/b2G5gV3P8K6T+Icd51iHAuC/PbK1gP0yXUL UtwsWQhfOASZTVhV4pwxC97m80Q/5f0ZYphZBQ01vg/Tc+FD3iPip4EP7QIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFPnLkJTLfNoTi9AQAT657MMxkDBBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzYyNDU0 Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFiNjUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2 LTRhYzgtNGRiZS04Njk3LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFC UHJuc3d6R1FNRUUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwSrDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA6+cwDQYJKoZIhvcNAQELBQADggEBAAn9Px1ZVrVZIyxDBkufCeyFw7Ap 1m12BBJ6ZiG160fDx2Z0cgBwQBnlMFECFmvXuGFvmGIVsKKvUo8fGYg2P8HQ/1hw Cg/ATV+Z9eS4mBcGH1vy0ndYhbSL+66bYdA/Vu7xi8hwAiMQoW2QuFoFyeA94ppK +Z9XHEkj2T/FNxi1URKCtXugYqsc77poX7psuXoFEZkOqq5+0mSJ4VGxaTudOeTL ds3OpWwtmdWq/qJKu/MRtJaNzmxgmJSTj1N0imajXVLab5vKI65NRKSMW2oBPmeF NS09fSvFcoE1ImyDCq9wb0C8QR9LAaimpBt4PZi0ZZ1g4c0LCs0pl3GuHUc= -----END CERTIFICATE-----Generated at Sun Jan 25 19:14:10 2026 by rpki-client