This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer File: C-vO5NIzea7YGuz_x6dCs1rN3bM.cer (raw, json) Hash identifier: Y0CcKMRUW0/It26lPyokGp86XUqCrWQUeHbsUr7Pr2o= Subject key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF16082BC443B7C81FB17F9A442F563 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206236 AS: 207921 AS: 215717 IP: 45.14.232.0/22 IP: 185.50.255.0/24 IP: 195.39.220.0/23 IP: 195.39.246.0/23 IP: 195.245.66.0/24 IP: 2a0e:1580::/29 IP: 2a0f:4ac0::/29 IP: 2a10:1a40::/29 IP: 2a14:7680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:60:82:bc:44:3b:7c:81:fb:17:f9:a4:42:f5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:e3:3d:ab:cf:31:1d:d9:67:f8:92:06:d4: 64:a0:f7:57:66:3b:12:ac:0b:a3:3a:c8:3a:74:87: 63:aa:bc:d6:33:11:74:11:37:44:a1:29:1b:da:5b: 70:b5:39:06:c9:34:a2:f9:37:28:5d:ef:97:fb:c3: 88:01:f5:dc:3a:78:56:48:63:80:02:0a:ec:50:30: 0d:21:e9:4c:bd:24:ea:f7:5d:52:40:af:9d:72:f5: 37:bc:45:ba:24:ba:31:ca:7c:e1:27:00:97:f4:ed: 32:83:45:3e:55:f5:6b:aa:6d:b1:70:c3:01:5f:18: 5d:4c:ef:26:f6:ae:e1:12:74:69:d9:56:ce:08:8b: c3:6e:5c:67:b2:24:35:d5:e3:91:4d:4e:6c:d5:37: 74:43:84:18:c7:10:78:e3:d0:58:d2:d5:ef:9f:88: 29:cb:76:a0:e0:d5:2b:d7:0f:ac:5a:ec:87:03:81: ba:c6:a6:30:40:e4:ef:d9:21:07:73:3f:4a:06:20: 31:d6:05:aa:19:ad:b1:26:a8:ad:3d:74:31:f2:6f: 06:ae:1a:4f:c3:29:80:2e:db:0b:80:17:32:89:3e: b2:4e:79:d4:be:09:79:b9:6d:c0:ed:b6:65:65:60: d8:0c:34:cc:c1:c0:33:b8:a0:f0:4e:bf:5f:ba:7f: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.232.0/22 185.50.255.0/24 195.39.220.0/23 195.39.246.0/23 195.245.66.0/24 IPv6: 2a0e:1580::/29 2a0f:4ac0::/29 2a10:1a40::/29 2a14:7680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206236 207921 215717 Signature Algorithm: sha256WithRSAEncryption 99:e6:a4:b0:36:a1:9d:a8:da:e2:19:6a:29:20:b8:4d:2a:3e: 1c:56:38:50:21:e7:07:69:17:17:9e:e0:e9:31:9d:0f:8c:33: ce:b9:57:6e:fa:98:e2:cc:ca:fd:f6:97:69:64:ad:4e:9c:23: 3d:cb:fb:f5:d1:94:0f:5f:3d:15:f9:a7:39:11:d4:05:50:75: 23:22:60:da:5d:15:5c:0d:7b:47:8a:fc:b4:67:00:e7:46:22: ea:7c:05:ca:51:3d:2c:6f:77:8f:dc:6d:90:19:22:e7:cf:8b: 86:fd:82:3b:9b:7b:fc:1c:32:ad:c6:9c:62:0d:79:8a:82:84: f7:55:d3:f0:2c:50:63:94:cb:86:74:a5:e8:1b:6d:03:4c:8b: 2e:8a:3b:9a:2e:f8:33:13:51:60:66:7f:55:ac:9c:34:8d:34: cd:95:a3:f4:0f:f7:98:ad:ce:43:d4:24:35:57:4f:62:66:0b: 1f:b2:2e:15:4e:65:33:cb:3d:a1:d5:a6:2d:b9:41:0a:f2:a4: 0b:4c:45:6b:d8:7f:cf:4f:50:8d:92:9e:05:af:04:05:17:45: 0d:e3:f0:1c:bb:15:35:a2:1a:04:eb:04:15:85:47:c3:02:6d: 08:22:31:0d:de:c0:c4:11:7d:c8:95:37:d2:38:da:29:42:79: a0:80:4d:e0 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISAZt/8WCCvEQ7fIH7F/mkQvVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmViY2VlNGQyMzM3OWFlZDgxYWVjZmZjN2E3NDJiMzVhY2RkZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFfjPavPMR3ZZ/iSBtRkoPdXZjsS rAujOsg6dIdjqrzWMxF0ETdEoSkb2ltwtTkGyTSi+TcoXe+X+8OIAfXcOnhWSGOA AgrsUDANIelMvSTq911SQK+dcvU3vEW6JLoxynzhJwCX9O0yg0U+VfVrqm2xcMMB XxhdTO8m9q7hEnRp2VbOCIvDblxnsiQ11eORTU5s1Td0Q4QYxxB449BY0tXvn4gp y3ag4NUr1w+sWuyHA4G6xqYwQOTv2SEHcz9KBiAx1gWqGa2xJqitPXQx8m8GrhpP wymALtsLgBcyiT6yTnnUvgl5uW3A7bZlZWDYDDTMwcAzuKDwTr9fun/FCQIDAQAB o4IC5jCCAuIwHQYDVR0OBBYEFAvrzuTSM3mu2Brs/8enQrNazd2zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzFmMzMy Mi02YWY3LTQ3YWItOGRjNS05OWExMWY2Mzg1YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvMWYzMzIy LTZhZjctNDdhYi04ZGM1LTk5YTExZjYzODVhYi8xL0Mtdk81Tkl6ZWE3WUd1el94 NmRDczFyTjNiTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAkBAIAATAeAwQCLQ7oAwQAuTL/AwQBwyfcAwQBwyf2AwQAw/VC MCIEAgACMBwDBQMqDhWAAwUDKg9KwAMFAyoQGkADBQMqFHaAMCQGCCsGAQUFBwEI AQH/BBUwE6ARMA8CAwMlnAIDAywxAgMDSqUwDQYJKoZIhvcNAQELBQADggEBAJnm pLA2oZ2o2uIZaikguE0qPhxWOFAh5wdpFxee4OkxnQ+MM865V276mOLMyv32l2lk rU6cIz3L+/XRlA9fPRX5pzkR1AVQdSMiYNpdFVwNe0eK/LRnAOdGIup8BcpRPSxv d4/cbZAZIufPi4b9gjube/wcMq3GnGINeYqChPdV0/AsUGOUy4Z0pegbbQNMiy6K O5ou+DMTUWBmf1WsnDSNNM2Vo/QP95itzkPUJDVXT2JmCx+yLhVOZTPLPaHVpi25 QQrypAtMRWvYf89PUI2SngWvBAUXRQ3j8By7FTWiGgTrBBWFR8MCbQgiMQ3ewMQR fciVN9I42ilCeaCATeA= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:31 2026 by rpki-client