This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer File: C047O4QkIliGMULtOhl5LZfLvHQ.cer (raw, json) Hash identifier: hmh+pZOqpfsE07fj1vVRkSYJcEMC657yxR6VkbaJpKs= Subject key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC873DFB80D429F20ED0F9EF73A6AC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215443 IP: 2a0d:d940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:73:df:b8:0d:42:9f:20:ed:0f:9e:f7:3a:6a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:da:1a:36:74:40:23:be:7b:78:20:a0:f1:d7: e7:63:53:96:ba:cb:9c:98:16:4a:6c:be:02:4e:0f: 79:af:25:b4:9c:13:0f:3b:40:95:4e:63:41:55:09: 5b:f2:ce:cc:1e:49:83:c0:e6:62:e9:73:30:c0:91: ed:37:bd:65:b0:72:23:05:53:b5:89:c5:65:09:89: 15:c9:ba:eb:81:4a:5e:36:0f:fc:f6:aa:af:63:4c: 59:20:1e:38:c5:20:69:10:4b:47:53:61:ba:33:68: 59:9d:c6:22:df:9a:0d:0a:be:35:56:3d:96:08:dc: 88:15:83:db:42:d3:fa:b3:41:25:33:99:d1:e6:82: f4:05:e3:7a:76:31:65:14:ae:39:f5:0b:78:68:25: a3:fe:34:dd:55:ab:cd:a5:71:0a:26:32:df:71:47: 46:54:8a:61:8c:21:ab:57:e3:c7:59:46:ec:7b:96: 52:cf:5c:02:72:b8:5a:2c:c6:78:0b:e7:de:30:0d: 96:ad:42:1c:cf:9f:6b:96:88:7f:9b:67:f1:f4:bb: cd:0a:d1:39:70:40:2d:af:4b:4f:13:5b:82:69:cb: 59:dd:bd:2d:d4:4b:d1:fd:23:3a:8e:ab:7f:6c:e8: a9:9d:cc:ca:7a:7d:21:4b:e6:d9:10:87:dd:1e:27: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215443 Signature Algorithm: sha256WithRSAEncryption 4c:a7:af:7a:c0:bb:62:b0:bc:a9:93:a0:63:81:f8:00:98:f0: 1e:e1:26:05:11:22:56:78:2a:8d:2a:ab:2b:f5:25:1c:b2:50: 60:d2:53:8a:80:b8:b6:99:4c:ce:e8:38:5b:a5:e7:3c:da:11: 63:3d:4b:13:97:11:ff:23:ff:fb:b5:70:bf:0a:70:08:cb:dc: 99:d7:6f:b1:22:73:99:fc:ec:1a:0b:04:b5:1c:79:78:15:bf: 3d:73:a3:f2:4d:34:82:46:25:0a:ae:5f:db:03:cd:10:bb:ac: 39:8c:09:b6:ec:0a:29:7c:5a:bb:e3:d9:4a:2d:c0:51:5d:de: 34:02:ac:47:c2:32:54:9f:3b:42:8f:b0:0d:f6:2d:ad:84:76: 36:0b:ce:7c:3c:0e:0e:52:d5:f8:3a:c7:0b:56:92:c2:e6:8b: 21:5c:2e:56:d3:5c:45:d0:15:79:1f:40:97:15:69:8a:a3:47: 42:92:ba:db:2b:1b:76:09:9e:b2:80:61:01:7e:f1:fd:df:6b: 29:96:4e:8a:5c:79:85:8c:57:71:81:a3:15:16:15:9a:08:32: 29:bd:f4:84:9a:77:7f:33:a0:6a:22:ba:63:15:be:ea:c3:d6: 1e:2b:c9:71:3a:20:24:75:40:b0:55:14:18:04:ed:90:81:9e: 1f:37:f7:f0 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6yHPfuA1CnyDtD573OmrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjRlM2IzYjg0MjQyMjU4ODYzMTQyZWQzYTE5NzkyZDk3Y2JiYzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NoaNnRAI757eCCg8dfnY1OWusuc mBZKbL4CTg95ryW0nBMPO0CVTmNBVQlb8s7MHkmDwOZi6XMwwJHtN71lsHIjBVO1 icVlCYkVybrrgUpeNg/89qqvY0xZIB44xSBpEEtHU2G6M2hZncYi35oNCr41Vj2W CNyIFYPbQtP6s0ElM5nR5oL0BeN6djFlFK459Qt4aCWj/jTdVavNpXEKJjLfcUdG VIphjCGrV+PHWUbse5ZSz1wCcrhaLMZ4C+feMA2WrUIcz59rloh/m2fx9LvNCtE5 cEAtr0tPE1uCactZ3b0t1EvR/SM6jqt/bOipnczKen0hS+bZEIfdHieztwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzdiYTFi MS01NTYyLTRhMzItOWY1ZC0xNGQyMzg1Mjc4MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvN2JhMWIx LTU1NjItNGEzMi05ZjVkLTE0ZDIzODUyNzgzNS8xL0MwNDdPNFFrSWxpR01VTHRP aGw1TFpmTHZIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg3ZQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDSZMwDQYJKoZIhvcNAQELBQADggEBAEynr3rAu2KwvKmToGOB+ACY8B7hJgUR IlZ4Ko0qqyv1JRyyUGDSU4qAuLaZTM7oOFul5zzaEWM9SxOXEf8j//u1cL8KcAjL 3JnXb7Eic5n87BoLBLUceXgVvz1zo/JNNIJGJQquX9sDzRC7rDmMCbbsCil8Wrvj 2UotwFFd3jQCrEfCMlSfO0KPsA32La2EdjYLznw8Dg5S1fg6xwtWksLmiyFcLlbT XEXQFXkfQJcVaYqjR0KSutsrG3YJnrKAYQF+8f3faymWTopceYWMV3GBoxUWFZoI Mim99ISad38zoGoiumMVvurD1h4ryXE6ICR1QLBVFBgE7ZCBnh839/A= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:55 2026 by rpki-client