This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer File: CCswPLSec-LSpARYPV-Dd86wJUU.cer (raw, json) Hash identifier: PeDPB3duUSKOH2StqFxmUf95uGxm8FWoELZn1h/0JJ0= Subject key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7DA3E96592D07DD80F04102F67910 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16242 AS: 20914 AS: 59812 AS: 205573 AS: 211096 IP: 2.59.120.0/22 IP: 80.76.0.0/21 IP: 95.156.203.0/24 IP: 95.214.148.0/22 IP: 185.15.137.0/24 IP: 193.134.251.0/24 IP: 193.247.85.0/24 IP: 194.69.196.0/23 IP: 2a00:ce8::/32 IP: 2a12:5a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:da:3e:96:59:2d:07:dd:80:f0:41:02:f6:79:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:be:3d:4c:01:d6:86:64:ae:2c:40:1a:af: e4:e8:a4:52:bf:9d:46:00:cc:77:ea:20:ed:8e:3c: 81:75:b1:30:d0:53:70:76:f7:ff:a2:2c:a4:5d:66: 61:d5:e4:d4:a8:03:2b:af:d3:09:e6:0f:ec:0c:15: 86:95:65:80:4d:65:ec:dd:fe:9f:8c:cc:ea:43:9f: 87:e8:12:79:31:5e:6f:72:ed:08:85:34:2e:4c:b1: 1c:70:80:79:14:17:51:15:77:ac:35:eb:84:b1:22: fd:bc:5c:5c:78:20:b4:22:31:56:3e:7e:3f:22:ae: 88:16:83:8d:55:a1:91:5f:14:6c:5c:fe:e2:21:05: f1:8b:86:f2:1c:42:ad:13:8f:93:52:c5:6a:81:34: c5:44:6a:96:4a:5e:96:6c:26:35:cb:1d:15:52:c4: 20:00:31:12:85:5c:82:a5:74:a6:2c:be:9d:eb:50: dd:77:08:c1:00:9c:99:1c:5d:13:1b:b4:16:7e:0b: 60:23:db:5d:0f:be:e8:a8:6c:25:51:6d:b3:a5:22: 20:43:5f:cf:69:36:56:db:a4:56:6e:74:5a:46:31: 0e:44:a0:03:63:2e:33:0f:7d:43:3f:90:dc:49:ef: 4f:4d:1e:fd:bb:a0:74:45:6c:b4:2a:c8:dd:10:41: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.120.0/22 80.76.0.0/21 95.156.203.0/24 95.214.148.0/22 185.15.137.0/24 193.134.251.0/24 193.247.85.0/24 194.69.196.0/23 IPv6: 2a00:ce8::/32 2a12:5a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16242 20914 59812 205573 211096 Signature Algorithm: sha256WithRSAEncryption 86:2e:25:1e:d0:ca:93:e6:a4:c7:ac:de:27:48:cd:72:81:74: 4a:52:22:a7:de:9c:6f:f8:b7:b2:8b:e0:99:2b:96:ac:21:cd: 7c:7d:6e:46:94:c5:30:26:d4:23:f5:fa:41:22:69:0e:a4:3b: 98:a3:5e:fb:d5:70:67:81:c5:78:c7:58:8d:40:c5:a3:2f:3c: 94:98:64:ef:d4:18:cb:05:28:b3:38:32:bb:f6:5f:9b:ea:cc: c1:71:42:53:6d:f4:88:00:73:79:03:43:b0:89:1f:e6:48:02: f3:ce:5f:b5:5d:f5:ba:42:f9:78:42:61:fe:57:7d:2f:23:95: 52:74:58:f8:d6:04:1f:9c:0e:2b:1f:a7:68:7a:fd:c9:d5:cb: 1c:9e:56:75:5e:d1:9d:fd:af:e7:53:0a:58:15:da:f1:26:f7: 8f:fa:ae:31:bf:32:8b:e8:b6:a6:6c:7c:12:19:45:3a:a8:c2: f7:15:fd:c6:60:ec:18:c6:c2:89:4d:ba:c1:91:4b:f2:08:9b: da:da:b0:e6:0a:47:6c:0e:7e:c0:43:b2:cd:18:ac:04:2a:52: 37:79:32:63:62:01:0a:c0:48:e0:51:99:50:1c:d3:75:81:27: a9:c1:89:ec:36:a7:55:3a:6a:b6:e6:bd:ab:29:09:05:2c:fa: 59:9f:f9:58 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgISAZt6x9o+llktB92A8EEC9nkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODJiMzAzY2I0OWU3M2UyZDJhNDA0NTgzZDVmODM3N2NlYjAyNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgS+PUwB1oZkrixAGq/k6KRSv51G AMx36iDtjjyBdbEw0FNwdvf/oiykXWZh1eTUqAMrr9MJ5g/sDBWGlWWATWXs3f6f jMzqQ5+H6BJ5MV5vcu0IhTQuTLEccIB5FBdRFXesNeuEsSL9vFxceCC0IjFWPn4/ Iq6IFoONVaGRXxRsXP7iIQXxi4byHEKtE4+TUsVqgTTFRGqWSl6WbCY1yx0VUsQg ADEShVyCpXSmLL6d61DddwjBAJyZHF0TG7QWfgtgI9tdD77oqGwlUW2zpSIgQ1/P aTZW26RWbnRaRjEORKADYy4zD31DP5DcSe9PTR79u6B0RWy0KsjdEEHRVwIDAQAB o4IC8jCCAu4wHQYDVR0OBBYEFAgrMDy0nnPi0qQEWD1fg3fOsCVFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzM0MGVi NS03YmUwLTRiYzktYmYyZC1iNDczY2U3ODA3Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvMzQwZWI1 LTdiZTAtNGJjOS1iZjJkLWI0NzNjZTc4MDdjYS8xL0NDc3dQTFNlYy1MU3BBUllQ Vi1EZDg2d0pVVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQCAjt4AwQDUEwAAwQAX5zLAwQCX9aUAwQAuQ+J AwQAwYb7AwQAwfdVAwQBwkXEMBQEAgACMA4DBQAqAAzoAwUDKhJaQDAsBggrBgEF BQcBCAEB/wQdMBugGTAXAgI/cgICUbICAwDppAIDAyMFAgMDOJgwDQYJKoZIhvcN AQELBQADggEBAIYuJR7QypPmpMes3idIzXKBdEpSIqfenG/4t7KL4JkrlqwhzXx9 bkaUxTAm1CP1+kEiaQ6kO5ijXvvVcGeBxXjHWI1AxaMvPJSYZO/UGMsFKLM4Mrv2 X5vqzMFxQlNt9IgAc3kDQ7CJH+ZIAvPOX7Vd9bpC+XhCYf5XfS8jlVJ0WPjWBB+c Disfp2h6/cnVyxyeVnVe0Z39r+dTClgV2vEm94/6rjG/MovotqZsfBIZRTqowvcV /cZg7BjGwolNusGRS/IIm9rasOYKR2wOfsBDss0YrAQqUjd5MmNiAQrASOBRmVAc 03WBJ6nBiew2p1U6arbmvaspCQUs+lmf+Vg= -----END CERTIFICATE-----Generated at Mon Jan 26 01:18:14 2026 by rpki-client