This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer File: CDC8NLj0_Lwr9SO72-mgRKJEX74.cer (raw, json) Hash identifier: QBECqMWtSFPSaoOxuYlm+SJ7Xcpdq0TLKKWz3hfV7Ug= Subject key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE6856D6774E26AC5F6DF7CC493208 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62094 AS: 206096 IP: 5.154.244.0/22 IP: 185.48.80.0/22 IP: 2a01:9560::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:68:56:d6:77:4e:26:ac:5f:6d:f7:cc:49:32:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:6b:d5:b8:13:29:95:fb:0f:4f:09:dc:dd: 97:b7:bc:92:f9:1c:ad:20:54:33:3b:58:27:3f:77: b8:a7:d6:65:ac:4a:48:53:b8:5c:3f:88:5f:82:18: d8:11:bb:01:16:13:d7:1e:45:f4:0b:1b:56:c8:fb: c9:47:d7:00:af:ab:ae:58:a6:8c:fc:4f:9d:f8:18: 14:aa:2d:7c:97:93:0d:51:4e:cd:38:c8:90:0e:67: b4:73:b9:2d:52:0a:13:11:ab:dd:0a:4a:a1:4b:e8: c8:df:de:d6:83:42:87:cc:cd:fe:a0:9b:b3:d1:69: fc:18:db:23:94:14:9d:64:f7:dc:d7:73:ec:49:e2: d7:fb:c2:07:da:8e:86:db:58:f3:ba:2f:33:ba:51: 0d:b4:af:58:91:46:b7:f8:32:aa:ac:ef:60:6c:93: bf:63:a0:8d:55:f1:61:5d:83:cd:60:14:eb:23:97: 17:c6:9b:e1:1f:3d:ac:bc:29:e6:1e:82:29:2d:1c: 2d:39:b2:f0:4b:d2:3e:8b:b8:d9:16:44:05:98:98: 77:08:fb:d1:fa:eb:a7:b1:4d:cf:fc:6e:99:bc:a7: a7:db:68:a0:b7:29:8c:ed:0e:d4:76:f9:45:dd:08: 43:be:bf:37:f7:83:3d:19:f3:0e:44:11:9c:a7:92: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.244.0/22 185.48.80.0/22 IPv6: 2a01:9560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62094 206096 Signature Algorithm: sha256WithRSAEncryption 55:bb:c5:a6:4f:21:66:6a:06:fb:d6:96:0c:54:e1:b4:dc:a4: 1b:df:0e:17:9a:12:5a:66:94:e6:aa:59:93:3e:fb:7e:b1:af: a4:59:c8:7f:8b:02:2c:14:7d:e8:7b:a7:4e:7a:4d:20:10:cc: 46:7f:56:b3:fb:f6:f0:af:18:be:29:1c:b4:99:c9:d5:34:df: fd:36:5d:6a:c2:23:cb:83:66:54:9d:9d:0a:49:d1:ff:96:ce: 8c:ca:5d:cc:28:8f:a1:21:4c:44:c3:59:31:95:1f:e0:77:70: 9c:35:14:83:80:66:70:66:c0:df:73:ab:90:ef:58:36:7f:4d: bb:c6:33:de:df:50:83:fb:81:b7:3b:2a:6c:75:61:7e:a4:04: 54:10:be:5a:2b:3c:d1:a9:e4:77:09:a1:34:12:5f:d6:a7:6d: 1b:0a:77:80:1b:b2:00:fb:a8:fb:df:7a:42:a4:c7:f5:db:82: 0e:0a:84:65:98:d6:87:05:b8:02:b8:ad:46:62:6f:e1:d2:bc: a4:b0:3d:d5:a3:04:da:7b:40:f7:ce:46:7d:1d:b6:f6:7e:1b: b4:d2:60:39:96:b5:19:63:e4:53:4d:b6:82:4c:b3:20:cf:97: b2:e7:dc:23:9e:43:40:cb:36:60:4c:64:e7:b6:2d:9a:e1:f5: 9b:0b:4a:a9 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt87mhW1ndOJqxfbffMSTIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODMwYmMzNGI4ZjRmY2JjMmJmNTIzYmJkYmU5YTA0NGEyNDQ1ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRr1bgTKZX7D08J3N2Xt7yS+Ryt IFQzO1gnP3e4p9ZlrEpIU7hcP4hfghjYEbsBFhPXHkX0CxtWyPvJR9cAr6uuWKaM /E+d+BgUqi18l5MNUU7NOMiQDme0c7ktUgoTEavdCkqhS+jI397Wg0KHzM3+oJuz 0Wn8GNsjlBSdZPfc13PsSeLX+8IH2o6G21jzui8zulENtK9YkUa3+DKqrO9gbJO/ Y6CNVfFhXYPNYBTrI5cXxpvhHz2svCnmHoIpLRwtObLwS9I+i7jZFkQFmJh3CPvR +uunsU3P/G6ZvKen22igtymM7Q7UdvlF3QhDvr8394M9GfMORBGcp5IqoQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFAgwvDS49Py8K/Uju9vpoESiRF++MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzNmYTM2 ZC04ZmFmLTRiZGMtYWQ5ZS0wMTNjMWYwMWVkYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvM2ZhMzZk LThmYWYtNGJkYy1hZDllLTAxM2MxZjAxZWRiOS8xL0NEQzhOTGowX0x3cjlTTzcy LW1nUktKRVg3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBZr0AwQCuTBQMA0EAgACMAcDBQAqAZVgMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDyjgIDAyUQMA0GCSqGSIb3DQEBCwUAA4IB AQBVu8WmTyFmagb71pYMVOG03KQb3w4XmhJaZpTmqlmTPvt+sa+kWch/iwIsFH3o e6dOek0gEMxGf1az+/bwrxi+KRy0mcnVNN/9Nl1qwiPLg2ZUnZ0KSdH/ls6Myl3M KI+hIUxEw1kxlR/gd3CcNRSDgGZwZsDfc6uQ71g2f027xjPe31CD+4G3OypsdWF+ pARUEL5aKzzRqeR3CaE0El/Wp20bCneAG7IA+6j733pCpMf124IOCoRlmNaHBbgC uK1GYm/h0ryksD3VowTae0D3zkZ9Hbb2fhu00mA5lrUZY+RTTbaCTLMgz5ey59wj nkNAyzZgTGTnti2a4fWbC0qp -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:56 2026 by rpki-client