This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer File: CDmpPatUTClv-hQ0VoRKiygYsdA.cer (raw, json) Hash identifier: z09r/xX+qZWxr1KOOjwmGD8AVfc7q2v2hbja0/P73gI= Subject key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6FBD457B0E187BA8B74FF57C3ECC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202359 AS: 207960 IP: 193.3.165.0/24 IP: 2001:678:fc8::/48 IP: 2a11:f2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6f:bd:45:7b:0e:18:7b:a8:b7:4f:f5:7c:3e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0839a93dab544c296ffa143456844a8b2818b1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:93:8c:92:6e:54:55:97:93:8d:4d:f2:c3: a8:c1:43:5a:bb:9d:14:59:e0:2f:1d:62:c1:3d:4c: 38:38:32:ca:a0:71:02:0f:74:7a:c5:8c:b5:70:2f: 15:c4:82:77:f3:a5:1f:47:d5:7e:ed:3a:32:f7:e3: 2c:5c:90:22:4e:34:c9:bd:9a:09:27:22:4c:62:ec: 6b:bc:3e:dd:d3:98:4c:e9:55:fd:6e:88:0b:f9:b5: b0:99:a4:a8:e5:ef:89:43:88:76:f7:83:5f:de:54: 74:a3:7a:87:45:c1:6d:ac:17:cb:b0:8d:8a:17:db: 47:cf:4a:09:0b:d4:36:06:85:0d:28:77:24:24:5c: 9f:0e:42:d1:99:3e:00:89:10:7b:29:a3:ec:ae:0d: d6:aa:65:bf:d3:66:26:3c:68:9a:f3:6a:14:42:40: a6:ab:7f:30:84:60:9f:4a:8c:2e:25:7e:7e:bb:d4: bf:f2:fa:66:9e:2c:cb:63:c1:18:26:eb:fb:4b:30: 55:61:23:a0:3f:e3:0d:57:f4:b8:02:36:2a:e0:3f: 0b:48:e4:59:7b:4b:48:fc:1c:00:07:92:68:da:88: 4b:05:8b:c1:7a:46:01:20:ad:e0:d2:a4:c0:c7:93: ed:b9:dc:de:f1:47:a7:51:d1:6d:32:51:54:37:93: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.165.0/24 IPv6: 2001:678:fc8::/48 2a11:f2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202359 207960 Signature Algorithm: sha256WithRSAEncryption 0f:72:20:64:98:4f:e6:3c:19:5d:13:ef:8a:ba:01:d1:1f:62: 27:59:99:f4:c4:b6:61:ec:1a:36:87:ca:ea:31:de:76:42:ff: 8e:c0:af:23:32:4c:82:70:9d:a0:ca:0c:01:71:49:6c:f5:f4: 02:01:0b:9e:e1:cf:9a:53:9a:94:7e:a8:30:34:41:ea:e4:bf: 88:86:06:ee:67:24:e8:f5:26:1c:26:52:6c:c5:ee:f2:9d:2a: bb:63:4a:ba:b5:69:68:4f:f2:e3:11:85:87:3c:f2:55:ec:49: d2:0b:89:41:88:17:b8:eb:99:3b:91:77:9c:ba:d3:40:9e:5e: db:d6:7a:04:e8:4b:2d:63:ef:dd:d5:92:31:f8:c9:d9:5d:d5: 8c:86:d7:9b:e9:3f:3b:9a:11:c8:0a:78:d2:e9:53:11:70:7c: b1:31:ff:1d:b4:a2:b6:33:89:62:75:da:9d:3b:55:8e:84:4e: 03:6b:e8:0e:20:36:35:03:8c:30:bb:34:11:b9:fc:a1:af:fc: 5a:00:27:2d:aa:ab:56:c7:d3:c5:2f:cb:e7:06:2d:0c:9f:65: 7e:9e:e6:8f:60:bb:dc:4f:9d:53:c6:b6:34:4c:84:6e:21:64: 85:83:f8:5b:ee:7c:9e:22:c7:4c:28:57:4a:03:90:d9:c9:29: a3:3b:f7:15 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt262+9RXsOGHuot0/1fD7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODM5YTkzZGFiNTQ0YzI5NmZmYTE0MzQ1Njg0NGE4YjI4MThiMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPGTjJJuVFWXk41N8sOowUNau50U WeAvHWLBPUw4ODLKoHECD3R6xYy1cC8VxIJ386UfR9V+7Toy9+MsXJAiTjTJvZoJ JyJMYuxrvD7d05hM6VX9bogL+bWwmaSo5e+JQ4h294Nf3lR0o3qHRcFtrBfLsI2K F9tHz0oJC9Q2BoUNKHckJFyfDkLRmT4AiRB7KaPsrg3WqmW/02YmPGia82oUQkCm q38whGCfSowuJX5+u9S/8vpmnizLY8EYJuv7SzBVYSOgP+MNV/S4AjYq4D8LSORZ e0tI/BwAB5Jo2ohLBYvBekYBIK3g0qTAx5Ptudze8UenUdFtMlFUN5Oe+QIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFAg5qT2rVEwpb/oUNFaESosoGLHQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgz N2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRl ODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMDgzOUE5M0RBQjU0 NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwDAQCAAEwBgME AMEDpTAWBAIAAjAQAwcAIAEGeA/IAwUDKhHywDAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMDFncCAwMsWDANBgkqhkiG9w0BAQsFAAOCAQEAD3IgZJhP5jwZXRPviroB 0R9iJ1mZ9MS2YewaNofK6jHedkL/jsCvIzJMgnCdoMoMAXFJbPX0AgELnuHPmlOa lH6oMDRB6uS/iIYG7mck6PUmHCZSbMXu8p0qu2NKurVpaE/y4xGFhzzyVexJ0guJ QYgXuOuZO5F3nLrTQJ5e29Z6BOhLLWPv3dWSMfjJ2V3VjIbXm+k/O5oRyAp40ulT EXB8sTH/HbSitjOJYnXanTtVjoROA2voDiA2NQOMMLs0Ebn8oa/8WgAnLaqrVsfT xS/L5wYtDJ9lfp7mj2C73E+dU8a2NEyEbiFkhYP4W+58niLHTChXSgOQ2ckpozv3 FQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:25 2026 by rpki-client