This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer (raw, json) Hash identifier: bHHUuvvlgH3krtkIhjKsojG4aBaMhrRd0iQ2hlaNNrg= Subject key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC795A2170840A771431DA313057138 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200359 IP: 46.232.168.0/22 IP: 109.70.232.0/22 IP: 2a05:c380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:95:a2:17:08:40:a7:71:43:1d:a3:13:05:71:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08b3eb5fb3ba7656e11357834829eecaf441212e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:4a:e8:35:f6:2d:e6:d4:cf:de:a6:39:d0: ee:95:bc:4d:37:39:1a:48:10:49:ff:69:12:89:10: b0:6d:3c:42:75:31:dc:4e:17:e4:50:24:ad:50:d8: a9:d8:c7:ae:a9:0d:95:be:98:e0:c0:90:3e:c6:b7: fc:86:d4:0c:47:02:4d:70:f8:6e:66:1d:79:69:82: 2d:a7:02:90:30:81:1a:b9:1e:89:49:5e:17:8a:40: c8:1a:6e:f3:98:79:f0:b9:51:f2:71:d1:f9:6c:bc: df:21:a1:8a:3f:fd:e9:f7:90:d9:1f:8b:3f:a4:1d: 79:88:ab:84:c5:ed:62:4e:d9:5c:51:ed:69:d2:3e: d3:da:e7:76:46:00:15:c2:78:20:6f:0f:46:e2:89: de:9b:ed:1d:25:7f:b9:8d:16:e6:10:d0:af:b6:16: e3:c4:28:bf:e7:39:fb:cc:cf:06:03:1e:66:b6:01: 19:9a:06:12:f7:12:11:f9:3e:4f:c4:a0:10:06:c5: 98:8b:8d:ef:8b:f2:47:0d:dd:ab:f3:21:75:ad:c1: 68:f6:34:1b:99:ea:40:8f:f5:c5:69:09:43:2b:b4: c4:1d:f0:16:10:c5:3a:bb:79:ac:80:5e:29:49:60: 7e:e3:c5:c5:04:00:38:07:4d:f2:be:67:ad:d6:ca: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.168.0/22 109.70.232.0/22 IPv6: 2a05:c380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200359 Signature Algorithm: sha256WithRSAEncryption 31:f7:2f:c9:26:f7:fe:b4:30:09:bd:65:7a:49:c9:59:0a:68: 64:e0:69:95:67:38:99:d8:e6:2a:d9:55:e3:a8:23:03:6d:3f: a7:58:3e:a9:82:d1:6f:f0:44:54:50:38:0d:8f:0a:a6:a2:1c: 1a:18:dd:ef:45:f5:99:0f:bb:98:1a:3e:d5:4f:4c:92:69:fa: ab:59:13:75:34:8d:be:2b:99:5e:3d:2a:c4:5c:89:60:ef:75: d0:37:48:81:b9:cd:e1:79:cc:16:db:56:cd:24:4f:7a:84:89: 23:d4:d2:9f:8d:21:d9:f3:76:b1:56:14:97:cd:0e:d2:0d:a9: 9a:24:f4:18:eb:c6:6f:15:fd:68:b3:f7:c6:ae:c2:85:84:cf: 7e:12:c5:bb:4b:29:1d:8c:ce:b9:60:7b:7f:c8:0c:56:d0:43: 58:9a:8f:77:06:15:20:87:37:93:a5:bb:96:fc:b2:36:6c:65: d8:9d:f1:3d:bd:d9:49:68:57:b0:1d:b2:54:fa:71:31:be:23: d9:7e:bf:fb:73:0c:d3:b0:53:34:c9:55:88:63:84:9c:2c:43: 5b:d9:e7:fc:46:f6:25:95:b9:9a:f0:a9:26:38:47:9b:bb:84: 40:8e:1e:ba:78:27:64:fa:14:4d:bb:f2:b1:ee:81:c7:a0:bd: e4:4c:a3:ca -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6x5WiFwhAp3FDHaMTBXE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGIzZWI1ZmIzYmE3NjU2ZTExMzU3ODM0ODI5ZWVjYWY0NDEyMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc9K6DX2LebUz96mOdDulbxNNzka SBBJ/2kSiRCwbTxCdTHcThfkUCStUNip2MeuqQ2VvpjgwJA+xrf8htQMRwJNcPhu Zh15aYItpwKQMIEauR6JSV4XikDIGm7zmHnwuVHycdH5bLzfIaGKP/3p95DZH4s/ pB15iKuExe1iTtlcUe1p0j7T2ud2RgAVwnggbw9G4onem+0dJX+5jRbmENCvthbj xCi/5zn7zM8GAx5mtgEZmgYS9xIR+T5PxKAQBsWYi43vi/JHDd2r8yF1rcFo9jQb mepAj/XFaQlDK7TEHfAWEMU6u3msgF4pSWB+48XFBAA4B03yvmet1srV7QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAiz61+zunZW4RNXg0gp7sr0QSEuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzE2Yzg5 MC0xN2U3LTRhNTEtYTM4Ny0zZThkZjMzMTAyMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMTZjODkw LTE3ZTctNGE1MS1hMzg3LTNlOGRmMzMxMDIzMi8xL0NMUHJYN082ZGxiaEUxZURT Q251eXZSQklTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLuioAwQCbUboMA0EAgACMAcDBQMqBcOAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMOpzANBgkqhkiG9w0BAQsFAAOCAQEAMfcv ySb3/rQwCb1leknJWQpoZOBplWc4mdjmKtlV46gjA20/p1g+qYLRb/BEVFA4DY8K pqIcGhjd70X1mQ+7mBo+1U9Mkmn6q1kTdTSNviuZXj0qxFyJYO910DdIgbnN4XnM FttWzSRPeoSJI9TSn40h2fN2sVYUl80O0g2pmiT0GOvGbxX9aLP3xq7ChYTPfhLF u0spHYzOuWB7f8gMVtBDWJqPdwYVIIc3k6W7lvyyNmxl2J3xPb3ZSWhXsB2yVPpx Mb4j2X6/+3MM07BTNMlViGOEnCxDW9nn/Eb2JZW5mvCpJjhHm7uEQI4eungnZPoU Tbvyse6Bx6C95Eyjyg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:00 2026 by rpki-client