This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer File: COdUw6PbLtFKpsBqmdeXKRcCABw.cer (raw, json) Hash identifier: VTFNFTR0ES6BUBJbz3UXConGXlGkn5v2ygxM1qWY03Y= Subject key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F853E622AD4BAB07C4F0F9EBC0E13E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a14:1dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3e:62:2a:d4:ba:b0:7c:4f:0f:9e:bc:0e:13:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08e754c3a3db2ed14aa6c06a99d797291702001c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:70:28:da:15:a7:52:f4:ba:1c:96:5b:47: f2:67:4a:02:a2:c2:ca:94:05:15:c6:38:31:a7:a6: 96:42:e9:e0:1b:b0:20:f3:50:8b:bb:8a:2c:e5:c6: e8:ed:bb:17:a7:ce:ca:4b:02:ef:cc:ef:f5:23:60: d1:8c:65:eb:ea:b9:dd:4b:03:43:c6:d0:ef:06:7c: f5:67:b9:37:f7:fb:71:1e:6f:c4:2e:b8:43:b1:ae: d2:50:2f:d1:ff:fe:0a:9c:fd:b3:89:72:14:0e:d2: 31:37:b3:10:2c:d2:7e:67:5f:4f:47:4e:f2:d2:7e: 54:8a:d1:7d:52:c0:92:dc:29:15:91:4e:45:51:bf: 2c:55:6d:59:76:c1:e0:13:93:98:25:fc:b1:ac:ee: 91:37:cb:8e:79:a4:a4:ce:cd:0d:0d:01:4e:15:fa: 06:d5:96:f2:1c:bd:d7:98:d8:44:6f:1f:28:62:ca: c0:f1:d7:2d:3f:66:40:e2:d6:41:b7:89:22:ae:72: 34:fe:bc:50:37:92:69:93:75:d2:aa:2c:28:c6:30: ab:99:12:f3:87:0f:0d:2a:70:e9:8e:bb:58:2f:90: 6a:60:96:0b:1d:ca:9b:8a:09:64:a1:ec:08:2c:44: c3:26:7a:87:b3:0c:3c:3e:9c:df:66:2a:80:f4:03: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1dc0::/29 Signature Algorithm: sha256WithRSAEncryption 31:b7:87:4f:39:15:65:26:c5:0d:4d:bc:9d:9a:b1:08:7e:ce: 7b:0d:5c:d6:3d:94:a3:fe:0a:af:53:e0:f9:0a:7d:50:f3:6a: ba:1c:8d:fd:5f:71:49:0f:a3:0d:d6:8a:54:85:5f:2d:d7:35: 13:24:d0:f9:eb:20:b6:ed:39:82:f4:e3:f5:29:8e:b8:4f:35: 81:e6:2a:65:3e:96:08:bb:74:a9:27:59:c1:0f:bb:c6:18:af: b6:4f:13:6a:69:ea:32:f1:38:b8:f5:4a:4d:b2:5c:85:9f:dd: db:8c:d8:0a:48:b4:44:2d:26:23:85:03:ee:a7:69:a0:58:5f: 5f:e2:5a:59:b8:74:17:e1:bc:72:37:54:cf:57:f2:66:5b:6d: 6c:b7:96:e7:d6:28:06:0f:8f:18:61:67:ae:e9:0c:d9:92:d8: e7:ff:cb:02:8e:92:ef:cb:36:01:b3:c1:e7:ab:67:7b:0c:ab: 5f:c6:34:09:03:b4:2a:c0:eb:a4:fb:20:6c:5a:63:85:ec:fd: 8d:22:0f:f9:b1:b1:ea:91:d7:a8:5f:b5:18:ae:8a:ad:cc:3f: d7:95:0c:34:d9:68:68:23:f6:10:c7:a4:53:89:0b:af:70:c8: 78:71:da:4e:7e:c0:6f:1d:2a:cf:c7:8e:d6:84:df:24:a2:9a: fc:09:50:ef -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt/hT5iKtS6sHxPD568DhPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGU3NTRjM2EzZGIyZWQxNGFhNmMwNmE5OWQ3OTcyOTE3MDIwMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0JwKNoVp1L0uhyWW0fyZ0oCosLK lAUVxjgxp6aWQungG7Ag81CLu4os5cbo7bsXp87KSwLvzO/1I2DRjGXr6rndSwND xtDvBnz1Z7k39/txHm/ELrhDsa7SUC/R//4KnP2ziXIUDtIxN7MQLNJ+Z19PR07y 0n5UitF9UsCS3CkVkU5FUb8sVW1ZdsHgE5OYJfyxrO6RN8uOeaSkzs0NDQFOFfoG 1ZbyHL3XmNhEbx8oYsrA8dctP2ZA4tZBt4kirnI0/rxQN5Jpk3XSqiwoxjCrmRLz hw8NKnDpjrtYL5BqYJYLHcqbiglkoewILETDJnqHsww8PpzfZiqA9ANp6wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFAjnVMOj2y7RSqbAapnXlykXAgAcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzAxNmVm Yy05MjU1LTRjYWItYmY5YS04ZWRjNTJkYzYwY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMDE2ZWZj LTkyNTUtNGNhYi1iZjlhLThlZGM1MmRjNjBjZi8xL0NPZFV3NlBiTHRGS3BzQnFt ZGVYS1JjQ0FCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhQdwDANBgkqhkiG9w0BAQsFAAOCAQEAMbeH TzkVZSbFDU28nZqxCH7Oew1c1j2Uo/4Kr1Pg+Qp9UPNquhyN/V9xSQ+jDdaKVIVf Ldc1EyTQ+esgtu05gvTj9SmOuE81geYqZT6WCLt0qSdZwQ+7xhivtk8TamnqMvE4 uPVKTbJchZ/d24zYCki0RC0mI4UD7qdpoFhfX+JaWbh0F+G8cjdUz1fyZlttbLeW 59YoBg+PGGFnrukM2ZLY5//LAo6S78s2AbPB56tnewyrX8Y0CQO0KsDrpPsgbFpj hez9jSIP+bGx6pHXqF+1GK6Krcw/15UMNNloaCP2EMekU4kLr3DIeHHaTn7Abx0q z8eO1oTfJKKa/AlQ7w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:21:23 2026 by rpki-client