This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer (raw, json) Hash identifier: 56MEetWsiuZRFpXjq8zd5Jk5zKB2Z5xsdovROVm8bMo= Subject key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D1DEB72FBE22DE19FC830529DAFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 160.217.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d1:de:b7:2f:be:22:de:19:fc:83:05:29:da:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0952ce4dd8640276f4c1841adb3a742f544924ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:15:c0:5f:43:33:4b:74:2a:82:7e:1c:1b: ca:8e:d4:57:bf:43:a3:43:17:b9:e2:be:9e:12:ed: f7:b6:78:13:7e:87:02:50:44:3b:45:1a:51:35:0d: 1f:af:0b:29:ab:09:b0:a9:e5:db:e4:af:2f:80:58: fa:3f:35:96:ab:dc:a2:b9:6d:6e:df:5e:93:5b:ef: 91:54:73:8b:3e:0a:4e:e8:2e:75:5c:2c:bc:0f:01: 39:16:c4:e8:88:14:cc:b5:dd:b9:32:48:10:1b:d1: db:cd:e7:24:12:4d:4d:2f:a9:15:1f:33:59:23:2f: 24:72:58:1b:ca:c7:82:60:d0:99:19:c5:27:dc:4e: ce:d4:dd:f1:fe:e8:a5:fa:17:93:e4:dd:1c:de:d9: 2c:95:58:68:f9:6a:5a:85:05:65:14:7e:95:ae:91: b2:7a:5f:ad:12:4f:39:8f:ae:1a:1b:0e:86:43:db: af:c5:47:4a:03:6f:93:9e:0c:6d:33:ba:7d:41:2e: c8:67:42:0f:02:f3:c2:6f:eb:d9:70:11:33:26:38: d9:ec:cd:9d:21:59:eb:da:6d:5b:55:8b:3d:ab:c4: 10:7b:cf:cd:60:1e:bd:c0:a7:3d:fc:c1:55:36:0b: 1d:61:5a:e5:c8:48:cc:66:23:8d:f3:70:4c:6d:c9: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:22:10:90:26:b5:73:de:e4:a1:41:c7:4b:74:e1:07:d7:48: 54:3c:f4:be:ee:4a:9d:7b:c7:d5:02:ee:2e:5c:9b:b2:65:6c: 89:06:a3:0e:52:53:96:f1:59:45:c7:00:d6:db:db:19:ec:0f: 87:15:24:01:ff:8e:7d:a3:ff:73:df:c5:f0:23:2a:60:68:8e: 15:67:67:d0:0f:8d:14:8d:e4:ea:73:f8:4f:b3:5c:ed:5f:3c: 05:c9:3e:af:a0:83:b7:bc:ee:fd:a6:aa:de:8a:9b:ed:46:08: 0f:72:77:2f:dc:11:92:9f:e5:05:b8:1b:a6:c6:4f:24:8d:d9: 08:d0:45:e2:25:50:45:ab:ef:c0:43:75:8f:77:f7:1d:95:7f: 30:75:66:ba:7a:f4:d6:22:31:08:77:71:56:52:37:6a:c8:3f: 9e:9c:51:2a:5c:cd:2a:8e:1e:8d:e4:a5:f2:48:f0:57:40:b6: bc:16:40:82:86:c2:25:1d:82:97:e5:eb:2e:6d:8a:57:a2:3a: 08:a7:bb:17:c2:48:3e:bf:75:87:fe:f3:20:83:e5:f1:9d:60: a0:97:bb:ad:0b:e1:73:b2:09:00:41:70:f8:df:53:55:d8:a6: dd:7c:ef:ad:cb:db:8a:38:e1:28:2e:71:d2:f4:00:db:1f:7c: 8c:dc:b4:1d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt4NNHety++It4Z/IMFKdr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTUyY2U0ZGQ4NjQwMjc2ZjRjMTg0MWFkYjNhNzQyZjU0NDkyNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweQVwF9DM0t0KoJ+HBvKjtRXv0Oj Qxe54r6eEu33tngTfocCUEQ7RRpRNQ0frwspqwmwqeXb5K8vgFj6PzWWq9yiuW1u 316TW++RVHOLPgpO6C51XCy8DwE5FsToiBTMtd25MkgQG9HbzeckEk1NL6kVHzNZ Iy8kclgbyseCYNCZGcUn3E7O1N3x/uil+heT5N0c3tkslVho+WpahQVlFH6VrpGy el+tEk85j64aGw6GQ9uvxUdKA2+TngxtM7p9QS7IZ0IPAvPCb+vZcBEzJjjZ7M2d IVnr2m1bVYs9q8QQe8/NYB69wKc9/MFVNgsdYVrlyEjMZiON83BMbclTaQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFAlSzk3YZAJ29MGEGts6dC9USSTqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2I1ZDll MC1jNmI0LTQ2ZjYtYjQ1ZS1jNTZmMTc3NzA5ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYjVkOWUw LWM2YjQtNDZmNi1iNDVlLWM1NmYxNzc3MDlkZS8xL0NWTE9UZGhrQW5iMHdZUWEy enAwTDFSSkpPby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAoNkwDQYJKoZIhvcNAQELBQADggEBAGUiEJAm tXPe5KFBx0t04QfXSFQ89L7uSp17x9UC7i5cm7JlbIkGow5SU5bxWUXHANbb2xns D4cVJAH/jn2j/3PfxfAjKmBojhVnZ9APjRSN5Opz+E+zXO1fPAXJPq+gg7e87v2m qt6Km+1GCA9ydy/cEZKf5QW4G6bGTySN2QjQReIlUEWr78BDdY939x2VfzB1Zrp6 9NYiMQh3cVZSN2rIP56cUSpczSqOHo3kpfJI8FdAtrwWQIKGwiUdgpfl6y5tilei OginuxfCSD6/dYf+8yCD5fGdYKCXu60L4XOyCQBBcPjfU1XYpt18763L24o44Sgu cdL0ANsffIzctB0= -----END CERTIFICATE-----Generated at Mon Jan 26 13:41:08 2026 by rpki-client