This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer File: Cc0hirzfZueVAKuRPNIc8G5AXU4.cer (raw, json) Hash identifier: yXC3sfVNFSkt5cvX2Y/SUPkZ05BUjHwdWuSnJxQITcU= Subject key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FEB097C6526B700B22901EF45DE23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41810 IP: 80.240.64.0/20 IP: 82.167.0.0/16 IP: 185.121.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:eb:09:7c:65:26:b7:00:b2:29:01:ef:45:de:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:bc:26:7e:6f:a2:24:2f:eb:22:cd:e7:78: 8e:44:4e:df:8d:7c:0a:01:53:78:0a:a6:dd:dc:31: c1:29:46:40:bf:c9:a2:f4:90:e4:af:c7:d1:c7:5d: 61:d0:4d:22:49:8d:be:1f:16:d1:42:0e:24:12:48: b9:6d:ea:f6:40:33:87:15:47:a8:b2:7c:1a:b1:1f: 3b:52:23:eb:3f:e7:7b:5c:66:66:a9:6b:b9:24:40: 16:74:70:07:9f:fb:8f:18:ee:42:63:6b:a3:95:82: ed:c0:71:b1:28:36:25:ba:de:38:c4:72:97:28:b3: 63:41:55:af:f8:86:4b:b0:e0:a8:ba:82:f3:ce:76: 17:33:ff:23:3d:ef:29:7d:c5:dd:22:b2:f5:66:40: 6d:f8:f0:c9:6f:05:6f:8e:8f:bf:ee:d3:d5:6d:39: b2:b6:92:c2:17:0c:c9:f2:7c:6a:34:ef:0e:cd:0a: 5e:77:98:e1:de:0c:d0:2b:83:66:d5:ec:fe:b4:b6: 0e:5b:dd:47:d6:1a:1f:68:6a:92:2c:43:d1:ac:a3: 2c:64:f9:90:60:47:22:cb:60:f6:e0:a5:69:88:27: 65:b4:3f:ab:ed:e8:29:67:91:3c:56:78:0c:de:6a: e8:56:cd:eb:e1:a1:cc:12:47:4d:b5:94:3e:1d:57: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.64.0/20 82.167.0.0/16 185.121.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41810 Signature Algorithm: sha256WithRSAEncryption 00:f5:03:44:64:06:6d:1d:f4:67:b7:3d:c5:a0:84:2c:5d:98: b5:5b:04:41:34:bf:6e:b6:5d:34:0f:a0:b2:ea:d7:e8:37:6e: de:38:2f:4c:85:37:ea:b3:ef:94:b2:cc:47:12:8a:23:bd:e2: 21:81:a2:d5:0c:77:7c:8c:61:b4:8e:2d:a3:ef:41:6f:6c:dc: c3:17:75:d9:fa:4d:0b:c7:c6:7e:ce:e6:ca:0b:d1:7f:ab:a2: 4d:d4:0a:3f:69:4c:0a:27:61:43:16:ce:74:7b:19:40:31:ae: 9e:fb:89:cc:5e:c1:62:13:b8:78:a7:77:2b:8a:ef:50:f4:26: 77:3f:58:f3:62:fd:2b:ba:b7:7f:74:b4:2c:0e:5e:26:d4:9f: 2c:3a:d4:c4:50:86:1d:61:ce:4f:66:04:70:bc:1c:08:d8:9d: d0:16:7c:98:26:5b:eb:ed:7a:0e:15:e8:78:85:41:e9:62:68: 05:ce:9a:fb:d7:17:a7:46:a5:1e:0e:21:2a:2e:a5:6a:6b:3e: 48:b7:0f:7c:09:e7:44:a7:89:07:bf:68:1c:ef:b4:ec:ca:d4: 80:c1:e9:57:ae:f5:e4:dc:15:95:ea:15:32:0b:c5:d3:04:f5: 62:4d:47:b1:ee:c7:8f:88:ad:17:20:c9:a1:0c:e5:e9:80:89: 84:11:d0:a6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt8f+sJfGUmtwCyKQHvRd4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWNkMjE4YWJjZGY2NmU3OTUwMGFiOTEzY2QyMWNmMDZlNDA1ZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvai8Jn5voiQv6yLN53iORE7fjXwK AVN4Cqbd3DHBKUZAv8mi9JDkr8fRx11h0E0iSY2+HxbRQg4kEki5ber2QDOHFUeo snwasR87UiPrP+d7XGZmqWu5JEAWdHAHn/uPGO5CY2ujlYLtwHGxKDYlut44xHKX KLNjQVWv+IZLsOCouoLzznYXM/8jPe8pfcXdIrL1ZkBt+PDJbwVvjo+/7tPVbTmy tpLCFwzJ8nxqNO8OzQped5jh3gzQK4Nm1ez+tLYOW91H1hofaGqSLEPRrKMsZPmQ YEciy2D24KVpiCdltD+r7egpZ5E8VngM3mroVs3r4aHMEkdNtZQ+HVd++QIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFAnNIYq832bnlQCrkTzSHPBuQF1OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzc3ZmU0 OC1kMWYxLTQ0OWEtODA3ZC00YzE5ZWM1YjU3Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNzdmZTQ4 LWQxZjEtNDQ5YS04MDdkLTRjMTllYzViNTdjYS8xL0NjMGhpcnpmWnVlVkFLdVJQ TkljOEc1QVhVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUF BwEHAQH/BBswGTAXBAIAATARAwQEUPBAAwMAUqcDBAK5efwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAKNSMA0GCSqGSIb3DQEBCwUAA4IBAQAA9QNEZAZtHfRntz3F oIQsXZi1WwRBNL9utl00D6Cy6tfoN27eOC9MhTfqs++UssxHEoojveIhgaLVDHd8 jGG0ji2j70FvbNzDF3XZ+k0Lx8Z+zubKC9F/q6JN1Ao/aUwKJ2FDFs50exlAMa6e +4nMXsFiE7h4p3criu9Q9CZ3P1jzYv0rurd/dLQsDl4m1J8sOtTEUIYdYc5PZgRw vBwI2J3QFnyYJlvr7XoOFeh4hUHpYmgFzpr71xenRqUeDiEqLqVqaz5Itw98CedE p4kHv2gc77TsytSAwelXrvXk3BWV6hUyC8XTBPViTUex7sePiK0XIMmhDOXpgImE EdCm -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:35 2026 by rpki-client