This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer File: CccUYOpB0-ZWXEtBCybJ54zhb58.cer (raw, json) Hash identifier: nLbCxWj+RL89isMkbyst4Ooxr5tgfLxgvdKngBM2Cc8= Subject key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E1EFDAFA7994E6BC1F4B799ACD4B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.220.217.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e1:ef:da:fa:79:94:e6:bc:1f:4b:79:9a:cd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:19:90:3a:f9:5d:e0:55:15:86:69:2b:7c: 80:41:0f:57:1c:24:04:34:92:11:c5:7b:1c:a2:57: eb:8c:3c:75:6e:6a:7e:c5:c1:a4:19:ea:65:70:1c: 75:c2:ac:ee:8e:05:a0:83:80:bd:91:15:28:2b:7f: 0a:75:89:e3:c1:21:01:46:68:48:18:e3:3c:14:a3: 39:4c:02:80:c3:69:c8:c4:70:04:0c:87:07:7a:32: 2d:93:3c:3a:8b:e7:31:8a:05:d7:73:4b:0d:34:b2: 34:f5:7b:1b:a1:8b:7d:ec:09:e9:aa:cb:19:bb:91: e7:24:46:cc:ca:fc:cc:02:8d:ce:e6:50:60:2f:77: 20:75:b9:ad:cb:87:9c:6e:e7:ad:78:17:11:8b:32: 78:ea:99:f2:c4:94:f9:79:7a:ac:a8:85:a3:28:6b: 52:35:40:18:5a:9c:46:01:9e:e7:15:b1:41:dc:61: 04:c9:12:cf:8a:c1:2e:d7:4d:52:e4:d0:28:1e:36: f8:fd:09:b3:ad:c9:46:0f:c1:71:c5:bd:50:e9:a9: ba:7c:a9:c8:66:83:67:8b:36:b3:b1:23:fc:ae:5e: 03:a7:3a:b0:6a:88:dc:c9:11:77:59:4a:34:6d:2b: 04:cd:9d:1d:84:e0:4c:35:89:d7:03:b7:49:05:43: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.217.0/24 Signature Algorithm: sha256WithRSAEncryption 85:5a:e2:81:87:58:c5:a4:cb:0a:52:ec:53:7a:af:fe:5a:e4: 31:cd:ae:27:2f:fe:5b:c7:6d:51:8b:4e:5c:22:14:b5:d4:0b: ae:db:5b:47:2f:cb:51:c2:39:f3:bd:45:8b:93:4e:f0:b2:b1: c5:f5:fc:b8:71:43:b7:c4:e5:b1:c7:01:a3:60:d8:49:35:d8: 8d:de:01:55:de:7a:dd:52:12:cc:83:25:a2:6a:f7:80:c6:51: 06:b5:f3:ad:f9:53:85:8a:db:96:99:76:37:7b:0f:f9:37:85: 0f:73:e4:31:95:62:eb:77:d5:7b:e5:03:ce:46:18:64:ae:a1: dc:b6:3c:a8:73:d1:38:62:aa:9b:76:17:6e:5f:4d:5b:a3:ca: 1e:34:81:e1:ca:43:1f:5f:5e:21:24:d1:bf:c6:4d:2a:96:74: f4:76:28:47:e3:ef:a7:e4:20:8d:0f:2c:a0:a2:3e:7d:c3:31: 10:c7:e7:1e:6c:ff:0a:9f:85:6b:4e:c1:04:e0:ae:82:43:bb: 0a:da:50:d7:b8:11:59:6c:7e:73:60:07:8f:87:a4:2a:e1:98: a2:76:4d:2f:ca:eb:a4:cc:bd:72:3f:eb:1d:f4:a2:9e:85:0b: fc:f9:e0:5e:2b:0f:eb:fd:26:ce:4e:ea:3b:31:30:dc:96:5c: 2e:02:ba:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WOHv2vp5lOa8H0t5ms1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWM3MTQ2MGVhNDFkM2U2NTY1YzRiNDEwYjI2YzllNzhjZTE2ZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuUZkDr5XeBVFYZpK3yAQQ9XHCQE NJIRxXscolfrjDx1bmp+xcGkGeplcBx1wqzujgWgg4C9kRUoK38KdYnjwSEBRmhI GOM8FKM5TAKAw2nIxHAEDIcHejItkzw6i+cxigXXc0sNNLI09XsboYt97AnpqssZ u5HnJEbMyvzMAo3O5lBgL3cgdbmty4ecbueteBcRizJ46pnyxJT5eXqsqIWjKGtS NUAYWpxGAZ7nFbFB3GEEyRLPisEu101S5NAoHjb4/QmzrclGD8Fxxb1Q6am6fKnI ZoNnizazsSP8rl4DpzqwaojcyRF3WUo0bSsEzZ0dhOBMNYnXA7dJBUP9FQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAnHFGDqQdPmVlxLQQsmyeeM4W+fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzExNTcw My05MjBiLTRjNTEtYjM0MC04NmNmMDZhY2JmNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMTE1NzAz LTkyMGItNGM1MS1iMzQwLTg2Y2YwNmFjYmY0MS8xL0NjY1VZT3BCMC1aV1hFdEJD eWJKNTR6aGI1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9zZMA0GCSqGSIb3DQEBCwUAA4IBAQCFWuKB h1jFpMsKUuxTeq/+WuQxza4nL/5bx21Ri05cIhS11Auu21tHL8tRwjnzvUWLk07w srHF9fy4cUO3xOWxxwGjYNhJNdiN3gFV3nrdUhLMgyWiaveAxlEGtfOt+VOFituW mXY3ew/5N4UPc+QxlWLrd9V75QPORhhkrqHctjyoc9E4YqqbdhduX01bo8oeNIHh ykMfX14hJNG/xk0qlnT0dihH4++n5CCNDyygoj59wzEQx+cebP8Kn4VrTsEE4K6C Q7sK2lDXuBFZbH5zYAePh6Qq4Ziidk0vyuukzL1yP+sd9KKehQv8+eBeKw/r/SbO Tuo7MTDcllwuArr+ -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:06 2026 by rpki-client