This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer File: CcdG9nt6xW6m3YWVHsAiy71nrwY.cer (raw, json) Hash identifier: 78gOsttlzuoF/p5E0YqW6C+HCq5cQobsv9gA46I7mVM= Subject key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37BBC276302BCEDD0EDD906D255BC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210759 IP: 185.204.96.0/22 IP: 2a0a:f540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bb:c2:76:30:2b:ce:dd:0e:dd:90:6d:25:5b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:29:01:59:c2:7f:b8:5c:a3:ff:17:f3:60: aa:3d:41:44:ee:a0:f7:29:1d:69:49:7f:3c:c9:82: ea:4c:07:cb:2a:1c:6f:ea:d0:41:44:9f:e2:a8:31: ce:6d:62:fb:54:ca:81:40:b1:31:4e:10:09:94:46: 0e:83:58:c6:c3:ad:a3:77:2a:b3:fb:e0:3a:81:96: 3a:ef:68:88:ed:e0:b7:be:4a:78:a9:35:d3:8d:41: 66:37:f5:e1:40:ef:83:ce:a8:39:9d:10:f2:95:a7: 39:6a:f8:ee:37:cc:dd:c5:63:e8:3d:04:75:80:8e: f5:17:74:71:c2:b4:ea:0d:b6:05:1b:7f:8e:e4:be: 9f:ff:a3:d3:5b:43:cb:ff:d0:71:f1:40:5a:2b:6d: 44:b0:7a:5e:4c:3f:f9:18:0a:ed:ae:48:0f:15:06: c1:36:09:f0:99:4c:4c:7f:2d:1d:76:c5:7f:08:7c: 24:8c:d9:3e:22:cf:51:61:af:12:00:24:10:99:41: 76:80:b8:fe:8a:c2:c3:4f:88:a1:42:39:40:da:fd: ec:11:fd:0d:d8:20:88:0b:20:d0:db:eb:94:4b:5c: 8a:d0:3d:3b:69:60:1a:be:af:98:06:d2:12:ec:0e: 59:d3:e9:b4:c3:e5:46:0b:2d:47:c8:f0:f5:14:81: de:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.96.0/22 IPv6: 2a0a:f540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210759 Signature Algorithm: sha256WithRSAEncryption 07:6a:33:c2:34:d0:8e:57:33:3f:e2:b4:f9:7e:d3:3a:e9:fe: 54:4d:03:af:b5:f7:82:da:fe:b8:f6:ba:22:52:a1:f9:a2:87: 25:f4:e8:db:2f:e2:6b:4a:1f:d6:3e:4c:3b:09:84:86:34:87: dd:80:e8:c8:b7:07:42:fe:5f:31:85:df:2c:7f:50:61:e5:f0: 6e:4d:7c:91:bf:f8:d3:bd:38:bc:2a:69:b9:d3:e7:db:36:b7: 71:9a:56:7b:15:7a:59:52:c4:ea:1b:18:87:4a:92:a0:a3:57: 3b:0d:6e:73:82:28:f1:82:9c:25:4c:63:8e:9c:54:3b:8e:2c: 26:51:6b:d7:43:d1:f4:11:3d:40:4c:86:f9:ac:ed:2d:a0:0e: cd:a2:1d:c6:57:f4:45:2f:88:76:75:c1:9a:9b:a1:9f:3f:fb: 45:4d:6b:3d:db:43:40:cd:6a:96:bf:e2:24:23:6d:e3:86:e4: 5e:63:b4:62:88:c0:04:58:d8:b1:bc:4c:15:55:4e:e5:19:21: f7:30:f8:d9:54:d3:68:ba:69:5b:a8:0c:63:62:96:75:80:bd: 79:46:41:a4:b0:b8:fe:42:7b:84:12:20:af:a7:df:55:35:29: 4e:33:90:b5:67:e2:ff:5a:c4:88:9b:3b:5f:43:3a:37:e9:a2: 82:c7:98:70 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N7vCdjArzt0O3ZBtJVvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWM3NDZmNjdiN2FjNTZlYTZkZDg1OTUxZWMwMjJjYmJkNjdhZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X4pAVnCf7hco/8X82CqPUFE7qD3 KR1pSX88yYLqTAfLKhxv6tBBRJ/iqDHObWL7VMqBQLExThAJlEYOg1jGw62jdyqz ++A6gZY672iI7eC3vkp4qTXTjUFmN/XhQO+Dzqg5nRDylac5avjuN8zdxWPoPQR1 gI71F3RxwrTqDbYFG3+O5L6f/6PTW0PL/9Bx8UBaK21EsHpeTD/5GArtrkgPFQbB NgnwmUxMfy0ddsV/CHwkjNk+Is9RYa8SACQQmUF2gLj+isLDT4ihQjlA2v3sEf0N 2CCICyDQ2+uUS1yK0D07aWAavq+YBtIS7A5Z0+m0w+VGCy1HyPD1FIHe5wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAnHRvZ7esVupt2FlR7AIsu9Z68GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzkzYWY5 Ny0zYjllLTQ5NjEtODkwNC1hNmY2MTFhOGFiOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvOTNhZjk3 LTNiOWUtNDk2MS04OTA0LWE2ZjYxMWE4YWI5My8xL0NjZEc5bnQ2eFc2bTNZV1ZI c0FpeTcxbnJ3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucxgMA0EAgACMAcDBQMqCvVAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3RzANBgkqhkiG9w0BAQsFAAOCAQEAB2ozwjTQjlcz P+K0+X7TOun+VE0Dr7X3gtr+uPa6IlKh+aKHJfTo2y/ia0of1j5MOwmEhjSH3YDo yLcHQv5fMYXfLH9QYeXwbk18kb/40704vCppudPn2za3cZpWexV6WVLE6hsYh0qS oKNXOw1uc4Io8YKcJUxjjpxUO44sJlFr10PR9BE9QEyG+aztLaAOzaIdxlf0RS+I dnXBmpuhnz/7RU1rPdtDQM1qlr/iJCNt44bkXmO0YojABFjYsbxMFVVO5Rkh9zD4 2VTTaLppW6gMY2KWdYC9eUZBpLC4/kJ7hBIgr6ffVTUpTjOQtWfi/1rEiJs7X0M6 N+migseYcA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:18:10 2026 by rpki-client