This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer File: CjfYB9T3zdPgr-SryO5aiAxgkPE.cer (raw, json) Hash identifier: XIvUiUdW+ZZVmLsgdblGk7lRKAW21x5BB/tspa3Zf4g= Subject key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EA02B55FACB9C0B96C876401A2243 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49690 AS: 203926 AS: 207193 AS: 209677 AS: 211846 AS: 213938 IP: 159.151.0.0/16 IP: 192.109.140.0 -- 192.109.148.255 IP: 2a07:8140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a0:2b:55:fa:cb:9c:0b:96:c8:76:40:1a:22:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:50:28:42:28:a4:e0:68:fa:ff:15:cd:51: 0c:50:cb:ea:27:05:b9:53:8d:d5:de:b3:36:46:fd: 7b:f1:05:ee:bb:89:39:01:1a:9d:62:43:cd:b4:07: 1a:a7:44:83:82:8b:20:f4:3e:34:51:35:5a:4e:cd: 83:ea:79:58:66:69:4e:34:a2:1a:0e:7b:73:35:fd: 8c:32:42:4c:77:1f:7a:8d:41:09:12:38:af:61:bb: 26:d1:31:bc:c3:44:65:7c:f1:23:7d:17:73:8c:2b: 23:88:c7:9f:c9:b3:94:58:53:c0:ff:b2:1f:2c:27: 4e:cc:a4:b2:06:f8:c7:5f:16:39:71:0c:7c:3a:ec: 1a:79:c9:0d:6b:7e:db:a5:8b:78:a8:f8:99:3a:db: 1e:2e:f1:ed:53:eb:bc:59:4f:f7:43:2e:28:3e:7f: 94:41:49:af:2a:f4:8c:03:ac:38:e5:22:11:71:39: e1:77:6d:34:fe:78:32:64:f2:17:f6:64:d4:9b:d9: bb:7f:ef:05:0b:0b:83:5c:50:04:40:86:b9:6c:f7: 61:30:40:86:e3:85:ba:0c:19:d4:40:d9:57:87:9a: 9e:b6:92:59:85:ca:cb:f2:4c:01:12:cd:85:a1:6d: 70:42:9f:be:08:7a:61:06:5a:f8:c5:41:71:c3:99: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.151.0.0/16 192.109.140.0-192.109.148.255 IPv6: 2a07:8140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49690 203926 207193 209677 211846 213938 Signature Algorithm: sha256WithRSAEncryption 1d:4c:58:8b:5e:a3:b3:a3:9b:62:40:8c:b4:f4:ed:f6:c7:ac: d0:d7:a6:6b:a3:fa:c3:0e:1c:3f:b9:43:7e:ec:bf:f3:5b:0f: 03:d5:dd:21:d7:ba:49:b2:dd:99:9c:9e:ce:df:d6:9b:ed:80: f3:d7:af:eb:c6:22:6d:65:83:cf:98:73:f5:72:99:9e:71:a4: 2b:de:88:20:58:ae:d4:7c:07:50:59:f9:61:46:5b:72:8b:7c: 1a:71:89:d6:97:88:46:60:ac:4c:54:b4:7f:1b:db:d4:08:a9: e2:11:56:94:b7:ce:0b:f1:cb:8f:3f:ee:36:21:09:50:b6:69: b7:b4:fc:25:7b:b8:30:37:cb:9e:18:b9:8b:e3:de:1f:e3:8e: d9:bd:ba:ae:1e:5f:4a:f8:f7:da:3f:55:26:f6:48:08:7d:5f: b7:c4:71:57:af:55:c5:56:fc:7b:f3:5a:56:cb:01:ba:47:93: 99:9c:ed:e8:af:71:7b:16:48:70:f3:ec:2b:af:c2:c8:dc:6b: 05:09:b3:5d:90:6b:2b:31:66:a2:87:85:ad:b2:4d:4a:24:9b: f6:bb:12:92:5e:cf:a1:02:2a:b6:f8:b1:4c:8d:ee:77:dc:de: 45:a4:2f:91:74:b1:bf:d0:9d:6e:3b:93:e7:c7:f0:3b:53:53: 49:ef:58:cd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt5fqArVfrLnAuWyHZAGiJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTM3ZDgwN2Q0ZjdjZGQzZTBhZmU0YWJjOGVlNWE4ODBjNjA5MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/lQKEIopOBo+v8VzVEMUMvqJwW5 U43V3rM2Rv178QXuu4k5ARqdYkPNtAcap0SDgosg9D40UTVaTs2D6nlYZmlONKIa DntzNf2MMkJMdx96jUEJEjivYbsm0TG8w0RlfPEjfRdzjCsjiMefybOUWFPA/7If LCdOzKSyBvjHXxY5cQx8OuwaeckNa37bpYt4qPiZOtseLvHtU+u8WU/3Qy4oPn+U QUmvKvSMA6w45SIRcTnhd200/ngyZPIX9mTUm9m7f+8FCwuDXFAEQIa5bPdhMECG 44W6DBnUQNlXh5qetpJZhcrL8kwBEs2FoW1wQp++CHphBlr4xUFxw5lBsQIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFAo32AfU983T4K/kq8juWogMYJDxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2JjMjY4 ZC02MWYwLTQ3MWYtYWFiOS04MDBlZGEyY2ZiMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvYmMyNjhk LTYxZjAtNDcxZi1hYWI5LTgwMGVkYTJjZmIzNi8xL0NqZllCOVQzemRQZ3ItU3J5 TzVhaUF4Z2tQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjAZBAIAATATAwMAn5cwDAMEAsBtjAMEAMBtlDANBAIAAjAHAwUD KgeBQDAzBggrBgEFBQcBCAEB/wQkMCKgIDAeAgMAwhoCAwMclgIDAylZAgMDMw0C AwM7hgIDA0OyMA0GCSqGSIb3DQEBCwUAA4IBAQAdTFiLXqOzo5tiQIy09O32x6zQ 16Zro/rDDhw/uUN+7L/zWw8D1d0h17pJst2ZnJ7O39ab7YDz16/rxiJtZYPPmHP1 cpmecaQr3oggWK7UfAdQWflhRltyi3wacYnWl4hGYKxMVLR/G9vUCKniEVaUt84L 8cuPP+42IQlQtmm3tPwle7gwN8ueGLmL494f447ZvbquHl9K+PfaP1Um9kgIfV+3 xHFXr1XFVvx781pWywG6R5OZnO3or3F7Fkhw8+wrr8LI3GsFCbNdkGsrMWaih4Wt sk1KJJv2uxKSXs+hAiq2+LFMje533N5FpC+RdLG/0J1uO5Pnx/A7U1NJ71jN -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:47 2026 by rpki-client