This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer File: CkvR0w9yNc1xc5wEIxDcJggHOPY.cer (raw, json) Hash identifier: s8437qNdrBfATKKYyiENW6B8F1EgohL731YPKXd/Nf0= Subject key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F821F0058E402280D86852C96930644 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51269 IP: 178.255.96.0/21 IP: 185.103.140.0/22 IP: 2a03:b700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:1f:00:58:e4:02:28:0d:86:85:2c:96:93:06:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:a0:b4:06:b5:f9:c2:ef:31:17:cb:41:67: f1:11:4c:86:3c:68:a2:c9:91:93:20:b0:67:e2:e3: 1b:79:57:3b:42:73:16:aa:ec:87:e6:e3:ed:fb:32: 7b:37:c4:0c:12:1c:15:f2:53:97:27:ec:3e:7c:1d: f0:13:68:02:c9:93:49:57:1d:07:df:8a:7b:43:22: 71:40:a3:fa:5b:70:fd:45:61:06:48:43:cb:0d:05: 7c:c8:c9:23:8f:1e:68:2e:bc:dd:8a:ef:5e:09:f3: 5d:fb:00:6b:e7:61:76:56:49:dd:6a:b3:a7:cf:fc: 40:9d:bc:3e:17:ce:6a:10:f9:ee:15:6f:1a:39:7c: 9f:b3:d1:12:b0:c1:6b:7b:b7:5f:e7:45:6f:ec:4c: 73:47:3f:cf:70:4d:f5:72:3b:8d:87:fc:b2:ae:05: 3c:24:4d:8c:66:f4:5d:a6:7e:0f:a7:9d:36:2d:73: 2b:fd:8d:60:fe:5e:c8:b1:e3:44:26:ac:c3:c2:b4: 7d:d0:7d:cb:e8:1b:42:4e:eb:54:cf:6c:fc:f3:3e: f3:6b:c7:52:81:af:50:3a:c9:04:22:da:19:49:b9: 16:60:41:9a:75:51:30:5c:b3:f4:d4:4a:1c:18:a7: 7d:20:0c:ba:42:b9:15:ce:a8:84:91:1e:aa:5a:ef: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.96.0/21 185.103.140.0/22 IPv6: 2a03:b700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51269 Signature Algorithm: sha256WithRSAEncryption 1d:f4:71:cb:a8:41:89:93:cd:f1:29:cd:9a:e4:e2:42:c4:b4: 97:b2:84:7a:e4:8e:f2:a9:e6:60:96:e9:24:5b:3c:65:b3:09: b8:37:f2:44:0e:75:66:72:0b:5f:aa:33:35:c9:d7:3d:7c:ec: 8a:3b:60:56:7e:65:10:d8:cb:5e:d2:39:f2:7f:5a:b7:d6:04: ae:41:8d:62:c4:69:5d:8b:a0:cc:54:ef:c6:64:4d:8d:d5:3e: e5:a4:26:c2:4c:d4:cc:eb:40:5a:1b:d0:8a:42:0e:13:25:01: 37:60:0e:f0:89:2f:c7:07:ea:93:4b:d1:d2:d0:d6:76:d6:68: a2:1a:49:a5:26:cf:81:ea:26:ef:7e:48:4b:fb:43:59:a5:1a: 58:28:92:0b:3b:7e:25:7e:fb:94:d8:99:3c:e3:0d:49:19:16: 29:af:b5:7e:9c:27:60:f6:af:1a:25:6a:3d:66:6f:97:73:a1: cf:4b:3c:74:b8:6b:ee:96:8b:94:b3:e7:81:b8:be:1c:93:18: 52:d5:f3:12:3d:d3:56:9a:22:4e:19:26:60:19:05:21:29:1f: cc:f3:fd:a5:76:86:fd:c5:e8:cb:55:8d:f4:62:91:b5:a8:e2: 7f:68:de:03:a4:5d:18:e6:fa:e8:53:b9:88:23:61:4b:7f:f1: 8d:40:3e:1e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gh8AWOQCKA2GhSyWkwZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTRiZDFkMzBmNzIzNWNkNzE3MzljMDQyMzEwZGMyNjA4MDczOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxCgtAa1+cLvMRfLQWfxEUyGPGii yZGTILBn4uMbeVc7QnMWquyH5uPt+zJ7N8QMEhwV8lOXJ+w+fB3wE2gCyZNJVx0H 34p7QyJxQKP6W3D9RWEGSEPLDQV8yMkjjx5oLrzdiu9eCfNd+wBr52F2VkndarOn z/xAnbw+F85qEPnuFW8aOXyfs9ESsMFre7df50Vv7ExzRz/PcE31cjuNh/yyrgU8 JE2MZvRdpn4Pp502LXMr/Y1g/l7IseNEJqzDwrR90H3L6BtCTutUz2z88z7za8dS ga9QOskEItoZSbkWYEGadVEwXLP01EocGKd9IAy6QrkVzqiEkR6qWu9kzwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFApL0dMPcjXNcXOcBCMQ3CYIBzj2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzhkNTA5 Zi1mYjY0LTQyM2QtYjI2MS0zODg0NDNkNWYwMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvOGQ1MDlm LWZiNjQtNDIzZC1iMjYxLTM4ODQ0M2Q1ZjAwZi8xL0NrdlIwdzl5TmMxeGM1d0VJ eERjSmdnSE9QWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDsv9gAwQCuWeMMA0EAgACMAcDBQMqA7cAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDIRTANBgkqhkiG9w0BAQsFAAOCAQEAHfRx y6hBiZPN8SnNmuTiQsS0l7KEeuSO8qnmYJbpJFs8ZbMJuDfyRA51ZnILX6ozNcnX PXzsijtgVn5lENjLXtI58n9at9YErkGNYsRpXYugzFTvxmRNjdU+5aQmwkzUzOtA WhvQikIOEyUBN2AO8Ikvxwfqk0vR0tDWdtZoohpJpSbPgeom735IS/tDWaUaWCiS Czt+JX77lNiZPOMNSRkWKa+1fpwnYPavGiVqPWZvl3Ohz0s8dLhr7paLlLPngbi+ HJMYUtXzEj3TVpoiThkmYBkFISkfzPP9pXaG/cXoy1WN9GKRtajif2jeA6RdGOb6 6FO5iCNhS3/xjUA+Hg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:34 2026 by rpki-client