This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer File: Co6T8ZYb68EACcsmXAuvNHAqPas.cer (raw, json) Hash identifier: 3kw4IOwMi1ZK363q6ynIKzHdk8Hx4gKnHGoPt04/+3A= Subject key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103F0B7D73FCE6CDE6F56C49545186 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48925 AS: 214987 IP: 185.195.237.0/24 IP: 2001:67c:be8::/48 IP: 2a01:ec40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3f:0b:7d:73:fc:e6:cd:e6:f5:6c:49:54:51:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:04:6d:d2:d3:48:c2:95:69:89:a1:89:b0: b4:4a:82:ef:44:9c:83:f0:e9:0e:39:af:20:0f:42: ba:db:f1:ad:df:3d:59:ca:02:47:cd:c0:c0:bb:49: ec:c1:d7:45:17:d3:80:ec:46:1d:1a:f1:f5:5b:9b: 67:80:bd:b0:45:dd:10:a1:5a:e3:46:3b:4b:80:80: 8b:4f:27:a9:ae:c5:7c:b3:49:d9:fd:24:e7:9f:65: d8:45:ca:45:80:5e:31:14:12:63:fb:78:b5:20:2a: b7:ac:61:c5:31:e6:45:52:6e:c1:b1:ff:f8:bc:97: 05:b5:25:09:c4:3e:e7:cb:5e:ae:57:a9:cf:e2:55: a2:e8:43:4b:47:78:88:e8:90:69:e5:72:16:1e:a8: 74:e2:e4:1b:58:76:f2:a0:b2:01:c2:ad:0a:3c:42: d4:e5:bc:74:51:ef:1b:ec:02:5f:9e:ea:2b:ae:05: a4:e0:f4:66:29:61:a6:c5:bc:91:bf:39:7f:5c:26: 1b:0f:84:21:3b:e1:4b:e2:e7:08:ee:fc:34:3a:53: 09:81:a9:c5:ed:36:2b:c5:03:8b:4c:8e:ce:f0:b6: 99:87:c4:e1:2c:d6:bc:f9:28:20:36:51:28:7d:23: 65:91:54:fd:04:fa:14:7d:ad:a6:35:f2:d2:fe:d2: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.237.0/24 IPv6: 2001:67c:be8::/48 2a01:ec40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48925 214987 Signature Algorithm: sha256WithRSAEncryption 3d:1e:53:69:38:40:ca:39:fc:27:69:c0:41:c2:f2:c4:b3:2e: 93:fb:25:da:bd:79:4a:03:09:37:a1:26:f0:fe:a3:ac:d9:6f: 10:4b:35:c9:90:1c:6c:5c:e3:45:e2:e3:19:cd:42:02:c2:46: 18:66:4d:de:fa:01:7b:3e:2e:bf:14:16:4e:12:3d:82:3d:4f: 7b:15:65:ba:e4:9f:72:78:98:40:9e:cd:18:e9:18:8f:0f:23: 07:0b:68:82:31:ed:2b:9a:14:bf:9a:0c:1a:d5:ba:54:d0:39: 1d:7d:3c:ba:d3:3d:f6:24:5a:56:3b:61:c6:77:e5:69:57:f8: 54:0b:45:69:23:eb:65:e0:22:ca:57:72:bc:14:bb:a3:7c:ef: 93:21:a4:59:be:ca:db:23:d8:7a:7a:50:6e:cf:51:a8:74:3d: 2f:15:0d:af:38:fb:9c:38:b3:cb:46:a7:c5:34:85:68:29:00: a2:e4:72:c1:0f:e0:67:6b:66:d7:cb:8a:c7:db:74:21:24:0a: b6:51:4c:67:97:10:08:32:4c:66:36:a4:b7:2d:82:2c:09:9d: 48:26:af:96:bc:33:6a:4c:c9:13:c9:46:8b:13:8c:8a:ad:67: 07:c8:53:0a:f7:9a:f1:28:17:16:de:de:11:67:60:37:6c:5f: 0c:af:55:11 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt5ED8LfXP85s3m9WxJVFGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYThlOTNmMTk2MWJlYmMxMDAwOWNiMjY1YzBiYWYzNDcwMmEzZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvsEbdLTSMKVaYmhibC0SoLvRJyD 8OkOOa8gD0K62/Gt3z1ZygJHzcDAu0nswddFF9OA7EYdGvH1W5tngL2wRd0QoVrj RjtLgICLTyeprsV8s0nZ/STnn2XYRcpFgF4xFBJj+3i1ICq3rGHFMeZFUm7Bsf/4 vJcFtSUJxD7ny16uV6nP4lWi6ENLR3iI6JBp5XIWHqh04uQbWHbyoLIBwq0KPELU 5bx0Ue8b7AJfnuorrgWk4PRmKWGmxbyRvzl/XCYbD4QhO+FL4ucI7vw0OlMJganF 7TYrxQOLTI7O8LaZh8ThLNa8+SggNlEofSNlkVT9BPoUfa2mNfLS/tKIcQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFAqOk/GWG+vBAAnLJlwLrzRwKj2rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzM5ZmE0 My05Nzk0LTQyMWEtYmE4OS1iOTM1NmU2MWY3M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvMzlmYTQz LTk3OTQtNDIxYS1iYTg5LWI5MzU2ZTYxZjczYS8xL0NvNlQ4WlliNjhFQUNjc21Y QXV2TkhBcVBhcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQAucPtMBYEAgACMBADBwAgAQZ8C+gDBQMqAexA MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC/HQIDA0fLMA0GCSqGSIb3DQEBCwUA A4IBAQA9HlNpOEDKOfwnacBBwvLEsy6T+yXavXlKAwk3oSbw/qOs2W8QSzXJkBxs XONF4uMZzUICwkYYZk3e+gF7Pi6/FBZOEj2CPU97FWW65J9yeJhAns0Y6RiPDyMH C2iCMe0rmhS/mgwa1bpU0DkdfTy60z32JFpWO2HGd+VpV/hUC0VpI+tl4CLKV3K8 FLujfO+TIaRZvsrbI9h6elBuz1GodD0vFQ2vOPucOLPLRqfFNIVoKQCi5HLBD+Bn a2bXy4rH23QhJAq2UUxnlxAIMkxmNqS3LYIsCZ1IJq+WvDNqTMkTyUaLE4yKrWcH yFMK95rxKBcW3t4RZ2A3bF8Mr1UR -----END CERTIFICATE-----Generated at Mon Jan 26 01:29:12 2026 by rpki-client