This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer File: CtBt0nvZOjgNpMddGovwdoKP1ko.cer (raw, json) Hash identifier: vKBpwerXJJ8Fq8sZT6Canp7HZIAohayYSjxSsvOIgUQ= Subject key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7AE6D62C43EE3D8B3DAD1D0ED8AED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62236 IP: 185.224.28.0/24 IP: 2a0e:ca80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ae:6d:62:c4:3e:e3:d8:b3:da:d1:d0:ed:8a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:87:34:db:60:e2:9b:30:4f:12:57:99:25: cb:bf:bc:ad:aa:78:ce:c6:65:33:67:0d:53:e2:fe: 4e:85:df:b7:95:6b:56:3a:b3:d3:f6:5b:65:30:05: 0a:be:cf:5b:b9:2c:f3:5d:f9:7b:32:8f:a7:bf:1d: 44:f8:14:56:78:9a:82:b4:15:75:b5:2c:50:af:6d: 50:84:1a:61:77:b2:8c:eb:1c:2d:2b:5e:b1:c2:a0: 39:d9:a0:5f:e2:51:1c:71:78:ba:4f:f1:da:06:e0: af:bc:04:1c:9e:d7:b0:bf:1b:77:8b:7b:88:c5:80: 42:e0:b9:c5:a8:8b:c5:54:3d:47:68:2b:bf:ea:dd: 65:a6:eb:71:fc:bb:26:0b:11:88:69:c8:ee:6c:b0: f3:5c:30:2f:db:82:f6:3c:d2:32:98:a0:83:1b:c8: 7b:9b:ea:e0:8b:d6:cc:90:0d:46:6d:0e:8b:cd:53: b2:bd:e1:e4:45:62:cc:a8:c2:b9:1c:34:b8:76:37: d6:b1:9c:21:3e:33:4e:83:10:c5:dc:42:5e:45:f3: 9f:67:c2:c8:1a:0d:6a:36:70:b8:68:84:32:f3:09: 1f:bd:a8:e9:3a:34:ca:41:77:10:4a:96:48:1f:20: fe:39:f6:e9:d7:10:d3:ad:1b:2d:a4:2a:17:55:40: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.28.0/24 IPv6: 2a0e:ca80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62236 Signature Algorithm: sha256WithRSAEncryption 0b:7e:00:f8:90:3f:7c:7b:48:9f:21:55:4a:66:5d:eb:42:b2: eb:c8:7e:04:ce:14:ef:51:86:b7:9e:d6:5d:7c:1f:34:71:58: d6:5f:4b:2c:55:c2:8e:5d:e3:a7:67:a5:5c:0a:ff:c5:96:ca: 39:a0:93:20:7b:ad:11:78:f8:15:4c:61:ee:0e:e8:11:15:cd: ef:4a:a9:c1:64:68:51:b7:6c:19:f9:90:30:30:a1:8b:09:c4: 39:78:76:46:c5:ba:70:9c:d8:c7:ec:74:b1:84:f4:a1:e8:f8: 96:9c:56:24:a0:92:64:4c:52:1e:09:e6:66:12:7c:c3:7b:ea: d1:cf:c6:8b:fd:77:fd:dd:b2:cf:41:49:55:8a:ca:72:4c:3d: 7b:07:75:e0:d6:54:fa:96:11:5e:f0:c1:bf:7f:5b:a3:1e:ef: 2e:31:95:1c:e8:06:6b:20:49:a0:5d:f1:3f:6d:61:b5:f8:79: cc:21:d6:e1:4e:e5:92:53:01:5e:7d:97:73:6c:e4:92:dd:6e: 97:f3:ea:ba:de:f1:d9:e6:9e:da:c4:ec:5d:14:4f:b3:01:b4: de:01:95:44:9d:13:18:17:53:d2:b8:c7:cc:59:40:dd:40:2e: 02:88:88:e4:4c:72:14:c9:94:63:25:44:2c:34:3b:99:f8:af: 0e:e7:c5:e3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x65tYsQ+49iz2tHQ7YrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWQwNmRkMjdiZDkzYTM4MGRhNGM3NWQxYThiZjA3NjgyOGZkNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvuHNNtg4pswTxJXmSXLv7ytqnjO xmUzZw1T4v5Ohd+3lWtWOrPT9ltlMAUKvs9buSzzXfl7Mo+nvx1E+BRWeJqCtBV1 tSxQr21QhBphd7KM6xwtK16xwqA52aBf4lEccXi6T/HaBuCvvAQcntewvxt3i3uI xYBC4LnFqIvFVD1HaCu/6t1lputx/LsmCxGIacjubLDzXDAv24L2PNIymKCDG8h7 m+rgi9bMkA1GbQ6LzVOyveHkRWLMqMK5HDS4djfWsZwhPjNOgxDF3EJeRfOfZ8LI Gg1qNnC4aIQy8wkfvajpOjTKQXcQSpZIHyD+Ofbp1xDTrRstpCoXVUA48QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFArQbdJ72To4DaTHXRqL8HaCj9ZKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2RiNzVk Yi0yNWIyLTQzZGMtYWExMi1lZDAwMWEyODg5YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvZGI3NWRi LTI1YjItNDNkYy1hYTEyLWVkMDAxYTI4ODlhZC8xL0N0QnQwbnZaT2pnTnBNZGRH b3Z3ZG9LUDFrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAueAcMA0EAgACMAcDBQMqDsqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzHDANBgkqhkiG9w0BAQsFAAOCAQEAC34A+JA/fHtI nyFVSmZd60Ky68h+BM4U71GGt57WXXwfNHFY1l9LLFXCjl3jp2elXAr/xZbKOaCT IHutEXj4FUxh7g7oERXN70qpwWRoUbdsGfmQMDChiwnEOXh2RsW6cJzYx+x0sYT0 oej4lpxWJKCSZExSHgnmZhJ8w3vq0c/Gi/13/d2yz0FJVYrKckw9ewd14NZU+pYR XvDBv39box7vLjGVHOgGayBJoF3xP21htfh5zCHW4U7lklMBXn2Xc2zkkt1ul/Pq ut7x2eae2sTsXRRPswG03gGVRJ0TGBdT0rjHzFlA3UAuAoiI5ExyFMmUYyVELDQ7 mfivDufF4w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:42 2026 by rpki-client