This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer File: CxhwyW7wlyOBH7iSUO6m66ljwN8.cer (raw, json) Hash identifier: UeTJ3XOnfTUNNs/dh1Vv9xDvL+J47Lkk+JmNdq5Ff/Q= Subject key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2FEF8C925B7058E44F6F885AB9484 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 132.64.0.0/15 IP: 192.114.88.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fe:f8:c9:25:b7:05:8e:44:f6:f8:85:ab:94:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b1870c96ef09723811fb89250eea6eba963c0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:a1:7a:61:6f:09:82:db:b0:9a:30:2f:41: cb:ed:12:99:f8:af:5b:82:cf:14:75:f4:ce:a8:5f: 45:13:a4:19:35:51:b1:16:ca:1b:4d:73:30:4a:ca: 2e:c2:57:b0:28:7b:60:85:85:46:df:c4:95:f7:ef: c1:6a:bb:ec:f7:34:8d:01:20:13:b3:37:64:bd:9b: 59:00:18:98:c1:0c:29:c1:c3:1f:48:c4:3c:fa:7a: c2:13:35:2c:f4:e4:8e:bc:31:85:a9:6e:a4:69:dc: 9e:e9:dd:5c:17:d9:2b:30:42:75:f7:8a:9e:c0:46: 97:3e:be:14:7c:c0:07:9e:a0:9b:63:c7:35:07:d0: 3f:d8:ef:29:70:ee:cb:ce:76:26:53:51:5f:7d:67: 3f:94:03:a6:7e:7c:c7:b0:0a:2c:ac:aa:6e:09:4a: ca:2e:97:f4:2a:8e:fd:63:37:34:63:f7:fa:4c:77: f2:5d:b8:47:7b:a9:6d:82:25:ee:e3:7f:96:84:b2: da:a4:8d:a5:c5:b2:4f:b4:9f:0e:c5:76:e7:9f:89: 20:1f:34:31:eb:8d:ff:68:2c:1a:ae:cc:2d:09:26: 13:66:ed:8c:0f:b4:84:75:ea:d8:44:17:7a:d9:75: 8c:37:f5:e2:f3:4b:6e:00:a6:e5:0a:ed:1b:0f:de: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.64.0.0/15 192.114.88.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:b8:4d:31:f2:a7:4a:4b:a7:72:f3:39:d7:71:5a:f3:46:6d: 7b:47:ec:8c:62:a7:7f:95:15:b8:1b:48:c1:26:f3:fa:ec:a9: 3c:59:94:83:9e:36:b0:e6:56:ec:54:bb:d1:d0:e5:75:c4:b4: 1b:44:de:99:d0:6f:2a:b5:97:4e:59:ed:1a:8b:5c:ba:57:63: c6:4c:ba:e2:60:ef:a5:8a:73:46:19:70:64:50:a6:8c:e6:26: 82:55:62:f1:1f:62:eb:f5:33:36:1b:14:c4:9a:24:ae:85:a3: e0:e3:86:57:f6:33:9a:d6:2a:99:11:1b:0d:01:b4:7a:30:ec: 2a:8f:ef:c1:af:a1:f0:8e:96:73:73:b1:1e:04:a9:bc:a3:d7: a9:b1:f6:3d:36:1f:25:2c:62:6f:61:20:ae:ff:e6:82:bf:9a: a0:cd:04:92:d3:13:2b:35:dd:74:19:93:04:20:c8:0d:4c:26: 53:bb:54:e7:7a:ae:28:9b:ce:63:b9:50:95:3e:b3:3e:2a:c2: 22:72:98:49:fa:b3:fc:36:6d:2b:eb:63:8c:c7:92:78:76:f2: 88:ee:5b:b0:c9:66:10:1d:9c:e8:3a:30:c3:47:ea:b0:93:f5: 4b:69:da:5a:54:f0:7c:ce:5e:1a:63:e4:76:d4:0a:87:89:90: 72:23:9b:4b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt4ov74ySW3BY5E9viFq5SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjE4NzBjOTZlZjA5NzIzODExZmI4OTI1MGVlYTZlYmE5NjNjMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPqhemFvCYLbsJowL0HL7RKZ+K9b gs8UdfTOqF9FE6QZNVGxFsobTXMwSsouwlewKHtghYVG38SV9+/Barvs9zSNASAT szdkvZtZABiYwQwpwcMfSMQ8+nrCEzUs9OSOvDGFqW6kadye6d1cF9krMEJ194qe wEaXPr4UfMAHnqCbY8c1B9A/2O8pcO7LznYmU1FffWc/lAOmfnzHsAosrKpuCUrK Lpf0Ko79Yzc0Y/f6THfyXbhHe6ltgiXu43+WhLLapI2lxbJPtJ8OxXbnn4kgHzQx 643/aCwarswtCSYTZu2MD7SEderYRBd62XWMN/Xi80tuAKblCu0bD95P6wIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFAsYcMlu8JcjgR+4klDupuupY8DfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3Lzg3NzAy YS0zYWY2LTQ2YzctYTEyMy1hMmUyNGY5ODBiM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvODc3MDJh LTNhZjYtNDZjNy1hMTIzLWEyZTI0Zjk4MGIzZi8xL0N4aHd5Vzd3bHlPQkg3aVNV TzZtNjZsandOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMBhEADBALAclgwDQYJKoZIhvcNAQELBQADggEB AD64TTHyp0pLp3LzOddxWvNGbXtH7Ixip3+VFbgbSMEm8/rsqTxZlIOeNrDmVuxU u9HQ5XXEtBtE3pnQbyq1l05Z7RqLXLpXY8ZMuuJg76WKc0YZcGRQpozmJoJVYvEf Yuv1MzYbFMSaJK6Fo+Djhlf2M5rWKpkRGw0BtHow7CqP78GvofCOlnNzsR4Eqbyj 16mx9j02HyUsYm9hIK7/5oK/mqDNBJLTEys13XQZkwQgyA1MJlO7VOd6riibzmO5 UJU+sz4qwiJymEn6s/w2bSvrY4zHknh28ojuW7DJZhAdnOg6MMNH6rCT9Utp2lpU 8HzOXhpj5HbUCoeJkHIjm0s= -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:55 2026 by rpki-client