This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer File: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer (raw, json) Hash identifier: moT+f6Ilk3G2l/7kQJ6c9eqDxCy0XDI5Apd7OHEtUvY= Subject key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC909ABC27D6AFAE515A9771159FBB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 109.71.78.0/24 IP: 2a13:8940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:09:ab:c2:7d:6a:fa:e5:15:a9:77:11:59:fb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=734c3511cbff092816418be477cb553d66b5b84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:2c:2e:20:ac:87:99:91:25:fe:09:4e:14: 10:16:98:31:23:1c:16:4a:44:cf:f3:1c:cf:9a:07: 7e:7b:e7:7b:96:75:c7:30:34:90:d2:93:3e:4c:d6: 72:0d:5d:f2:c1:ab:e9:e0:83:f3:37:b5:54:ab:4e: 27:8a:3c:da:b0:d9:48:2c:9a:21:b5:7d:72:a3:8b: 22:92:5c:84:5f:6e:19:f8:2a:d2:26:d6:e8:9a:21: 9d:65:73:2d:a2:a2:77:f4:5d:0b:7e:f2:01:8b:66: 2f:a8:67:7e:33:42:e1:aa:f9:7e:43:54:d1:4b:bb: 1b:14:17:c7:14:1e:c2:20:d5:25:dc:ba:7a:55:a5: 76:a4:8d:78:70:ba:50:be:56:22:52:e2:06:f6:52: 7f:17:ad:d4:38:89:dc:55:72:95:ab:fa:42:1a:b8: 37:97:35:cf:f4:f1:e9:12:37:c0:b5:b2:7c:3f:23: 98:32:a1:51:1e:3f:2c:21:57:43:79:09:8b:2a:de: 61:17:bb:38:ec:47:37:54:89:ef:64:f8:db:3e:66: b7:bb:c9:fe:dc:48:a2:35:88:cc:51:68:15:b9:1b: 3b:9a:b3:1c:e4:89:da:95:ac:33:6a:9e:4b:8b:db: fc:3d:4a:f2:7b:a2:92:a8:0f:49:32:66:b8:d1:a0: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.78.0/24 IPv6: 2a13:8940::/29 Signature Algorithm: sha256WithRSAEncryption 29:49:e5:f6:7b:6e:83:8b:59:3d:a2:3e:a1:10:16:b1:10:ae: 80:8a:06:38:e3:c0:e3:fe:60:27:78:74:81:5e:09:ad:7c:d7: f8:25:97:86:42:5f:39:27:54:d3:60:d8:3d:f3:af:c7:c9:b3: 0a:49:27:10:1e:cd:46:a6:72:7e:c7:7d:ad:47:dd:98:45:7b: 29:db:cb:b5:76:1e:6f:a7:0c:5b:20:8d:9d:e3:73:ac:c2:e5: 20:5a:d2:a3:1d:6b:0c:50:58:89:fe:38:f7:60:19:a1:c1:6f: a4:c5:32:d6:3d:9c:db:ac:a4:ba:c0:c1:46:87:84:3f:36:ce: 68:13:f0:2a:d9:17:99:20:0e:a1:c1:12:86:32:76:1d:7b:3b: ad:7b:fc:f3:4a:c2:13:fd:f0:5f:9c:ec:49:ce:a4:8b:ad:45: 9b:52:cb:14:6c:1d:2a:d4:a6:0e:c4:3d:b6:47:5f:ce:78:54: 8e:5a:ce:68:3f:7b:fd:2d:a2:79:aa:7b:df:a7:76:18:1c:48: 95:60:22:e1:9e:4d:65:37:5d:50:c6:28:92:2e:9c:77:55:0b: 38:d9:80:1a:20:08:2f:f2:d9:d8:2e:79:c4:f2:2d:66:c1:0f: 7f:38:d1:cf:da:2a:28:66:8d:d9:32:88:a2:5d:be:44:12:6b: f3:32:9a:fa -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yQmrwn1q+uUVqXcRWfuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRjMzUxMWNiZmYwOTI4MTY0MThiZTQ3N2NiNTUzZDY2YjViODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujAsLiCsh5mRJf4JThQQFpgxIxwW SkTP8xzPmgd+e+d7lnXHMDSQ0pM+TNZyDV3ywavp4IPzN7VUq04nijzasNlILJoh tX1yo4siklyEX24Z+CrSJtbomiGdZXMtoqJ39F0LfvIBi2YvqGd+M0Lhqvl+Q1TR S7sbFBfHFB7CINUl3Lp6VaV2pI14cLpQvlYiUuIG9lJ/F63UOIncVXKVq/pCGrg3 lzXP9PHpEjfAtbJ8PyOYMqFRHj8sIVdDeQmLKt5hF7s47Ec3VInvZPjbPma3u8n+ 3EiiNYjMUWgVuRs7mrMc5Inalawzap5Li9v8PUrye6KSqA9JMma40aDx4wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHNMNRHL/wkoFkGL5HfLVT1mtbhPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2MzZDIy MC00OTg1LTRkMTktODIwMC02MDgwOTdmMThkODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvYzNkMjIw LTQ5ODUtNGQxOS04MjAwLTYwODA5N2YxOGQ4My8xL2MwdzFFY3ZfQ1NnV1FZdmtk OHRWUFdhMXVFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAbUdOMA0EAgACMAcDBQMqE4lAMA0GCSqGSIb3 DQEBCwUAA4IBAQApSeX2e26Di1k9oj6hEBaxEK6AigY448Dj/mAneHSBXgmtfNf4 JZeGQl85J1TTYNg986/HybMKSScQHs1GpnJ+x32tR92YRXsp28u1dh5vpwxbII2d 43OswuUgWtKjHWsMUFiJ/jj3YBmhwW+kxTLWPZzbrKS6wMFGh4Q/Ns5oE/Aq2ReZ IA6hwRKGMnYdezute/zzSsIT/fBfnOxJzqSLrUWbUssUbB0q1KYOxD22R1/OeFSO Ws5oP3v9LaJ5qnvfp3YYHEiVYCLhnk1lN11QxiiSLpx3VQs42YAaIAgv8tnYLnnE 8i1mwQ9/ONHP2iooZo3ZMoiiXb5EEmvzMpr6 -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:33 2026 by rpki-client