This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer (raw, json) Hash identifier: VqV3hzo5Y8HtWXcuIOF3CQ3kH1nJXpUzfUiGM8avWfU= Subject key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8E8E95DAF61E5B9E3431C1A80C47B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2130 AS: 22683 IP: 130.138.0.0 -- 130.141.255.255 IP: 130.143.0.0 -- 130.145.255.255 IP: 130.147.0.0/16 IP: 144.54.0.0/16 IP: 149.59.0.0/16 IP: 161.83.0.0 -- 161.85.255.255 IP: 161.88.0.0/16 IP: 161.92.0.0/16 IP: 167.81.0.0/16 IP: 192.33.131.0/24 IP: 192.68.31.0 -- 192.68.39.255 IP: 192.68.48.0 -- 192.68.50.255 IP: 192.92.108.0/24 IP: 192.101.81.0 -- 192.101.90.255 IP: 192.109.128.0/24 IP: 193.25.48.0/20 IP: 2a02:20e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e8:e9:5d:af:61:e5:b9:e3:43:1c:1a:80:c4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7015ed275005408d2a86a2303701744430eda34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:38:e0:74:f5:8d:e8:6a:6f:2e:ce:12:57: bf:25:0c:0c:4d:2e:0d:d2:a1:b6:30:3c:8e:17:18: 37:98:c5:ac:fb:b6:d8:d2:bb:1e:33:c9:16:69:05: a2:21:e4:cc:07:4d:28:c7:43:cb:c6:3e:a5:f8:8e: a4:b8:ad:d9:01:11:58:cf:a3:a5:76:fe:f6:6e:5b: a1:54:cd:8f:eb:e9:d6:25:87:38:89:20:b7:2d:79: 5f:59:0f:e0:4e:11:ad:c4:f1:48:e3:91:a1:e1:e1: f3:6d:49:2e:b0:c7:a8:e6:11:6d:d0:a5:79:1c:3c: 42:ab:f5:18:e0:be:bf:9e:3a:02:37:6c:d1:5c:c8: b9:eb:48:a3:0c:7a:40:65:16:54:30:e8:b6:8b:a0: 5f:79:68:07:c2:ce:02:8c:f4:c6:59:57:e3:11:31: da:24:9b:02:62:db:0e:6e:f5:bc:bd:79:6c:4d:26: 78:13:62:95:d2:8e:18:5b:23:b1:8c:cb:5a:99:94: f4:ec:d5:9b:ee:21:48:0b:cb:c3:d3:71:7b:26:0c: 5f:6a:e7:34:46:fa:d6:4f:83:61:c6:46:31:76:60: d9:f5:4d:bd:58:55:4c:c6:42:c3:96:89:f0:05:b7: 99:c2:4e:8e:83:78:db:d0:c5:bf:18:01:03:80:01: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.138.0.0-130.141.255.255 130.143.0.0-130.145.255.255 130.147.0.0/16 144.54.0.0/16 149.59.0.0/16 161.83.0.0-161.85.255.255 161.88.0.0/16 161.92.0.0/16 167.81.0.0/16 192.33.131.0/24 192.68.31.0-192.68.39.255 192.68.48.0-192.68.50.255 192.92.108.0/24 192.101.81.0-192.101.90.255 192.109.128.0/24 193.25.48.0/20 IPv6: 2a02:20e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2130 22683 Signature Algorithm: sha256WithRSAEncryption 74:62:28:f2:60:3e:99:9d:ec:c2:ff:be:4d:de:41:db:d3:bb: e0:0c:48:5d:8e:61:db:ef:dc:09:68:f8:0d:0a:17:b1:3d:e0: 3e:74:47:9e:6e:6a:08:ad:ab:ff:ab:bd:fc:17:b7:e3:d8:43: 58:e7:b3:cc:96:ea:79:39:c4:54:a5:e5:e0:1f:f3:31:20:01: 0c:6b:3a:38:23:8c:ad:7a:95:c8:83:46:a9:b7:ba:8e:a7:71: 72:1e:3f:0c:35:9b:b7:4f:8c:c0:60:25:93:c6:80:bd:8e:7f: 98:51:08:52:47:a9:ac:55:f2:7a:0b:39:5b:76:bb:d0:a7:cc: f1:2b:c9:5e:25:b8:99:d7:b7:75:10:56:a5:89:c2:ca:f5:77: 24:3f:15:9e:18:46:22:b4:5c:98:af:ce:68:ab:04:ff:6f:ff: 2c:c5:49:00:85:fe:c7:4f:5b:a3:04:84:b9:22:dd:02:38:00: 42:5b:3d:99:34:9e:7e:07:f1:31:cd:8f:24:c9:ba:07:69:d3: d7:20:e4:5c:d6:4b:8e:0d:78:59:88:ba:d8:29:43:d2:2b:5c: 9a:60:a2:4c:41:ff:b6:9c:38:4c:87:d8:0b:d9:2b:c7:00:cb: e1:70:b5:f7:14:e3:af:d3:75:c0:86:4c:40:d4:9b:45:22:ae: 1e:51:e1:4b -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgISAZt6yOjpXa9h5bnjQxwagMR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDE1ZWQyNzUwMDU0MDhkMmE4NmEyMzAzNzAxNzQ0NDMwZWRhMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X444HT1jehqby7OEle/JQwMTS4N 0qG2MDyOFxg3mMWs+7bY0rseM8kWaQWiIeTMB00ox0PLxj6l+I6kuK3ZARFYz6Ol dv72bluhVM2P6+nWJYc4iSC3LXlfWQ/gThGtxPFI45Gh4eHzbUkusMeo5hFt0KV5 HDxCq/UY4L6/njoCN2zRXMi560ijDHpAZRZUMOi2i6BfeWgHws4CjPTGWVfjETHa JJsCYtsObvW8vXlsTSZ4E2KV0o4YWyOxjMtamZT07NWb7iFIC8vD03F7Jgxfauc0 RvrWT4NhxkYxdmDZ9U29WFVMxkLDlonwBbeZwk6Og3jb0MW/GAEDgAG4fQIDAQAB o4IDNTCCAzEwHQYDVR0OBBYEFHAV7SdQBUCNKoaiMDcBdEQw7aNKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2RkZjUy OS0xNTM2LTQ0ZjAtOWVkYS00ZGFkNDhhMTZlNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGRmNTI5 LTE1MzYtNDRmMC05ZWRhLTRkYWQ0OGExNmU0Mi8xL2NCWHRKMUFGUUkwcWhxSXdO d0YwUkREdG8wby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGwBggrBgEF BQcBBwEB/wSBoDCBnTCBiwQCAAEwgYQwCgMDAYKKAwMBgowwCgMDAIKPAwMBgpAD AwCCkwMDAJA2AwMAlTswCgMDAKFTAwMBoVQDAwChWAMDAKFcAwMAp1EDBADAIYMw DAMEAMBEHwMEA8BEIDAMAwQEwEQwAwQAwEQyAwQAwFxsMAwDBADAZVEDBADAZVoD BADAbYADBATBGTAwDQQCAAIwBwMFAyoCIOAwHQYIKwYBBQUHAQgBAf8EDjAMoAow CAICCFICAlibMA0GCSqGSIb3DQEBCwUAA4IBAQB0YijyYD6ZnezC/75N3kHb07vg DEhdjmHb79wJaPgNChexPeA+dEeebmoIrav/q738F7fj2ENY57PMlup5OcRUpeXg H/MxIAEMazo4I4ytepXIg0apt7qOp3FyHj8MNZu3T4zAYCWTxoC9jn+YUQhSR6ms VfJ6CzlbdrvQp8zxK8leJbiZ17d1EFalicLK9XckPxWeGEYitFyYr85oqwT/b/8s xUkAhf7HT1ujBIS5It0COABCWz2ZNJ5+B/ExzY8kyboHadPXIORc1kuODXhZiLrY KUPSK1yaYKJMQf+2nDhMh9gL2SvHAMvhcLX3FOOv03XAhkxA1JtFIq4eUeFL -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:51 2026 by rpki-client