This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer File: cFUm-asN0naCP8Hw66od5jt9ZWw.cer (raw, json) Hash identifier: GV9qADDaQaZFyI+yUjZPYvQvTJtBC2jGt6iuAW7Pmfg= Subject key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E390D80FA4280595A1686A1E5D50AE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210129 IP: 185.94.132.0/22 IP: 185.227.120.0/22 IP: 2a0d:52c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0d:80:fa:42:80:59:5a:16:86:a1:e5:d5:0a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:93:f5:5a:21:76:9d:f0:bf:7d:d4:b8:86: f3:9f:6f:8d:09:94:a0:8e:8b:61:60:b2:52:00:ec: 12:ae:e6:6f:2a:3a:88:61:cd:42:65:f3:f0:4c:fd: 35:c5:91:68:f4:57:1e:34:77:a1:7f:6d:7b:53:3d: 97:9b:c4:16:5a:c9:40:d3:cb:ca:a8:56:ae:02:11: 73:40:11:2e:2f:fb:0f:3b:03:16:06:e3:77:4b:dc: a4:49:82:11:bc:95:b9:3a:74:f4:e6:01:b1:4d:09: 2b:c1:31:8e:06:a7:cd:62:78:7f:97:a0:c4:40:bc: 1a:65:2e:f1:37:84:9f:bf:d6:24:b6:83:af:6d:03: 4d:54:86:99:a9:38:e7:ab:63:ae:2a:40:35:5c:5a: 47:75:15:dd:0d:1a:c9:94:f7:09:e3:be:38:a1:e3: cb:0d:fc:12:f7:92:2e:ab:12:74:93:25:2d:95:18: 55:51:34:57:77:4d:35:05:03:c6:0b:36:59:35:50: fc:9d:57:ae:0e:d4:1b:39:ed:96:9e:6a:f8:e8:54: 18:06:9e:84:30:fc:c2:17:44:60:f2:22:46:dc:03: 99:b7:31:66:fc:a4:3e:f3:4b:a6:d7:05:0e:a3:89: 19:ac:1d:08:7c:22:0b:45:7e:5c:a7:bc:f3:ec:66: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.132.0/22 185.227.120.0/22 IPv6: 2a0d:52c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210129 Signature Algorithm: sha256WithRSAEncryption 32:36:46:70:09:2e:f1:57:71:bf:d5:db:b1:20:4b:17:29:bc: f5:90:ee:af:90:08:d8:8c:16:3c:30:f6:a3:db:97:de:6c:ec: f6:5e:c0:fb:17:2d:0f:ca:7d:b9:ac:9e:92:45:3d:4f:3d:27: 00:d0:1c:2c:5a:2d:d6:ea:1d:26:17:2e:bb:7b:da:57:b0:d9: 10:c3:df:e4:64:19:16:7e:57:dd:7b:1e:d7:d3:ac:2f:c6:ad: 1b:fa:3e:3a:36:75:7c:dc:fd:1e:bd:84:dc:f9:c6:20:8d:b5: 2a:e4:2b:b7:70:ed:f8:78:00:df:81:9b:17:e8:2e:c7:0e:d6: 9f:77:df:c1:b5:74:ae:cc:a2:f0:7b:5f:b6:90:1f:4a:e4:fe: e8:c3:88:f9:be:3b:ca:d2:29:6e:66:e5:76:cd:1a:bd:69:b3: 41:e6:88:6d:f5:6d:0f:10:09:37:a3:5f:c5:68:23:bb:97:c4: 18:00:6f:6b:a3:67:bc:e3:11:ea:d6:23:a2:3c:6c:60:88:27: 53:14:c8:93:d2:c0:48:87:9a:73:2f:6f:ea:e1:85:8c:9e:75: d3:95:29:78:6b:dc:ec:42:8b:61:57:a7:2c:10:94:5f:39:e5: 27:33:c0:60:2a:ef:5a:0a:81:ed:ef:1b:60:db:59:d5:83:d5: c1:d7:ff:67 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OQ2A+kKAWVoWhqHl1QrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDU1MjZmOWFiMGRkMjc2ODIzZmMxZjBlYmFhMWRlNjNiN2Q2NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69eT9Vohdp3wv33UuIbzn2+NCZSg jothYLJSAOwSruZvKjqIYc1CZfPwTP01xZFo9FceNHehf217Uz2Xm8QWWslA08vK qFauAhFzQBEuL/sPOwMWBuN3S9ykSYIRvJW5OnT05gGxTQkrwTGOBqfNYnh/l6DE QLwaZS7xN4Sfv9YktoOvbQNNVIaZqTjnq2OuKkA1XFpHdRXdDRrJlPcJ4744oePL DfwS95IuqxJ0kyUtlRhVUTRXd001BQPGCzZZNVD8nVeuDtQbOe2Wnmr46FQYBp6E MPzCF0Rg8iJG3AOZtzFm/KQ+80um1wUOo4kZrB0IfCILRX5cp7zz7GZEFwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHBVJvmrDdJ2gj/B8OuqHeY7fWVsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2ZlNzFi Ni02YWFhLTRiZDQtODY2MS02OTk4YWI3ZWRmN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZmU3MWI2 LTZhYWEtNGJkNC04NjYxLTY5OThhYjdlZGY3YS8xL2NGVW0tYXNOMG5hQ1A4SHc2 Nm9kNWp0OVpXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuV6EAwQCueN4MA0EAgACMAcDBQMqDVLAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM00TANBgkqhkiG9w0BAQsFAAOCAQEAMjZG cAku8Vdxv9XbsSBLFym89ZDur5AI2IwWPDD2o9uX3mzs9l7A+xctD8p9uayekkU9 Tz0nANAcLFot1uodJhcuu3vaV7DZEMPf5GQZFn5X3Xse19OsL8atG/o+OjZ1fNz9 Hr2E3PnGII21KuQrt3Dt+HgA34GbF+guxw7Wn3ffwbV0rsyi8HtftpAfSuT+6MOI +b47ytIpbmblds0avWmzQeaIbfVtDxAJN6NfxWgju5fEGABva6NnvOMR6tYjojxs YIgnUxTIk9LASIeacy9v6uGFjJ5105UpeGvc7EKLYVenLBCUXznlJzPAYCrvWgqB 7e8bYNtZ1YPVwdf/Zw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:39 2026 by rpki-client