This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer File: cFtQehAZ98Rlc33FlzbAb93c7-c.cer (raw, json) Hash identifier: cNSGbqs0722MlZI/XhzmXF+QMkcoFNbCPsENqPBIasU= Subject key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759203868B89D2A48FBC56F589028FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:d68::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:20:38:68:b8:9d:2a:48:fb:c5:6f:58:90:28:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=705b507a1019f7c465737dc59736c06fdddcefe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:c1:0c:ba:dc:0e:57:2e:11:d0:29:a5:94: 9f:ef:f5:28:53:15:8c:f2:78:41:83:40:d7:68:35: 43:c4:e5:d5:22:14:7f:b8:7a:68:d6:b8:8b:9e:e5: d5:ed:75:5d:f6:d9:77:df:34:8a:d3:73:c0:6c:2a: 50:a6:f4:21:51:b4:9d:10:21:a2:94:08:e7:ff:bc: e5:c6:e2:d8:b4:ff:74:a8:18:0e:1a:b7:e2:e1:49: 5a:27:30:90:3e:84:a4:33:39:f3:13:37:aa:87:31: d9:a2:0b:5a:3b:5a:a5:67:57:bd:c2:a2:a1:ea:ff: 29:30:2b:72:22:d4:44:c0:bd:77:3f:d5:8f:aa:d5: a9:2b:91:a5:7c:c9:90:aa:7c:e1:b1:ce:cc:2f:09: 9e:1d:53:95:a9:f1:0d:b7:c7:8d:42:9d:b2:df:52: df:ba:79:c8:ed:5e:eb:7d:cc:53:29:8c:7b:45:ca: 78:54:7f:93:e0:62:56:a5:ad:b5:a7:4c:a7:de:92: 67:16:2e:f8:ce:b8:64:c6:0b:ba:d3:89:d8:02:9a: 30:27:35:e2:37:35:81:cb:23:b4:a8:1a:ef:bf:43: 27:56:99:ef:be:46:04:56:e0:78:e8:ba:3d:09:9f: 03:eb:36:0b:73:55:7b:d8:ad:d5:2a:2d:aa:ee:83: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d68::/48 Signature Algorithm: sha256WithRSAEncryption 9a:80:9c:7e:41:11:05:b0:b0:8e:92:81:c5:53:7b:b7:11:9d: fe:2f:76:bd:06:91:6f:62:e1:d5:af:dc:3f:f4:09:92:96:03: 03:81:b2:e3:f4:39:48:03:5f:de:a7:e3:f1:8f:22:80:9e:70: 8a:9d:fb:5e:07:6b:96:d9:84:22:c4:b7:e3:b0:e2:40:74:13: db:f9:7d:b9:52:02:95:80:9e:87:c3:be:f6:67:a8:78:5c:35: e1:3c:43:71:ce:b9:63:10:b4:7e:3e:4c:a3:e5:5e:61:50:3a: 8b:87:a7:3b:fa:ed:4e:5a:74:9f:0e:c5:54:51:d4:16:20:fc: b5:3e:66:71:a9:89:ff:d4:e3:53:bd:db:9f:f9:34:fd:c8:9d: b8:43:96:de:b1:e1:ae:e5:c0:33:d4:72:7f:be:2f:a2:db:87: a2:9a:9f:3c:b9:de:29:00:03:37:87:46:ad:b1:fb:b1:93:58: 39:1c:ba:01:ec:4b:b6:7f:06:e7:e1:49:8d:a1:f3:38:58:62: c1:79:26:d6:eb:7a:9b:0a:c1:78:d9:4c:82:c7:e4:90:a4:65: 68:dc:b1:be:f2:2f:e4:fb:68:48:9e:8e:9b:ba:1a:c4:4a:71: bd:35:a2:ac:b9:4c:3c:7a:d3:9c:8d:33:f4:d7:98:b2:0e:58: d8:1f:0a:39 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt3WSA4aLidKkj7xW9YkCj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDViNTA3YTEwMTlmN2M0NjU3MzdkYzU5NzM2YzA2ZmRkZGNlZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z3BDLrcDlcuEdAppZSf7/UoUxWM 8nhBg0DXaDVDxOXVIhR/uHpo1riLnuXV7XVd9tl33zSK03PAbCpQpvQhUbSdECGi lAjn/7zlxuLYtP90qBgOGrfi4UlaJzCQPoSkMznzEzeqhzHZogtaO1qlZ1e9wqKh 6v8pMCtyItREwL13P9WPqtWpK5GlfMmQqnzhsc7MLwmeHVOVqfENt8eNQp2y31Lf unnI7V7rfcxTKYx7Rcp4VH+T4GJWpa21p0yn3pJnFi74zrhkxgu604nYApowJzXi NzWByyO0qBrvv0MnVpnvvkYEVuB46Lo9CZ8D6zYLc1V72K3VKi2q7oMnuwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFHBbUHoQGffEZXN9xZc2wG/d3O/nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2MxMjhi Yy1jZGRiLTRiMDctOGQwMS02MmYxYTM1MDQxNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvYzEyOGJj LWNkZGItNGIwNy04ZDAxLTYyZjFhMzUwNDE0Yy8xL2NGdFFlaEFaOThSbGMzM0Zs emJBYjkzYzctYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA1oMA0GCSqGSIb3DQEBCwUAA4IBAQCa gJx+QREFsLCOkoHFU3u3EZ3+L3a9BpFvYuHVr9w/9AmSlgMDgbLj9DlIA1/ep+Px jyKAnnCKnfteB2uW2YQixLfjsOJAdBPb+X25UgKVgJ6Hw772Z6h4XDXhPENxzrlj ELR+Pkyj5V5hUDqLh6c7+u1OWnSfDsVUUdQWIPy1PmZxqYn/1ONTvduf+TT9yJ24 Q5beseGu5cAz1HJ/vi+i24eimp88ud4pAAM3h0atsfuxk1g5HLoB7Eu2fwbn4UmN ofM4WGLBeSbW63qbCsF42UyCx+SQpGVo3LG+8i/k+2hIno6buhrESnG9NaKsuUw8 etOcjTP015iyDljYHwo5 -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:51 2026 by rpki-client