This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer File: cGdFrZI1PaioDLLg0inWjC71PbI.cer (raw, json) Hash identifier: COsjRuqovh+djvuGkSb7Us6GIysiiXS1IfoAK8Mkq6g= Subject key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80311F64DDEAF6591BEBB10647B3B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.219.8.0/22 IP: 185.133.172.0/22 IP: 2a06:e700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:31:1f:64:dd:ea:f6:59:1b:eb:b1:06:47:b3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:40:50:e0:94:61:da:ff:28:dd:34:13:0d: d6:ee:9f:f9:dc:ba:99:86:fb:38:a9:b1:66:4c:33: 48:d0:99:37:82:df:a9:0a:cf:8a:11:87:cb:4c:bd: 42:46:06:af:23:31:2b:0b:4a:e8:55:13:79:5e:11: 2b:f8:b7:c0:d5:8b:34:6b:07:1e:79:08:b9:83:e4: 48:51:96:51:3f:99:de:c1:96:d6:7c:1e:9f:f4:d4: 81:fb:9f:16:31:e1:37:eb:cb:e8:a4:3b:0f:d7:5a: fd:98:2a:b4:0b:48:17:33:39:1c:68:d9:5e:3f:d9: d9:1d:bc:56:2c:7f:38:cf:de:36:ce:38:b0:eb:15: 04:5c:a8:7c:63:db:c8:c0:c1:d3:67:ce:dc:87:eb: 99:bc:5d:05:76:d6:e0:31:36:3d:72:07:a3:00:2e: e7:f0:e3:57:e8:ef:e2:93:3a:0b:cd:be:e1:5b:68: 57:25:d3:6c:3e:d9:88:5c:d0:0b:dc:a2:94:84:9a: 70:c8:66:99:d9:41:a3:d4:5f:18:01:e8:e2:11:a8: 00:b2:7d:db:c8:3e:95:32:0f:09:69:30:ca:ec:5f: 60:20:d3:cb:38:85:7d:c6:84:eb:62:69:fb:b9:ca: 5c:54:c8:bc:d0:50:92:12:67:ba:d4:02:9c:ca:88: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.8.0/22 185.133.172.0/22 IPv6: 2a06:e700::/29 Signature Algorithm: sha256WithRSAEncryption 46:bb:a0:f0:a0:2a:6c:e4:57:a1:f4:8a:6c:ef:64:c6:b2:4f: e0:b4:e4:c0:3a:db:fb:d1:cd:9c:f3:09:c0:1c:78:da:b5:45: 4c:28:95:6c:43:62:da:db:f0:67:72:e2:32:77:3e:b8:ca:7c: c4:53:db:1d:bf:69:a4:cd:02:2e:25:93:51:13:02:f7:ee:15: aa:5e:07:20:b3:4f:6f:70:3a:73:40:20:47:fb:01:4f:a3:d2: fd:3f:82:5a:a2:89:c0:f1:fc:c3:0a:e8:7a:75:d0:4e:64:e0: cc:6d:be:80:c9:12:ca:4d:98:ee:7c:08:87:1c:c2:8a:f1:be: 60:21:45:2b:72:ac:e9:71:da:13:80:15:7c:84:9b:ed:64:e1: 33:77:14:31:8a:09:a3:9a:86:0a:be:17:ba:7d:d7:d0:05:32: 2a:7e:59:d4:1d:9f:6e:ac:35:1e:7a:b0:cf:2c:76:37:3e:c9: 68:14:86:91:50:90:2e:a6:1d:90:aa:ac:21:31:f4:13:5a:60: 0c:6f:0d:b9:b8:dc:ed:64:c8:03:47:c6:8d:25:98:d3:bd:21: b9:07:e9:35:4c:fe:56:f6:bd:8f:94:d8:a0:ae:55:12:9c:f7: b4:ae:2a:23:e7:57:0f:55:c7:c2:d9:44:2b:4e:47:37:ab:e3: 6b:bf:eb:ea -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8gDEfZN3q9lkb67EGR7O5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDY3NDVhZDkyMzUzZGE4YTgwY2IyZTBkMjI5ZDY4YzJlZjUzZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukJAUOCUYdr/KN00Ew3W7p/53LqZ hvs4qbFmTDNI0Jk3gt+pCs+KEYfLTL1CRgavIzErC0roVRN5XhEr+LfA1Ys0awce eQi5g+RIUZZRP5newZbWfB6f9NSB+58WMeE368vopDsP11r9mCq0C0gXMzkcaNle P9nZHbxWLH84z942zjiw6xUEXKh8Y9vIwMHTZ87ch+uZvF0FdtbgMTY9cgejAC7n 8ONX6O/ikzoLzb7hW2hXJdNsPtmIXNAL3KKUhJpwyGaZ2UGj1F8YAejiEagAsn3b yD6VMg8JaTDK7F9gINPLOIV9xoTrYmn7ucpcVMi80FCSEme61AKcyogqmQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFHBnRa2SNT2oqAyy4NIp1owu9T2yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2QwYWJk MC1iMTE0LTRlM2EtYWU1OS1lMjE3NjNjNjcyZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZDBhYmQw LWIxMTQtNGUzYS1hZTU5LWUyMTc2M2M2NzJmYS8xL2NHZEZyWkkxUGFpb0RMTGcw aW5XakM3MVBiSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCW9sIAwQCuYWsMA0EAgACMAcDBQMqBucAMA0G CSqGSIb3DQEBCwUAA4IBAQBGu6DwoCps5Feh9Ips72TGsk/gtOTAOtv70c2c8wnA HHjatUVMKJVsQ2La2/BncuIydz64ynzEU9sdv2mkzQIuJZNREwL37hWqXgcgs09v cDpzQCBH+wFPo9L9P4JaoonA8fzDCuh6ddBOZODMbb6AyRLKTZjufAiHHMKK8b5g IUUrcqzpcdoTgBV8hJvtZOEzdxQxigmjmoYKvhe6fdfQBTIqflnUHZ9urDUeerDP LHY3PsloFIaRUJAuph2QqqwhMfQTWmAMbw25uNztZMgDR8aNJZjTvSG5B+k1TP5W 9r2PlNigrlUSnPe0rioj51cPVcfC2UQrTkc3q+Nrv+vq -----END CERTIFICATE-----Generated at Sun Jan 25 15:20:18 2026 by rpki-client