This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer File: cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer (raw, json) Hash identifier: dGjFHiptk5yGWg6UKoMkabOfTxsAoZ+kjrgs+uwRdSc= Subject key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A290D9FD14742861DA2BFD549EBC8B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213671 IP: 185.85.184.0/22 IP: 192.48.111.0/24 IP: 2a05:b100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:90:d9:fd:14:74:28:61:da:2b:fd:54:9e:bc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70fee176f51ce8fd81424ff73a5417341279c0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:a2:5c:65:69:dc:97:09:fe:0c:8c:a4:bd: 8f:ae:8f:d4:9c:07:6e:99:a4:00:6e:de:7c:53:e3: a9:db:e8:0e:16:8e:85:39:b3:b4:8f:ed:76:00:6c: 99:e4:e5:4b:4c:64:7b:f2:53:c8:25:89:81:db:d9: 4f:e9:92:bb:89:ef:d7:e3:5a:b0:1d:d5:8e:b1:2d: c6:a9:10:c1:38:40:68:6a:80:68:fb:30:1f:e7:16: 85:10:90:f6:74:ce:5e:db:84:87:1b:11:bd:37:be: 3a:14:dc:f6:19:c9:ac:34:63:de:d9:27:a2:65:30: 9b:58:55:d7:2e:2b:87:70:c0:9a:f5:8f:ad:fe:50: 37:49:9f:57:97:a9:37:94:f4:b0:e4:c3:cd:0c:f0: ca:3d:2b:83:19:aa:70:12:bb:36:12:d8:11:ef:1a: d0:a7:23:98:68:50:d4:cb:55:89:6f:4c:ad:18:f6: 8a:c0:75:67:a4:fc:b5:99:02:c9:50:68:0a:58:37: a9:ea:2a:00:6f:f5:3e:47:91:22:f3:07:77:0f:f9: 88:fa:40:a8:a6:80:77:3f:14:56:ba:72:bd:d3:b0: 09:dc:77:f3:ea:c7:e3:3a:65:9e:68:66:ac:00:9d: 0a:bf:c6:30:64:86:50:ef:fa:6a:73:8a:2e:d7:99: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.184.0/22 192.48.111.0/24 IPv6: 2a05:b100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213671 Signature Algorithm: sha256WithRSAEncryption 58:b5:b3:46:ff:25:cf:c2:17:9b:b1:44:a1:e9:f1:fa:91:37: 17:8a:96:5d:02:59:d1:f1:cb:c8:d8:dc:6a:a9:1d:6d:c5:28: e1:5e:7c:79:e6:ee:fa:18:99:86:3d:c4:24:37:20:54:18:af: 74:69:b9:b0:26:52:3d:d8:c7:db:9d:d2:63:dc:19:f9:ca:17: 37:87:9d:d7:25:68:7e:c5:0a:ca:87:8f:82:cd:55:01:18:78: 0b:5d:c9:7e:d5:bb:59:ae:75:b2:94:85:6d:9e:7a:13:70:c0: 05:62:b0:70:76:76:e4:f1:c4:01:b1:15:66:4a:0f:f1:d5:5b: 9c:d2:c6:4f:97:ce:f3:8f:19:ca:be:5f:23:8c:f9:cb:8a:c8: cb:7e:46:0d:a0:50:41:f2:92:f9:8c:96:52:05:22:39:df:4f: 6a:03:07:61:f0:b1:53:f7:79:10:a8:f0:bd:da:30:e8:1a:6d: fb:67:bd:8a:12:ef:3d:66:33:bf:c5:48:6e:f5:b2:06:b9:9a: 85:fc:9f:72:a1:59:57:8a:ea:fc:33:4d:4e:e0:28:36:22:61: 1b:0f:05:94:47:09:7d:36:27:e3:11:74:a9:65:1d:46:25:f2: cf:d7:3a:36:bb:06:18:7b:f3:62:10:a7:d6:45:fd:84:ac:55: 2a:6b:bb:d6 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4opDZ/RR0KGHaK/1UnryLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGZlZTE3NmY1MWNlOGZkODE0MjRmZjczYTU0MTczNDEyNzljMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo26iXGVp3JcJ/gyMpL2Pro/UnAdu maQAbt58U+Op2+gOFo6FObO0j+12AGyZ5OVLTGR78lPIJYmB29lP6ZK7ie/X41qw HdWOsS3GqRDBOEBoaoBo+zAf5xaFEJD2dM5e24SHGxG9N746FNz2GcmsNGPe2Sei ZTCbWFXXLiuHcMCa9Y+t/lA3SZ9Xl6k3lPSw5MPNDPDKPSuDGapwErs2EtgR7xrQ pyOYaFDUy1WJb0ytGPaKwHVnpPy1mQLJUGgKWDep6ioAb/U+R5Ei8wd3D/mI+kCo poB3PxRWunK907AJ3Hfz6sfjOmWeaGasAJ0Kv8YwZIZQ7/pqc4ou15l3YQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHD+4Xb1HOj9gUJP9zpUFzQSecDxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzRiZTIy Mi02NDgyLTRkYjktOWE1Zi03NTJlOWI4YjA3NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGJlMjIy LTY0ODItNGRiOS05YTVmLTc1MmU5YjhiMDc1Ni8xL2NQN2hkdlVjNlAyQlFrXzNP bFFYTkJKNXdQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuVW4AwQAwDBvMA0EAgACMAcDBQMqBbEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNCpzANBgkqhkiG9w0BAQsFAAOCAQEAWLWz Rv8lz8IXm7FEoenx+pE3F4qWXQJZ0fHLyNjcaqkdbcUo4V58eebu+hiZhj3EJDcg VBivdGm5sCZSPdjH253SY9wZ+coXN4ed1yVofsUKyoePgs1VARh4C13JftW7Wa51 spSFbZ56E3DABWKwcHZ25PHEAbEVZkoP8dVbnNLGT5fO848Zyr5fI4z5y4rIy35G DaBQQfKS+YyWUgUiOd9PagMHYfCxU/d5EKjwvdow6Bpt+2e9ihLvPWYzv8VIbvWy BrmahfyfcqFZV4rq/DNNTuAoNiJhGw8FlEcJfTYn4xF0qWUdRiXyz9c6NrsGGHvz YhCn1kX9hKxVKmu71g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:39 2026 by rpki-client