This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer File: cPTWBuHReQgGOXe2mHdoLtfi0e8.cer (raw, json) Hash identifier: Hvo0ZJ3fL960wFi+0h0CWfSy/fTyMjMGKus1V6OM81M= Subject key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36E80204019BDDB9CD5524F8402B3E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:69c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e8:02:04:01:9b:dd:b9:cd:55:24:f8:40:2b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70f4d606e1d17908063977b69877682ed7e2d1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:38:3d:26:b8:2c:d5:17:32:cd:b6:80:52:9c: 5c:5c:52:84:a1:27:f0:52:8e:a3:dc:1f:85:c0:98: 93:10:26:8f:33:7e:ac:47:99:df:f1:d2:6c:17:1f: 08:84:be:cd:45:29:cc:4f:e7:7d:d9:8e:79:f0:da: d1:08:ee:0e:65:f0:b6:51:bd:65:8f:60:f5:b6:1f: af:ef:d6:39:ce:69:5f:ea:ab:f9:46:98:fb:5c:53: ab:e1:f8:fb:aa:fd:66:d1:57:ee:a9:4f:50:ea:4b: 75:3b:b9:d3:31:54:55:be:4c:55:a3:79:15:90:f5: d9:a0:3b:64:7a:51:b5:af:af:1d:af:f7:76:4b:a3: 1d:59:e1:67:f3:3e:f7:0d:c7:a3:55:d6:cb:54:ee: 2f:01:45:55:8f:da:da:22:3d:c4:8b:3f:9a:ee:f3: cd:1a:ad:c8:85:ca:99:b0:6f:ac:a9:0d:74:1f:9b: b3:a1:d2:45:22:67:c6:6e:77:6c:76:f0:74:fe:a5: 65:97:08:02:e1:10:65:90:b7:1e:30:43:85:a7:5e: d5:2c:78:a2:89:3c:b2:a9:db:19:bd:75:4c:e2:46: 32:26:b9:7c:b0:12:43:27:3d:12:d6:ad:b5:b5:7d: 4f:12:75:03:41:23:aa:4a:59:5b:5d:b8:e6:85:c8: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:69c::/48 Signature Algorithm: sha256WithRSAEncryption 48:2b:3f:61:c6:a3:95:88:73:a7:9a:b6:12:f7:8d:5b:ec:f4: e6:d8:be:1b:56:c5:3c:60:ea:10:11:f2:18:0a:7b:23:04:d1: d5:e4:da:ae:cf:87:23:de:23:a5:b9:90:cb:bf:30:89:5b:5b: 83:66:77:fc:12:0e:7b:46:86:0d:55:2e:89:9a:09:d4:71:6a: 5c:7d:4d:c4:7e:af:04:80:cf:ec:f5:99:a4:ea:93:91:f6:57: b9:f0:66:33:89:3f:66:cb:f5:f9:68:50:ac:ac:34:ef:5e:42: 73:c5:67:3c:43:39:3c:ca:77:37:13:0d:ec:a3:46:a7:63:65: e1:e6:82:2a:dc:7f:7c:c8:05:2f:3b:50:51:c5:1d:09:8d:6e: d4:23:78:35:09:ca:49:9c:3a:7f:3b:97:5e:7f:ba:75:bf:af: e4:60:ac:c9:8d:6d:7f:69:d0:dd:43:2f:98:ea:bd:11:ca:7d: 61:8e:a4:cf:41:25:8f:7c:a3:9f:c1:75:d0:a0:2f:b2:9e:ca: 15:db:56:88:8a:4d:2f:59:07:77:66:f2:df:4d:8a:db:bd:76: 89:db:02:33:07:e9:f8:95:94:a5:b4:b0:90:1b:79:d9:8a:88: 59:79:82:fd:e8:99:ff:c1:b5:7a:8f:ab:80:53:d2:83:37:04: 9d:ac:c4:0c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt7NugCBAGb3bnNVST4QCs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGY0ZDYwNmUxZDE3OTA4MDYzOTc3YjY5ODc3NjgyZWQ3ZTJkMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Dg9Jrgs1RcyzbaAUpxcXFKEoSfw Uo6j3B+FwJiTECaPM36sR5nf8dJsFx8IhL7NRSnMT+d92Y558NrRCO4OZfC2Ub1l j2D1th+v79Y5zmlf6qv5Rpj7XFOr4fj7qv1m0VfuqU9Q6kt1O7nTMVRVvkxVo3kV kPXZoDtkelG1r68dr/d2S6MdWeFn8z73DcejVdbLVO4vAUVVj9raIj3Eiz+a7vPN Gq3IhcqZsG+sqQ10H5uzodJFImfGbndsdvB0/qVllwgC4RBlkLceMEOFp17VLHii iTyyqdsZvXVM4kYyJrl8sBJDJz0S1q21tX1PEnUDQSOqSllbXbjmhcg91QIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFHD01gbh0XkIBjl3tph3aC7X4tHvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2IxMDgz ZC1jMDc4LTQxNWUtOGQ5ZC01NzYzMzdlNTBkYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYjEwODNk LWMwNzgtNDE1ZS04ZDlkLTU3NjMzN2U1MGRjNC8xL2NQVFdCdUhSZVFnR09YZTJt SGRvTHRmaTBlOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAacMA0GCSqGSIb3DQEBCwUAA4IBAQBI Kz9hxqOViHOnmrYS941b7PTm2L4bVsU8YOoQEfIYCnsjBNHV5Nquz4cj3iOluZDL vzCJW1uDZnf8Eg57RoYNVS6JmgnUcWpcfU3Efq8EgM/s9Zmk6pOR9le58GYziT9m y/X5aFCsrDTvXkJzxWc8Qzk8ync3Ew3so0anY2Xh5oIq3H98yAUvO1BRxR0JjW7U I3g1CcpJnDp/O5def7p1v6/kYKzJjW1/adDdQy+Y6r0Ryn1hjqTPQSWPfKOfwXXQ oC+ynsoV21aIik0vWQd3ZvLfTYrbvXaJ2wIzB+n4lZSltLCQG3nZiohZeYL96Jn/ wbV6j6uAU9KDNwSdrMQM -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:16 2026 by rpki-client