This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer File: cPmxat8v0xmIhZkitEV0gd1-70A.cer (raw, json) Hash identifier: FKFrj84sqwItwf41VKBIVdDV71ke8bprAicY+qtWH4A= Subject key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC8A64B94864A0BA4551ED0283405F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199270 IP: 141.226.240.0/21 IP: 141.226.249.0/24 IP: 185.23.172.0 -- 185.23.174.255 IP: 213.137.80.0/20 IP: 2a00:66a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a6:4b:94:86:4a:0b:a4:55:1e:d0:28:34:05:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:27:9d:2c:17:99:5e:2a:84:90:cb:8b:92: ed:c8:40:a1:42:80:8c:5e:a4:ab:0e:ef:1d:ca:0e: ec:54:49:df:cf:16:61:ad:fc:24:1b:72:8c:41:01: 4d:69:e2:d0:6b:cb:04:5f:69:20:01:81:24:ac:68: b2:e4:f7:84:48:e5:d2:a5:f4:05:25:06:ad:cd:48: a0:84:2c:2c:a4:01:fd:b1:d7:93:87:b1:6c:e8:7c: 5f:6c:50:ff:73:f1:01:34:13:02:f5:80:c4:45:03: f2:c9:de:19:a9:4b:58:a9:17:6a:12:0f:1c:5f:f7: a1:82:26:e6:59:d6:3f:23:5a:02:a5:8e:d3:0c:48: 3b:dd:83:e7:6a:75:7a:93:c6:29:3c:48:fa:63:76: 53:2f:e0:d3:87:42:80:c0:6f:f9:80:f5:0f:6b:9c: e8:5f:0a:5f:29:6a:35:2d:44:d7:4d:c5:60:5b:bc: e9:8a:b1:f3:2d:2d:0e:34:38:e8:60:a9:3f:d5:fd: 23:1b:d4:56:ca:d1:ce:c7:62:0b:39:26:d6:39:04: ee:c6:82:37:d8:c6:df:bc:bc:38:76:bb:22:81:c5: 7b:ed:95:9c:c2:33:d1:0e:5d:13:ca:dc:20:d0:65: d8:39:06:33:30:50:dd:e9:e4:39:42:ff:55:ed:c7: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.240.0/21 141.226.249.0/24 185.23.172.0-185.23.174.255 213.137.80.0/20 IPv6: 2a00:66a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199270 Signature Algorithm: sha256WithRSAEncryption 55:95:ab:45:6f:19:4a:05:1f:b4:65:d8:c5:d4:90:cb:0e:2b: 65:06:32:42:a9:a0:79:bf:f1:c7:f0:6f:04:26:40:34:83:87: 5e:02:d6:68:32:2a:73:a1:88:c3:d7:ff:fd:22:cc:c2:49:45: 8b:2c:7e:27:d3:f1:f3:b8:ec:5d:1e:3c:06:de:21:9c:43:10: d8:0b:cc:e9:0e:e4:9d:a3:02:96:9b:09:58:b4:4c:6d:18:d0: a1:cb:a4:2d:da:b9:a3:30:35:fb:ff:2a:a5:3d:d3:b1:8a:fd: b9:07:bd:d7:d1:34:0b:2c:14:b0:b8:54:06:f6:8d:d9:4f:00: cc:7b:5b:e1:12:78:de:77:a0:4d:4a:17:cf:76:82:84:c0:89: 5d:99:a8:81:76:c8:7c:b2:2a:48:58:4c:d4:43:d2:8c:b6:a5: ae:66:b1:93:bb:04:37:3c:67:3e:05:81:64:e6:90:9b:23:bb: 5a:3b:3d:90:93:d5:ef:a6:7a:84:49:71:1d:26:6c:fb:20:5f: 6c:e2:2a:dc:3c:d8:d2:28:6d:23:1d:ed:c9:59:59:3b:36:5d: 17:c0:a8:0b:a8:2b:66:4c:fb:10:38:ea:30:af:f8:38:92:22: 23:7f:58:87:b9:f3:98:7f:c3:3d:1b:cd:55:45:ca:74:b6:f7: d4:5e:73:90 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt9yKZLlIZKC6RVHtAoNAX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGY5YjE2YWRmMmZkMzE5ODg4NTk5MjJiNDQ1NzQ4MWRkN2VlZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF8nnSwXmV4qhJDLi5LtyEChQoCM XqSrDu8dyg7sVEnfzxZhrfwkG3KMQQFNaeLQa8sEX2kgAYEkrGiy5PeESOXSpfQF JQatzUighCwspAH9sdeTh7Fs6HxfbFD/c/EBNBMC9YDERQPyyd4ZqUtYqRdqEg8c X/ehgibmWdY/I1oCpY7TDEg73YPnanV6k8YpPEj6Y3ZTL+DTh0KAwG/5gPUPa5zo XwpfKWo1LUTXTcVgW7zpirHzLS0ONDjoYKk/1f0jG9RWytHOx2ILOSbWOQTuxoI3 2MbfvLw4drsigcV77ZWcwjPRDl0Tytwg0GXYOQYzMFDd6eQ5Qv9V7cehBwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFHD5sWrfL9MZiIWZIrRFdIHdfu9AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzk1NmRi OS1jOGY3LTRiOWYtYTU2ZS1iYzZkYjcyNDhhZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvOTU2ZGI5 LWM4ZjctNGI5Zi1hNTZlLWJjNmRiNzI0OGFkZC8xL2NQbXhhdDh2MHhtSWhaa2l0 RVYwZ2QxLTcwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQDjeLwAwQAjeL5MAwDBAK5F6wDBAC5F64DBATV iVAwDQQCAAIwBwMFACoAZqAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwpmMA0G CSqGSIb3DQEBCwUAA4IBAQBVlatFbxlKBR+0ZdjF1JDLDitlBjJCqaB5v/HH8G8E JkA0g4deAtZoMipzoYjD1//9IszCSUWLLH4n0/HzuOxdHjwG3iGcQxDYC8zpDuSd owKWmwlYtExtGNChy6Qt2rmjMDX7/yqlPdOxiv25B73X0TQLLBSwuFQG9o3ZTwDM e1vhEnjed6BNShfPdoKEwIldmaiBdsh8sipIWEzUQ9KMtqWuZrGTuwQ3PGc+BYFk 5pCbI7taOz2Qk9XvpnqESXEdJmz7IF9s4ircPNjSKG0jHe3JWVk7Nl0XwKgLqCtm TPsQOOowr/g4kiIjf1iHufOYf8M9G81VRcp0tvfUXnOQ -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:08 2026 by rpki-client