This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer File: cS-cs8KYsVC-t5CAN290verEOKw.cer (raw, json) Hash identifier: CbfCCOIYkqU7PlialeLNQPWY7jQXtsKxLW3Qz4LwytE= Subject key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C74DAF01AB4512E74261CF238B79D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49623 AS: 60983 IP: 185.22.128.0/22 IP: 193.169.46.0/23 IP: 2a00:6060::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4d:af:01:ab:45:12:e7:42:61:cf:23:8b:79:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712f9cb3c298b150beb79080376f74bdeac438ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:f5:1d:59:6c:c0:6a:e7:4a:ab:ca:8b:64: bf:36:63:05:68:0a:d9:47:4f:1b:0a:9a:e7:41:cf: d8:19:78:0a:c2:bc:c1:57:fa:af:79:c6:26:67:11: 7d:6f:98:16:b5:b8:81:49:c4:b5:e5:41:70:cf:c0: 51:c7:93:be:7f:77:cf:2e:68:3d:c2:f3:84:50:57: 0a:c3:31:a6:30:c6:92:ed:1c:7b:3f:3e:13:20:4f: 0c:64:a8:5a:6a:01:1e:6a:9c:25:96:49:8c:dc:e4: 44:92:77:4c:96:74:77:ca:4b:19:6b:8c:d2:3c:75: 41:56:25:2d:68:47:c5:76:c4:9f:75:f1:ae:db:c6: c7:0d:45:c5:27:8b:52:46:9f:cd:42:81:a3:86:d6: 60:b3:c3:c1:cf:40:fd:da:18:0c:76:e1:38:45:4c: 56:8b:d5:bd:c4:a8:9d:f4:9a:26:4c:65:ca:07:af: 32:3e:6a:5e:eb:12:23:82:96:01:b6:57:b7:4a:b2: 76:ab:bd:8d:63:36:88:0a:27:36:bc:d9:cb:1d:4d: fa:ef:9b:bb:e4:6d:41:07:f0:9f:44:c6:e2:e9:fe: ed:d6:ee:10:75:7b:f1:cf:a8:39:fd:1e:21:d3:32: 03:c6:90:bf:a5:aa:34:9a:08:2d:1e:17:19:75:eb: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.128.0/22 193.169.46.0/23 IPv6: 2a00:6060::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49623 60983 Signature Algorithm: sha256WithRSAEncryption 3f:94:b7:d1:64:05:8c:ea:da:f0:10:87:ad:dd:92:0e:3e:80: cf:da:ab:92:a7:5f:6e:94:ff:e4:de:aa:f4:ef:5f:94:64:d4: a8:0f:21:ed:44:e0:39:2b:8f:f9:d7:3a:41:30:11:44:09:10: 5c:69:eb:1a:e8:30:eb:d3:14:97:6f:32:86:91:5c:b0:be:8a: ec:99:3d:0e:20:7d:64:78:07:7a:e4:36:57:57:3d:06:76:d9: ff:ba:0e:2c:28:f4:b0:1b:55:3a:37:5e:cb:ef:a3:b4:df:80: a5:48:7e:d4:35:92:8c:4d:06:25:cc:5f:61:64:6c:49:84:5f: 87:c4:24:12:0d:f8:25:b1:1d:d8:58:8e:f4:2c:8c:45:19:24: 0f:6e:19:2e:82:5b:98:37:e0:21:c9:a5:c1:43:c9:07:68:dd: f3:33:6c:75:63:33:40:5e:47:05:7d:c8:da:8e:a7:10:a2:e1: 23:e2:33:0c:8c:45:8c:e2:77:0c:71:c9:af:c2:ae:e6:81:1b: 82:e0:66:0d:43:bd:24:01:20:00:0a:69:4a:64:a8:2b:83:05: dc:3e:5c:08:c5:8d:25:39:43:b9:b0:4e:f2:9b:d2:88:26:4d: 13:7d:c8:0a:ea:e3:e1:50:34:a2:46:2a:fd:74:91:23:71:c7: 57:bc:28:cc -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3x02vAatFEudCYc8ji3nQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJmOWNiM2MyOThiMTUwYmViNzkwODAzNzZmNzRiZGVhYzQzOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3T1HVlswGrnSqvKi2S/NmMFaArZ R08bCprnQc/YGXgKwrzBV/qvecYmZxF9b5gWtbiBScS15UFwz8BRx5O+f3fPLmg9 wvOEUFcKwzGmMMaS7Rx7Pz4TIE8MZKhaagEeapwllkmM3OREkndMlnR3yksZa4zS PHVBViUtaEfFdsSfdfGu28bHDUXFJ4tSRp/NQoGjhtZgs8PBz0D92hgMduE4RUxW i9W9xKid9JomTGXKB68yPmpe6xIjgpYBtle3SrJ2q72NYzaICic2vNnLHU3675u7 5G1BB/CfRMbi6f7t1u4QdXvxz6g5/R4h0zIDxpC/pao0mggtHhcZdesHPQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFHEvnLPCmLFQvreQgDdvdL3qxDisMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2UyZTEx OS1mZDc4LTRiMWEtYjE2YS05ODdkYTQzOTIwNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvZTJlMTE5 LWZkNzgtNGIxYS1iMTZhLTk4N2RhNDM5MjA1Ni8xL2NTLWNzOEtZc1ZDLXQ1Q0FO MjkwdmVyRU9Ldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRaAAwQBwakuMA0EAgACMAcDBQAqAGBgMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDB1wIDAO43MA0GCSqGSIb3DQEBCwUAA4IB AQA/lLfRZAWM6trwEIet3ZIOPoDP2quSp19ulP/k3qr071+UZNSoDyHtROA5K4/5 1zpBMBFECRBcaesa6DDr0xSXbzKGkVywvorsmT0OIH1keAd65DZXVz0Gdtn/ug4s KPSwG1U6N17L76O034ClSH7UNZKMTQYlzF9hZGxJhF+HxCQSDfglsR3YWI70LIxF GSQPbhkugluYN+AhyaXBQ8kHaN3zM2x1YzNAXkcFfcjajqcQouEj4jMMjEWM4ncM ccmvwq7mgRuC4GYNQ70kASAACmlKZKgrgwXcPlwIxY0lOUO5sE7ym9KIJk0TfcgK 6uPhUDSiRir9dJEjccdXvCjM -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:06 2026 by rpki-client