This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer File: cb3erw8w-9r551uSrH1b0T8oXec.cer (raw, json) Hash identifier: 2OiM9l4wWde3Pet07bFeRga35GQXwn6S/2Ms2syUohY= Subject key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A317157E02A01C46D0AD545809A775 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200313 IP: 45.8.176.0/22 IP: 45.12.32.0/22 IP: 45.83.120.0/22 IP: 45.88.0.0/22 IP: 45.133.200.0/22 IP: 45.142.0.0/22 IP: 45.148.144.0/22 IP: 45.159.92.0/22 IP: 185.212.128.0/22 IP: 185.217.136.0/22 IP: 185.224.216.0/22 IP: 185.232.52.0/22 IP: 185.238.0.0/22 IP: 193.160.254.0/24 IP: 193.161.1.0/24 IP: 193.161.26.0/24 IP: 193.161.147.0/24 IP: 194.40.240.0/22 IP: 195.14.99.0/24 IP: 195.39.238.0/24 IP: 195.42.248.0/24 IP: 195.43.128.0/24 IP: 195.43.147.0/24 IP: 195.242.110.0/23 IP: 195.242.118.0/23 IP: 2a0d:1640::/29 IP: 2a0d:63c0::/29 IP: 2a10:ebc0::/29 IP: 2a11:2880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:17:15:7e:02:a0:1c:46:d0:ad:54:58:09:a7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:5e:92:1f:34:c3:e8:f6:2e:f0:6c:52:c4: 33:0d:41:7f:f6:ee:b6:20:19:77:3b:0f:96:ce:d2: eb:9d:d7:2b:26:46:bb:86:d4:f0:90:aa:58:c3:70: b3:06:ad:66:90:43:ff:e5:8b:b1:b5:79:58:6c:99: f8:d2:0a:bd:da:17:36:a5:15:03:d1:99:a7:ec:86: 13:2e:a2:3f:d0:9d:88:7a:11:d5:7b:25:3e:e4:7a: 06:cf:df:75:ae:1b:49:59:db:ca:a5:a2:77:3f:6f: e9:c4:10:da:ee:58:c9:ff:4d:19:58:a4:25:46:72: 8d:46:77:a8:70:cf:08:d6:1f:28:00:24:97:72:4c: 0c:28:10:67:80:bf:9d:7e:75:81:22:93:73:b6:be: f3:9a:cc:34:1d:ac:6c:d3:95:03:10:7a:8a:91:90: 50:6b:ff:52:d7:b7:93:4f:39:7c:e4:9c:ad:5e:8c: ed:08:38:64:bc:62:89:d9:6e:c9:fa:cc:03:a8:6f: 56:5f:ea:36:ba:62:92:e0:57:d5:23:2e:0d:98:be: ae:5b:5e:c7:d9:fa:fe:37:66:ec:53:28:59:e5:d6: 31:df:f8:9e:56:06:20:e4:6d:17:d7:c2:90:bb:6f: 41:5c:44:72:25:d1:56:a5:88:4f:65:ab:77:76:ff: c2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.176.0/22 45.12.32.0/22 45.83.120.0/22 45.88.0.0/22 45.133.200.0/22 45.142.0.0/22 45.148.144.0/22 45.159.92.0/22 185.212.128.0/22 185.217.136.0/22 185.224.216.0/22 185.232.52.0/22 185.238.0.0/22 193.160.254.0/24 193.161.1.0/24 193.161.26.0/24 193.161.147.0/24 194.40.240.0/22 195.14.99.0/24 195.39.238.0/24 195.42.248.0/24 195.43.128.0/24 195.43.147.0/24 195.242.110.0/23 195.242.118.0/23 IPv6: 2a0d:1640::/29 2a0d:63c0::/29 2a10:ebc0::/29 2a11:2880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200313 Signature Algorithm: sha256WithRSAEncryption ab:d9:33:b8:86:06:15:8f:9d:bc:c1:0a:62:3d:99:6d:e0:32: 97:69:40:ad:47:2d:01:40:ef:74:98:fd:6b:ca:47:2c:84:86: 77:33:cc:4c:92:03:8a:84:f6:eb:0d:fa:8e:da:1d:68:5c:c0: 3a:b2:1f:15:d2:91:ff:42:c9:65:9a:90:d9:41:9e:54:d4:5a: 07:81:18:4e:31:67:a9:92:57:17:66:68:5e:21:5a:41:da:29: 47:d6:0f:c7:9a:03:86:8e:dd:af:22:ce:48:24:75:d3:0b:81: c5:7c:02:da:5f:ca:74:c5:12:8a:bb:e8:3a:4c:53:34:50:49: 67:f8:6d:88:0f:cd:f8:e8:4a:4d:c8:cd:bd:89:ca:10:9b:24: 73:a9:a9:c5:2f:45:df:5f:36:63:63:13:27:01:d2:13:c6:dd: c5:ba:b1:7f:21:63:45:75:31:0c:98:1b:8f:8d:54:02:0c:c8: 10:da:82:8d:e6:19:9c:26:bb:1b:da:3c:9a:08:0f:68:82:04: e3:08:43:d2:98:1a:8d:2d:5f:52:49:cf:16:51:c6:ef:2c:22: b4:32:18:5a:8c:9f:b5:3f:e1:fc:f4:bd:97:9c:1e:35:85:ae: fe:56:26:25:7e:cb:09:13:79:18:bc:29:61:ea:22:91:b1:70: 87:c0:1d:f7 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgISAZt4oxcVfgKgHEbQrVRYCad1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWJkZGVhZjBmMzBmYmRhZjllNzViOTJhYzdkNWJkMTNmMjg1ZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskNekh80w+j2LvBsUsQzDUF/9u62 IBl3Ow+WztLrndcrJka7htTwkKpYw3CzBq1mkEP/5YuxtXlYbJn40gq92hc2pRUD 0Zmn7IYTLqI/0J2IehHVeyU+5HoGz991rhtJWdvKpaJ3P2/pxBDa7ljJ/00ZWKQl RnKNRneocM8I1h8oACSXckwMKBBngL+dfnWBIpNztr7zmsw0Haxs05UDEHqKkZBQ a/9S17eTTzl85JytXoztCDhkvGKJ2W7J+swDqG9WX+o2umKS4FfVIy4NmL6uW17H 2fr+N2bsUyhZ5dYx3/ieVgYg5G0X18KQu29BXERyJdFWpYhPZat3dv/CwQIDAQAB o4IDWTCCA1UwHQYDVR0OBBYEFHG93q8PMPva+edbkqx9W9E/KF3nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzgxNGVj NS05ZTQxLTRiNWEtYTZmZS00NzcyMzExOTFhMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvODE0ZWM1 LTllNDEtNGI1YS1hNmZlLTQ3NzIzMTE5MWEzNS8xL2NiM2Vydzh3LTlyNTUxdVNy SDFiMFQ4b1hlYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHXBggrBgEF BQcBBwEB/wSBxzCBxDCBnQQCAAEwgZYDBAItCLADBAItDCADBAItU3gDBAItWAAD BAIthcgDBAItjgADBAItlJADBAItn1wDBAK51IADBAK52YgDBAK54NgDBAK56DQD BAK57gADBADBoP4DBADBoQEDBADBoRoDBADBoZMDBALCKPADBADDDmMDBADDJ+4D BADDKvgDBADDK4ADBADDK5MDBAHD8m4DBAHD8nYwIgQCAAIwHAMFAyoNFkADBQMq DWPAAwUDKhDrwAMFAyoRKIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAw55MA0G CSqGSIb3DQEBCwUAA4IBAQCr2TO4hgYVj528wQpiPZlt4DKXaUCtRy0BQO90mP1r ykcshIZ3M8xMkgOKhPbrDfqO2h1oXMA6sh8V0pH/QsllmpDZQZ5U1FoHgRhOMWep klcXZmheIVpB2ilH1g/HmgOGjt2vIs5IJHXTC4HFfALaX8p0xRKKu+g6TFM0UEln +G2ID8346EpNyM29icoQmyRzqanFL0XfXzZjYxMnAdITxt3FurF/IWNFdTEMmBuP jVQCDMgQ2oKN5hmcJrsb2jyaCA9oggTjCEPSmBqNLV9SSc8WUcbvLCK0MhhajJ+1 P+H89L2XnB41ha7+ViYlfssJE3kYvClh6iKRsXCHwB33 -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:29 2026 by rpki-client