This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer File: cgSGQdj3M3_OojrlMyv24RoR4io.cer (raw, json) Hash identifier: yrrLmXkqS6lZrR0syouJNZyx4kr1rG8f/lJ9s3dBlPA= Subject key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD91C465BF0E0B75870CE2E267E58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.104.129.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d9:1c:46:5b:f0:e0:b7:58:70:ce:2e:26:7e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:37:3e:e8:d1:5b:8f:41:a2:ce:cb:50:27: 5a:b5:95:ee:07:0f:4d:16:72:cc:ec:c8:ff:05:90: 43:31:a2:64:a4:1c:a9:a2:97:5a:e6:49:ea:09:d7: 18:0d:fe:0a:ae:5a:2c:93:51:20:2d:4c:87:80:8f: c4:b5:a2:c1:8c:1a:2c:e3:b7:3e:ac:b4:5c:c5:bb: ab:98:95:c1:9b:e1:8e:c5:95:49:4b:c1:41:65:86: d5:f7:4c:00:05:90:e5:7b:3d:56:43:08:44:8d:10: 06:03:b5:0a:cf:c6:a7:f4:0e:6a:97:ec:2e:2b:47: c9:04:fc:31:18:e0:40:a5:03:10:59:a5:79:cc:e0: 60:06:38:04:2f:c2:59:49:e3:18:5d:35:62:48:df: 50:de:c8:2b:8c:37:c8:b0:b5:5d:20:95:64:2e:c0: b5:9b:3e:fd:84:fc:c6:96:28:a1:1b:67:42:a5:e8: 16:be:2e:72:1d:23:1c:eb:f2:ca:4e:75:82:d4:7d: b9:42:50:4b:bf:00:96:92:52:95:2b:21:79:72:18: f1:bf:8d:06:90:95:ba:ec:f2:f7:22:da:a8:c3:ed: d0:d9:1c:9f:6e:28:61:aa:4d:e3:9f:54:7c:29:b5: 4b:d9:0b:39:e0:c9:1e:b7:06:f4:86:c7:fa:dd:31: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 86:8a:f6:e1:8a:66:da:3d:db:53:9a:cf:4a:7e:c3:ec:75:c4: 3f:86:cf:df:49:2c:4d:08:cb:ec:da:d6:38:a5:e6:28:8b:b9: 9f:ae:0e:c0:77:a8:80:fd:35:4b:12:65:df:22:d2:b7:af:99: be:18:4e:8a:d2:b6:df:03:eb:02:37:db:c9:24:72:7d:eb:d0: a3:cc:98:6d:94:a1:91:18:30:f8:0d:86:cc:5f:78:f6:51:e0: b8:26:e0:6e:97:31:a9:b0:a4:6d:a9:78:a1:ab:80:49:c4:ac: 3c:9e:36:d3:cb:81:25:b6:ef:9b:8c:bd:37:b8:40:a6:19:01: 1e:26:e0:b4:07:ee:c0:7a:57:ed:4c:77:7f:3b:8a:f8:4f:a3: 66:8d:3f:d9:90:19:96:a1:bb:22:78:d2:bf:32:84:1a:0f:46: ff:c5:3d:d3:ec:0a:66:3d:41:48:3e:3a:8e:af:fb:49:e1:2c: 02:1f:dd:b4:50:29:f4:3d:a3:2c:79:6a:28:98:1e:33:3b:9b: 3a:4e:90:9a:3b:90:ff:96:48:3c:20:6d:89:d7:17:9a:6b:15: 7a:3c:72:58:f0:aa:ab:c7:7c:39:e8:23:c3:82:97:4a:97:48: 5d:b3:fb:b9:3f:13:b6:7d:50:a3:42:f5:11:cd:df:97:a1:a5: db:2d:10:86 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fdkcRlvw4LdYcM4uJn5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjA0ODY0MWQ4ZjczMzdmY2VhMjNhZTUzMzJiZjZlMTFhMTFlMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOg3PujRW49Bos7LUCdatZXuBw9N FnLM7Mj/BZBDMaJkpBypopda5knqCdcYDf4Krlosk1EgLUyHgI/EtaLBjBos47c+ rLRcxburmJXBm+GOxZVJS8FBZYbV90wABZDlez1WQwhEjRAGA7UKz8an9A5ql+wu K0fJBPwxGOBApQMQWaV5zOBgBjgEL8JZSeMYXTViSN9Q3sgrjDfIsLVdIJVkLsC1 mz79hPzGliihG2dCpegWvi5yHSMc6/LKTnWC1H25QlBLvwCWklKVKyF5chjxv40G kJW67PL3Itqow+3Q2Ryfbihhqk3jn1R8KbVL2Qs54Mketwb0hsf63TEkeQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHIEhkHY9zN/zqI65TMr9uEaEeIqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2RmMzcw Ni1mMzQ3LTQwMjUtYTdiMy0xYzhjZDU2YzYxNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZGYzNzA2 LWYzNDctNDAyNS1hN2IzLTFjOGNkNTZjNjE3NC8xL2NnU0dRZGozTTNfT29qcmxN eXYyNFJvUjRpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWiBMA0GCSqGSIb3DQEBCwUAA4IBAQCGivbh imbaPdtTms9KfsPsdcQ/hs/fSSxNCMvs2tY4peYoi7mfrg7Ad6iA/TVLEmXfItK3 r5m+GE6K0rbfA+sCN9vJJHJ969CjzJhtlKGRGDD4DYbMX3j2UeC4JuBulzGpsKRt qXihq4BJxKw8njbTy4Eltu+bjL03uECmGQEeJuC0B+7AelftTHd/O4r4T6NmjT/Z kBmWobsieNK/MoQaD0b/xT3T7ApmPUFIPjqOr/tJ4SwCH920UCn0PaMseWoomB4z O5s6TpCaO5D/lkg8IG2J1xeaaxV6PHJY8Kqrx3w56CPDgpdKl0hds/u5PxO2fVCj QvURzd+XoaXbLRCG -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:27 2026 by rpki-client