This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer File: cnFQa_q5Ese4FxuWuFoJmxQObNg.cer (raw, json) Hash identifier: /t419sZPoRFlrAoQAwi24pD03VpjMG/ryNRpr9FyhA0= Subject key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B6040CBAB35826316D0DE30CDEC2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 81.30.108.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:60:40:cb:ab:35:82:63:16:d0:de:30:cd:ec:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:fc:3c:ef:1f:a3:a2:87:0a:a4:55:eb:cb: cb:86:78:50:ac:44:53:bc:d0:32:2c:f8:79:db:2b: a5:d5:eb:49:67:2c:47:cf:80:b5:47:73:ef:23:da: 32:72:69:eb:b2:40:aa:9c:3d:3c:f5:0c:81:60:56: c0:f2:92:12:fe:53:9e:5f:29:5f:c3:ab:b8:bc:a8: f5:2e:6b:af:46:9c:e0:f8:18:4d:99:17:55:c4:17: ba:e9:19:5c:8c:de:c0:ca:ae:be:e7:f0:7a:8c:01: 86:44:9b:e1:17:8c:52:09:e7:3c:f5:a1:a7:69:9a: 39:3e:5b:d2:a2:00:c1:6b:2b:06:9a:a6:f8:e5:88: 7e:5e:be:9c:73:97:03:8e:60:3a:95:48:e1:ba:d4: d5:73:77:56:6c:b0:e9:6c:15:16:64:a5:47:8d:06: 2e:fe:64:37:3c:1e:c3:2f:76:65:f6:59:06:cf:e3: 30:1b:35:9b:48:bf:d1:d0:c4:78:88:d0:0c:5d:a8: 8a:08:32:fa:15:8e:eb:a9:5d:36:ed:6c:73:92:d4: 90:ef:b8:3a:73:49:1f:a2:ab:2d:17:09:c0:f1:c2: f9:68:21:f4:91:83:2e:aa:e2:0d:c7:d6:78:52:e4: 37:32:c4:03:96:e5:2a:59:b3:de:22:a4:51:b1:2a: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.108.0/24 Signature Algorithm: sha256WithRSAEncryption 80:f7:dc:66:a2:84:71:fc:32:f9:a1:a2:4a:03:2d:cb:1e:b5: 62:40:d0:67:cc:0f:15:a3:0c:9b:0c:7c:7f:ec:b8:da:e1:6d: 5d:f5:d8:31:f3:86:f5:62:ec:87:c4:94:cf:d9:68:3d:76:6e: 49:9d:a0:b7:99:8d:4c:7e:0d:45:b7:4d:ad:83:60:66:4c:9e: bd:b0:5d:a7:73:7f:08:d3:0a:0b:58:fd:1e:8b:41:dc:c2:1c: e8:0f:13:7f:13:d1:d9:e7:d5:f2:2d:fe:7c:be:36:4f:c9:cd: ca:1e:a9:8d:c0:1f:41:ba:0d:49:97:79:ef:ec:91:e7:d7:cd: 31:f1:44:05:0f:de:fc:43:df:0c:e9:80:38:55:04:91:c4:62: 57:20:23:c0:fa:12:38:e3:89:b1:2c:10:71:3f:44:b6:3f:0d: 76:37:fc:d3:f7:0c:32:f7:ac:95:a9:b7:ca:ed:96:7b:7c:93: 24:4f:a1:72:37:f8:0b:f0:45:a6:e4:30:6c:09:71:2e:8d:3d: 6c:4e:2f:84:94:cd:4d:e3:e0:0e:97:d6:dc:e1:0e:f1:b7:39: a1:88:f3:f3:2a:d7:8c:bf:e8:ad:f0:88:eb:e7:08:35:f5:42: cf:d6:c8:b3:b7:9c:e1:1a:88:1f:11:ed:fb:23:31:a1:f1:7e: bf:26:28:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6W2BAy6s1gmMW0N4wzewrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjcxNTA2YmZhYjkxMmM3YjgxNzFiOTZiODVhMDk5YjE0MGU2Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwb8PO8fo6KHCqRV68vLhnhQrERT vNAyLPh52yul1etJZyxHz4C1R3PvI9oycmnrskCqnD089QyBYFbA8pIS/lOeXylf w6u4vKj1LmuvRpzg+BhNmRdVxBe66RlcjN7Ayq6+5/B6jAGGRJvhF4xSCec89aGn aZo5PlvSogDBaysGmqb45Yh+Xr6cc5cDjmA6lUjhutTVc3dWbLDpbBUWZKVHjQYu /mQ3PB7DL3Zl9lkGz+MwGzWbSL/R0MR4iNAMXaiKCDL6FY7rqV027WxzktSQ77g6 c0kfoqstFwnA8cL5aCH0kYMuquINx9Z4UuQ3MsQDluUqWbPeIqRRsSptDQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHJxUGv6uRLHuBcblrhaCZsUDmzYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2NkNTgy NC0yZGRlLTQwM2UtYjJjNC1kMjI1MDMyZDE4NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvY2Q1ODI0 LTJkZGUtNDAzZS1iMmM0LWQyMjUwMzJkMTg1OC8xL2NuRlFhX3E1RXNlNEZ4dVd1 Rm9KbXhRT2JOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAUR5sMA0GCSqGSIb3DQEBCwUAA4IBAQCA99xm ooRx/DL5oaJKAy3LHrViQNBnzA8VowybDHx/7Lja4W1d9dgx84b1YuyHxJTP2Wg9 dm5JnaC3mY1Mfg1Ft02tg2BmTJ69sF2nc38I0woLWP0ei0HcwhzoDxN/E9HZ59Xy Lf58vjZPyc3KHqmNwB9Bug1Jl3nv7JHn180x8UQFD978Q98M6YA4VQSRxGJXICPA +hI444mxLBBxP0S2Pw12N/zT9wwy96yVqbfK7ZZ7fJMkT6FyN/gL8EWm5DBsCXEu jT1sTi+ElM1N4+AOl9bc4Q7xtzmhiPPzKteMv+it8Ijr5wg19ULP1sizt5zhGogf Ee37IzGh8X6/Jigo -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:52 2026 by rpki-client