This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer (raw, json) Hash identifier: T5VoPWT+u6mF5Gv6Lt9No7TLeIIzFaTeNtIvwJHJdCE= Subject key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1597FDE906D6613842B483CBF716 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.235.237.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:15:97:fd:e9:06:d6:61:38:42:b4:83:cb:f7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:95:7e:33:4a:e4:b0:07:be:dc:58:3e:a4: 4e:78:e8:91:cf:4d:2f:bd:0e:4c:d4:ae:7c:59:1d: 9e:26:4a:de:eb:d3:71:ce:f2:03:44:da:2b:6a:f5: 1e:94:a3:1a:0a:f3:92:31:8f:5c:f7:84:f0:bd:2a: 74:f7:e5:af:bb:11:38:14:8b:c3:02:f8:5e:b6:de: 20:5e:78:06:25:fd:5b:90:bb:15:35:96:77:b5:28: f6:5b:ca:c6:e0:93:1a:c0:a6:eb:8e:28:6d:a6:be: 81:08:df:b2:03:0c:74:31:03:bb:47:0a:d3:9d:6b: 52:e7:8c:61:2c:5a:e5:df:0f:14:c4:37:fa:0f:ec: 4f:e0:73:25:a5:a7:10:15:9d:f9:32:db:3a:72:1f: 64:11:c2:a5:39:5c:48:31:ee:49:77:b5:e9:d5:f9: 89:5d:f6:a5:fe:1b:05:65:f1:19:17:23:d5:11:5b: ed:2d:71:4a:a8:e2:a6:b3:6d:ca:f8:9d:93:34:00: b7:8a:ba:94:6c:fb:a1:9a:24:20:e2:82:f7:43:f2: be:1e:f3:01:90:86:4f:8f:ae:76:e5:62:1c:92:f7: ea:dc:db:a7:55:f4:20:1a:1e:db:26:90:8e:4c:c6: d0:cc:c9:94:35:7c:2a:53:ac:fe:e0:5d:a2:f4:33: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.237.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:bf:01:42:13:87:f5:cc:fd:c7:d9:7a:74:e1:65:f6:13:4c: 58:ec:da:5b:cc:e0:b5:dd:7b:1f:ff:a6:e6:95:92:b5:b7:1a: 38:7c:21:fb:d6:ed:78:61:d9:78:1d:43:56:34:09:f7:e5:28: c4:b6:8b:eb:7f:5a:eb:ba:a0:62:32:a5:c3:ed:14:48:db:7b: 7a:5e:5d:e5:12:bf:c4:a2:99:36:af:f7:f1:00:09:a5:9a:f0: 7b:5b:59:b9:cf:10:ce:82:15:d7:f3:b4:0e:de:b9:71:66:e7: ee:3f:3e:3f:f4:df:c3:f5:35:08:de:21:d9:ee:8d:1d:cd:c4: d4:e7:7c:0d:f0:8c:02:99:15:4f:e6:7e:4d:b6:b0:57:f2:ac: 11:a1:12:df:87:d1:fc:bc:dc:e1:42:ad:1c:13:84:27:5e:80: b2:43:39:9e:3e:c8:64:05:a4:af:4d:7a:cb:a6:9a:c4:6b:8b: 24:13:d4:1d:2d:c1:f8:be:43:c3:49:8f:e9:58:46:a8:a4:11: 39:27:90:96:c6:21:ff:c8:5c:a3:fd:3e:ca:cc:b5:b8:31:84: 7e:25:2c:cf:a8:81:25:d0:c9:80:9c:38:86:ac:65:fe:a8:c6: e3:3b:9b:7f:ce:1c:70:da:e5:e1:3e:44:8a:7d:1f:df:bc:b4: 34:50:77:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87hWX/ekG1mE4QrSDy/cWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmUxMmEzODc2ZmY3YmQwMGQ5ZDllYmI5NzJhYjFlNjIxZWExZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyeVfjNK5LAHvtxYPqROeOiRz00v vQ5M1K58WR2eJkre69NxzvIDRNoravUelKMaCvOSMY9c94TwvSp09+WvuxE4FIvD Avhett4gXngGJf1bkLsVNZZ3tSj2W8rG4JMawKbrjihtpr6BCN+yAwx0MQO7RwrT nWtS54xhLFrl3w8UxDf6D+xP4HMlpacQFZ35Mts6ch9kEcKlOVxIMe5Jd7Xp1fmJ Xfal/hsFZfEZFyPVEVvtLXFKqOKms23K+J2TNAC3irqUbPuhmiQg4oL3Q/K+HvMB kIZPj6525WIckvfq3NunVfQgGh7bJpCOTMbQzMmUNXwqU6z+4F2i9DOUWQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHLhKjh2/3vQDZ2eu5cqseYh6h6NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzFmYWEy NC1mMDg2LTRiNDgtYjFiZC00NTUyN2U4ZTQ0ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMWZhYTI0 LWYwODYtNGI0OC1iMWJkLTQ1NTI3ZThlNDRkMi8xL2N1RXFPSGJfZTlBTm5aNjds eXF4NWlIcUhvMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+vtMA0GCSqGSIb3DQEBCwUAA4IBAQCNvwFC E4f1zP3H2Xp04WX2E0xY7NpbzOC13Xsf/6bmlZK1txo4fCH71u14Ydl4HUNWNAn3 5SjEtovrf1rruqBiMqXD7RRI23t6Xl3lEr/Eopk2r/fxAAmlmvB7W1m5zxDOghXX 87QO3rlxZufuPz4/9N/D9TUI3iHZ7o0dzcTU53wN8IwCmRVP5n5NtrBX8qwRoRLf h9H8vNzhQq0cE4QnXoCyQzmePshkBaSvTXrLpprEa4skE9QdLcH4vkPDSY/pWEao pBE5J5CWxiH/yFyj/T7KzLW4MYR+JSzPqIEl0MmAnDiGrGX+qMbjO5t/zhxw2uXh PkSKfR/fvLQ0UHef -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:17 2026 by rpki-client