This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer File: cxU1ourrxowWV6r89aeIyHUdm2I.cer (raw, json) Hash identifier: fC3uHit2AuMcAFz89HgPGFrkQoWwx+OgakcjjNny0h0= Subject key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C67D2F95AD28D70717A80FA2CFD299 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.218.37.0/24 IP: 2a02:ef80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7d:2f:95:ad:28:d7:07:17:a8:0f:a2:cf:d2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:8f:50:bf:c1:fa:8f:64:58:9a:86:fe:75: 0f:0f:70:85:70:52:83:3b:14:5c:b4:28:1a:a6:04: ca:c9:a6:00:8e:1a:a4:ea:b7:9a:c6:67:d9:09:12: ee:ba:cd:33:7e:2b:a0:a2:f7:15:0e:92:b1:87:65: 0e:79:00:12:d3:6d:68:1e:e8:1e:0b:1c:34:1e:02: 59:cc:f1:c6:57:5c:72:a6:1c:b9:04:33:77:80:a0: 91:ef:8e:16:10:cf:0b:fb:6a:45:f4:d9:52:f5:20: 85:42:cd:fb:a3:56:fe:ce:94:da:34:31:09:01:95: 27:db:c8:b3:54:a0:04:7e:b1:58:3f:8c:eb:20:f8: a6:6d:04:5d:fa:1f:cb:2a:ff:ee:3b:49:7d:3f:86: f3:5a:5a:d5:e3:ff:05:2c:80:66:48:55:92:1c:94: 6c:28:1a:27:cc:8a:4d:a2:b4:bd:db:27:ce:17:a3: 0e:93:d8:d1:56:9e:79:74:ab:56:1f:8c:b5:8b:30: be:ca:02:0d:88:1f:5a:a3:5d:23:68:33:36:fb:ae: 10:d6:31:5b:30:a4:f6:06:d3:a3:ca:ac:c9:6b:28: 22:ba:43:20:96:7e:bf:43:25:0b:87:41:dc:8c:2d: 6f:dd:87:0e:3f:8b:7b:a0:b7:35:3e:bd:82:26:ff: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.37.0/24 IPv6: 2a02:ef80::/32 Signature Algorithm: sha256WithRSAEncryption 59:84:ec:be:2c:e6:59:0a:4a:23:44:6c:df:0c:5b:c8:43:18: 70:1d:b1:10:94:3b:66:21:5b:6a:f1:63:b5:dd:f6:09:45:01: 07:7d:47:e1:06:8a:26:25:3f:d8:7c:c9:b3:e3:cd:2e:4c:d0: d3:cf:61:95:34:1a:3a:03:21:3c:bb:b0:b2:17:f0:72:0d:57: 0e:8b:0e:08:86:ec:46:f3:1e:cd:5b:29:73:be:51:39:25:35: 4f:28:7d:7a:28:76:fb:c5:6e:eb:23:ea:6d:4e:ad:02:e1:89: 89:bb:32:78:55:58:d4:8f:a0:fd:b4:76:4c:af:c6:a4:b6:4c: 1e:93:51:da:69:2a:a4:33:00:fe:f1:b8:b9:2b:af:b1:ba:1c: 42:67:aa:91:5a:cc:91:31:d5:76:27:8f:3a:a8:86:2b:f6:70: 48:c8:2e:51:f0:5b:dd:a3:e6:62:6b:f3:25:29:56:d5:95:dc: 2a:66:c3:ab:0b:7f:b0:6b:29:b7:03:57:f5:fa:4c:c1:85:36: 1a:2e:a4:4b:46:7f:b7:86:a7:93:a9:98:e6:1e:98:07:a4:5a: 68:08:fd:c4:72:27:de:4c:e4:0c:fb:ef:5e:bc:36:ec:de:7e: 1e:b2:83:f9:1d:6f:fc:36:84:da:aa:2f:d6:f6:86:d1:e8:92: 9f:27:9c:73 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xn0vla0o1wcXqA+iz9KZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzE1MzVhMmVhZWJjNjhjMTY1N2FhZmNmNWE3ODhjODc1MWQ5YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliePUL/B+o9kWJqG/nUPD3CFcFKD OxRctCgapgTKyaYAjhqk6reaxmfZCRLuus0zfiugovcVDpKxh2UOeQAS021oHuge Cxw0HgJZzPHGV1xyphy5BDN3gKCR744WEM8L+2pF9NlS9SCFQs37o1b+zpTaNDEJ AZUn28izVKAEfrFYP4zrIPimbQRd+h/LKv/uO0l9P4bzWlrV4/8FLIBmSFWSHJRs KBonzIpNorS92yfOF6MOk9jRVp55dKtWH4y1izC+ygINiB9ao10jaDM2+64Q1jFb MKT2BtOjyqzJaygiukMgln6/QyULh0HcjC1v3YcOP4t7oLc1Pr2CJv+irwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHMVNaLq68aMFleq/PWniMh1HZtiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzk2MjBj ZS00M2YwLTQyYmMtYWY1OS00MzViZGE1YmQwNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvOTYyMGNl LTQzZjAtNDJiYy1hZjU5LTQzNWJkYTViZDA0OC8xL2N4VTFvdXJyeG93V1Y2cjg5 YWVJeUhVZG0ySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9olMA0EAgACMAcDBQAqAu+AMA0GCSqGSIb3 DQEBCwUAA4IBAQBZhOy+LOZZCkojRGzfDFvIQxhwHbEQlDtmIVtq8WO13fYJRQEH fUfhBoomJT/YfMmz480uTNDTz2GVNBo6AyE8u7CyF/ByDVcOiw4IhuxG8x7NWylz vlE5JTVPKH16KHb7xW7rI+ptTq0C4YmJuzJ4VVjUj6D9tHZMr8aktkwek1HaaSqk MwD+8bi5K6+xuhxCZ6qRWsyRMdV2J486qIYr9nBIyC5R8Fvdo+Zia/MlKVbVldwq ZsOrC3+waym3A1f1+kzBhTYaLqRLRn+3hqeTqZjmHpgHpFpoCP3EcifeTOQM++9e vDbs3n4esoP5HW/8NoTaqi/W9obR6JKfJ5xz -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:50 2026 by rpki-client