This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer File: 0CAT81SL49yz3KGNT8k3ifRPA78.cer (raw, json) Hash identifier: DyLpNRgTdWbnveddXfORAnrxluJ91xtYcFGxFWqs7Kw= Subject key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C909DC2AF25B48242D4B60DDCF16C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47896 IP: 185.143.116.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:90:9d:c2:af:25:b4:82:42:d4:b6:0d:dc:f1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:d8:cb:eb:9f:31:49:5c:a6:d0:90:8a:d7: c2:15:ab:7b:f6:3c:b9:5c:1f:ce:12:0f:b7:3d:f9: cd:1f:26:0a:e2:fa:fe:2b:41:43:22:94:72:e4:39: 73:f3:80:b0:02:93:1b:35:4b:9b:29:ec:ca:5a:dc: 97:b0:02:99:49:ad:90:c0:eb:0d:a9:cf:a8:9f:a9: b4:9b:17:2c:5a:03:d8:ee:65:04:12:17:49:d2:a3: e1:32:ac:fe:35:f0:c1:8f:a0:0e:ef:dc:db:ec:08: a5:d7:50:29:5f:f7:0b:43:af:86:61:98:04:2f:f4: 7c:32:66:79:38:7e:7a:a0:1f:6a:89:fa:69:2a:39: 80:86:45:de:bf:78:d1:58:be:b9:ba:eb:29:9a:13: 78:fb:3e:c2:48:f7:fb:98:47:1e:ae:11:62:54:b0: 6a:c4:0a:a4:9a:77:7d:66:cf:ec:3d:94:e8:55:89: 8a:4c:7b:fd:26:58:1c:c7:7e:c8:01:b3:d1:6b:ce: b1:13:58:e2:bc:00:9e:59:98:46:a8:06:96:37:cb: 85:02:99:f7:3d:f3:4c:19:01:a8:e5:bc:01:27:61: b0:cd:26:30:d0:ba:2b:17:1c:2b:d3:ff:bb:d3:23: 0d:1f:7a:e8:08:48:97:d6:24:94:fd:a0:59:1f:0e: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47896 Signature Algorithm: sha256WithRSAEncryption 77:2a:56:1f:19:e5:f0:5d:70:e2:94:69:38:27:ea:bb:5d:ab: c7:96:c5:05:b1:3f:cf:66:b1:7a:db:6c:0b:ff:3b:24:71:a6: f4:07:69:86:1d:af:c0:ff:28:99:9c:3b:7f:c6:ca:92:20:a4: 0d:54:20:54:71:a5:fb:16:5c:6b:ab:93:2b:9a:82:8a:8c:f8: 6c:78:9e:1f:27:47:70:7e:96:cc:e1:41:dd:39:10:23:ce:52: 99:67:90:05:50:00:8a:72:7a:17:52:7a:e5:ac:68:47:2a:1c: 3c:74:83:eb:a5:2c:84:ee:b1:e9:1f:2e:b0:d7:31:c8:f6:d7: ab:5c:55:e1:dd:5b:e3:4d:51:8f:f8:b6:4e:fb:fd:2e:19:91: 1e:f2:bd:8a:5b:d9:8d:d0:f9:0c:e3:46:e3:49:49:cd:bc:3a: 13:bd:a3:03:c5:c4:59:0e:d5:82:be:5a:32:8c:13:6f:bf:d4: 60:c7:b6:44:2e:c0:5f:a9:b1:7b:de:35:5e:93:d4:98:6a:a2: d2:eb:fb:5f:36:92:b5:53:ec:e6:0a:6b:14:26:9f:6b:3f:15: d2:14:c2:81:f6:c0:f7:bb:6c:ee:c4:cc:51:d9:a9:9c:74:49: 80:2a:5a:e8:e2:f5:ac:f4:1c:39:5a:e0:29:0e:ad:11:93:d1: 12:53:cc:1c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XJCdwq8ltIJC1LYN3PFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDIwMTNmMzU0OGJlM2RjYjNkY2ExOGQ0ZmM5Mzc4OWY0NGYwM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40XYy+ufMUlcptCQitfCFat79jy5 XB/OEg+3PfnNHyYK4vr+K0FDIpRy5Dlz84CwApMbNUubKezKWtyXsAKZSa2QwOsN qc+on6m0mxcsWgPY7mUEEhdJ0qPhMqz+NfDBj6AO79zb7Ail11ApX/cLQ6+GYZgE L/R8MmZ5OH56oB9qifppKjmAhkXev3jRWL65uuspmhN4+z7CSPf7mEcerhFiVLBq xAqkmnd9Zs/sPZToVYmKTHv9Jlgcx37IAbPRa86xE1jivACeWZhGqAaWN8uFApn3 PfNMGQGo5bwBJ2GwzSYw0LorFxwr0/+70yMNH3roCEiX1iSU/aBZHw56XwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNAgE/NUi+Pcs9yhjU/JN4n0TwO/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2JkNDMx YS05NzA2LTRmMzgtODAwYi0yYTY4NWY3OGIyOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYmQ0MzFh LTk3MDYtNGYzOC04MDBiLTJhNjg1Zjc4YjI5ZC8xLzBDQVQ4MVNMNDl5ejNLR05U OGszaWZSUEE3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuY90MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC7GDANBgkqhkiG9w0BAQsFAAOCAQEAdypWHxnl8F1w4pRpOCfqu12rx5bFBbE/ z2axettsC/87JHGm9Adphh2vwP8omZw7f8bKkiCkDVQgVHGl+xZca6uTK5qCioz4 bHieHydHcH6WzOFB3TkQI85SmWeQBVAAinJ6F1J65axoRyocPHSD66UshO6x6R8u sNcxyPbXq1xV4d1b401Rj/i2Tvv9LhmRHvK9ilvZjdD5DONG40lJzbw6E72jA8XE WQ7Vgr5aMowTb7/UYMe2RC7AX6mxe941XpPUmGqi0uv7XzaStVPs5gprFCafaz8V 0hTCgfbA97ts7sTMUdmpnHRJgCpa6OL1rPQcOVrgKQ6tEZPRElPMHA== -----END CERTIFICATE-----Generated at Sun Jan 11 23:34:01 2026 by rpki-client