This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer (raw, json) Hash identifier: HwCwhuXz16h9wBYPjHP2dgDfgCKhM6vc0qyysm6uFz0= Subject key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A53722FF25B08FED033DA7D568F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203231 IP: 45.90.40.0 -- 45.90.42.255 IP: 193.218.160.0/20 IP: 2a0a:5180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a5:37:22:ff:25:b0:8f:ed:03:3d:a7:d5:68:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=706d64134faa746293c0384edac0371950f3b224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:5e:75:a0:a2:0a:2b:68:98:81:c7:09:b0: d9:d3:bf:c7:b5:3b:3a:c0:b4:93:ef:ed:2d:2f:7e: d2:a9:a5:f9:28:90:72:a3:d5:62:40:7f:aa:04:75: 3b:6b:01:ba:68:3d:d7:17:3b:7a:24:8d:a6:f1:56: 89:b0:8f:c0:8f:14:fa:93:71:c4:de:bb:ad:66:81: fe:80:e1:9b:eb:72:48:47:7d:16:4d:12:60:99:86: 51:93:3f:cb:25:3e:6c:9a:33:fc:11:fe:58:31:1c: 2f:4c:d1:91:c9:bc:be:bc:ef:d7:fe:e0:c6:b5:cb: ba:8f:7f:82:7e:25:ff:ed:88:e8:09:1a:cb:ae:1d: be:9d:e7:19:c6:65:5a:46:f4:cc:57:80:a3:1b:55: eb:68:e0:45:f1:db:b3:16:44:76:ff:51:53:9b:81: d3:b5:da:13:ef:36:51:f7:93:09:a0:f0:b6:f4:a6: a7:fb:b6:3a:9d:1a:e8:ed:2e:e7:12:c8:b2:16:b9: e5:d7:43:c5:7a:6b:23:9b:cb:eb:b6:12:92:17:8f: 3d:16:d4:8f:a8:1d:20:85:6c:f9:c3:dd:7a:a8:4b: 1b:ca:96:9b:22:b3:ab:1d:b3:ee:f4:6f:d4:3a:36: b9:90:0f:ef:5d:d8:b2:3e:15:db:08:6c:e4:fd:4c: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.40.0-45.90.42.255 193.218.160.0/20 IPv6: 2a0a:5180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203231 Signature Algorithm: sha256WithRSAEncryption 26:6d:fc:f6:e5:db:5c:52:e1:a9:75:45:94:6e:ef:e4:d4:46: fe:0e:65:57:f9:78:d6:b2:32:90:79:1e:1e:5b:88:2e:80:61: b9:51:ee:e3:8c:26:f7:29:f7:eb:09:af:f6:09:9e:24:80:b8: db:ed:75:65:9d:53:10:8c:e6:14:8d:22:9b:38:3e:3c:96:8e: 3d:4d:f9:8f:de:68:d6:29:59:6b:da:79:ae:7c:81:4e:24:bd: 73:36:d6:26:d9:60:6e:e7:01:59:66:6a:41:63:4c:75:9b:78: 79:6b:e9:c5:1b:6e:39:44:6b:4f:4e:d2:ac:47:8b:67:bc:76: 75:1d:9f:eb:42:35:64:0e:e1:a0:51:f5:2d:48:1a:ae:4f:83: 17:73:c4:56:df:cd:16:43:20:1d:9a:4b:d4:0f:93:46:a9:22: 07:a1:9f:db:4b:10:d2:91:2a:a2:b7:00:3d:61:c9:7b:74:77: 45:ca:b6:e7:7b:ec:f3:e3:e4:b8:ce:80:18:6b:a7:64:a2:1b: fc:bf:43:a8:53:9e:5e:fb:aa:02:df:e1:00:bb:a0:b1:3f:d7: 7f:74:02:06:71:24:bd:02:a1:67:32:3f:10:ad:ba:a7:29:85: d4:17:dc:9c:e6:b7:83:ad:81:14:a0:a6:bb:be:07:e0:e8:4f: 2b:5d:f6:9e -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt7NqU3Iv8lsI/tAz2n1Wj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDZkNjQxMzRmYWE3NDYyOTNjMDM4NGVkYWMwMzcxOTUwZjNiMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv9edaCiCitomIHHCbDZ07/HtTs6 wLST7+0tL37SqaX5KJByo9ViQH+qBHU7awG6aD3XFzt6JI2m8VaJsI/AjxT6k3HE 3rutZoH+gOGb63JIR30WTRJgmYZRkz/LJT5smjP8Ef5YMRwvTNGRyby+vO/X/uDG tcu6j3+CfiX/7YjoCRrLrh2+necZxmVaRvTMV4CjG1XraOBF8duzFkR2/1FTm4HT tdoT7zZR95MJoPC29Kan+7Y6nRro7S7nEsiyFrnl10PFemsjm8vrthKSF489FtSP qB0ghWz5w916qEsbypabIrOrHbPu9G/UOja5kA/vXdiyPhXbCGzk/UxFDQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFHBtZBNPqnRik8A4TtrANxlQ87IkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzMyOThl My05YTUwLTRjZmItODRlNi1kMTM3YWRlMTY2ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMzI5OGUz LTlhNTAtNGNmYi04NGU2LWQxMzdhZGUxNjZkMS8xL2NHMWtFMC1xZEdLVHdEaE8y c0EzR1ZEenNpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAMtWigDBAAtWioDBATB2qAwDQQCAAIwBwMF AyoKUYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxnfMA0GCSqGSIb3DQEBCwUA A4IBAQAmbfz25dtcUuGpdUWUbu/k1Eb+DmVX+XjWsjKQeR4eW4gugGG5Ue7jjCb3 KffrCa/2CZ4kgLjb7XVlnVMQjOYUjSKbOD48lo49TfmP3mjWKVlr2nmufIFOJL1z NtYm2WBu5wFZZmpBY0x1m3h5a+nFG245RGtPTtKsR4tnvHZ1HZ/rQjVkDuGgUfUt SBquT4MXc8RW380WQyAdmkvUD5NGqSIHoZ/bSxDSkSqitwA9Ycl7dHdFyrbne+zz 4+S4zoAYa6dkohv8v0OoU55e+6oC3+EAu6CxP9d/dAIGcSS9AqFnMj8QrbqnKYXU F9yc5reDrYEUoKa7vgfg6E8rXfae -----END CERTIFICATE-----Generated at Fri Jan 9 16:32:22 2026 by rpki-client