This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer File: 1-KK2BcWOB0aq3Fvw18vDbJMH900.cer (raw, json) Hash identifier: pUrKJrk8mTG2OXmOe+TirMJD6XeOwU3GvP36bzVfUz8= Subject key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3632055426CB7710F34E5B0F51B68D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13215 IP: 185.97.164.0/22 IP: 2a0b:a8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:32:05:54:26:cb:77:10:f3:4e:5b:0f:51:b6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:6c:d4:aa:08:55:fb:a3:37:b6:1f:d1:0d: 3c:f8:4f:48:cf:54:54:37:96:27:cd:fa:09:5e:a6: a8:56:3b:85:11:12:f2:3c:e8:f3:3f:f3:3b:17:04: 84:0c:6e:1c:c6:c0:34:25:9b:ae:4a:b1:e9:a0:b5: 12:2b:62:b8:fb:e7:65:ea:28:72:ca:56:e9:73:6b: 89:65:6d:69:30:10:2f:8b:2a:b6:bc:11:fd:c8:21: 73:3f:03:8b:aa:3f:61:7e:19:60:cb:df:c3:b3:bd: 22:97:73:18:3e:38:38:35:db:90:3e:58:49:2a:99: 60:71:24:cf:a7:33:61:68:e5:a7:44:58:4c:6b:0d: 50:5d:a7:55:66:91:82:b0:eb:fa:b2:d3:13:50:f1: dd:fe:36:ce:4f:0e:78:dd:10:6e:88:02:3a:35:50: 1d:8c:5c:f9:18:9e:3a:5f:c5:2d:08:29:fd:1d:4f: cd:6e:1c:e2:96:9d:9b:e4:e0:8a:72:77:64:f6:6d: 33:20:73:99:16:d8:ee:d8:60:7b:a2:c1:4d:d7:5b: 45:16:b9:1f:6d:f4:c9:04:54:62:9b:e7:5c:1a:b7: 34:17:4a:56:b4:6f:48:4a:b5:3c:db:ca:73:d2:ef: 84:0d:d5:08:b1:84:99:db:38:9e:1f:ed:da:10:39: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.164.0/22 IPv6: 2a0b:a8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13215 Signature Algorithm: sha256WithRSAEncryption 31:c3:44:08:45:f8:7d:ff:ae:6f:fd:8c:74:2e:79:59:76:a8: 65:db:4c:8a:d4:61:f2:40:b6:05:b4:34:30:e4:58:88:f6:8a: 97:e3:81:f3:e7:2b:79:e2:7b:72:46:79:52:e8:89:9e:d4:3c: 9b:44:12:83:9c:6f:24:2f:03:b0:3e:46:09:91:72:0f:64:26: b9:5e:92:3b:34:74:95:53:ed:d5:b4:b7:04:94:ff:f3:90:68: df:0e:d1:de:c2:1e:0a:18:db:ec:45:54:c6:c8:5a:7f:20:9d: 55:30:52:0b:b2:a1:99:1f:8e:d7:ef:6c:b9:10:52:3e:6a:7d: 05:b0:24:98:44:81:d2:f7:54:2a:c4:86:2d:4d:b6:8c:ad:13: 1e:da:60:29:d4:6c:92:a7:55:a8:2b:ae:79:2a:0c:e4:75:5e: 05:bc:8f:f6:bf:98:25:6b:2f:2e:e6:49:42:ae:ec:0d:1d:50: fe:ac:7e:34:53:7d:bf:7f:7d:2c:40:b8:3d:49:da:4e:d2:4d: 20:a9:69:86:3c:1d:f3:98:ff:4e:2a:3f:fa:99:57:9a:01:73: 34:2d:e9:a6:7d:49:0d:29:b3:f0:77:a1:e2:07:3a:af:c0:5b: c0:12:50:3b:7d:58:1c:f8:a7:39:68:bc:78:54:13:16:59:2c: f2:11:40:b4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NjIFVCbLdxDzTlsPUbaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGEyYjYwNWM1OGUwNzQ2YWFkYzViZjBkN2NiYzM2YzkzMDdmNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomBs1KoIVfujN7Yf0Q08+E9Iz1RU N5YnzfoJXqaoVjuFERLyPOjzP/M7FwSEDG4cxsA0JZuuSrHpoLUSK2K4++dl6ihy ylbpc2uJZW1pMBAviyq2vBH9yCFzPwOLqj9hfhlgy9/Ds70il3MYPjg4NduQPlhJ KplgcSTPpzNhaOWnRFhMaw1QXadVZpGCsOv6stMTUPHd/jbOTw543RBuiAI6NVAd jFz5GJ46X8UtCCn9HU/Nbhzilp2b5OCKcndk9m0zIHOZFtju2GB7osFN11tFFrkf bfTJBFRim+dcGrc0F0pWtG9ISrU828pz0u+EDdUIsYSZ2zieH+3aEDm+SwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPiitgXFjgdGqtxb8NfLw2yTB/dNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzA3NmQz Ny00YWI0LTRlYzMtYTRiMC01MjQwMjVlMTMyMDIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMDc2ZDM3 LTRhYjQtNGVjMy1hNGIwLTUyNDAyNWUxMzIwMi8xLzEtS0syQmNXT0IwYXEzRnZ3 MTh2RGJKTUg5MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArlhpDANBAIAAjAHAwUDKguowDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIznzANBgkqhkiG9w0BAQsFAAOCAQEAMcNECEX4ff+u b/2MdC55WXaoZdtMitRh8kC2BbQ0MORYiPaKl+OB8+creeJ7ckZ5UuiJntQ8m0QS g5xvJC8DsD5GCZFyD2QmuV6SOzR0lVPt1bS3BJT/85Bo3w7R3sIeChjb7EVUxsha fyCdVTBSC7KhmR+O1+9suRBSPmp9BbAkmESB0vdUKsSGLU22jK0THtpgKdRskqdV qCuueSoM5HVeBbyP9r+YJWsvLuZJQq7sDR1Q/qx+NFN9v399LEC4PUnaTtJNIKlp hjwd85j/Tio/+plXmgFzNC3ppn1JDSmz8Heh4gc6r8BbwBJQO31YHPinOWi8eFQT Flks8hFAtA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:50 2026 by rpki-client