This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer File: CTKC_j89fUa9Gxy3ey_sN97gBmM.cer (raw, json) Hash identifier: /+9WlOkB0306HFmwjgkITkDXzVKeeO3a8sNG/7NxaGE= Subject key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE254527F439AAD81CE67EC9E5B385 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25173 IP: 193.201.45.0/24 IP: 2001:67c:2004::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:25:45:27:f4:39:aa:d8:1c:e6:7e:c9:e5:b3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:63:cd:b6:70:48:0b:54:cf:e1:00:27:21: b5:82:a1:69:ef:7b:6c:b3:2d:02:79:1f:c4:ca:38: 2c:70:bf:c2:96:f9:fe:de:29:d9:bb:43:a6:20:05: 8a:90:13:a6:86:63:0c:9a:9b:00:de:d2:3b:e6:cd: c6:03:5e:48:fd:26:a0:e4:d0:5e:00:04:77:4c:85: 3c:46:0f:3a:9d:aa:4d:55:c5:a1:ff:05:06:73:c8: bc:06:60:df:f6:1f:a1:2e:d1:ac:16:9b:3c:fe:17: 58:9f:5c:33:2b:f1:e3:8c:ef:72:b3:31:de:aa:71: 7b:ac:e7:5c:4d:20:73:df:5f:7e:62:88:6d:f4:9e: 4c:ce:5c:94:64:30:e2:a8:c7:5a:34:b4:1b:8c:46: e5:bc:7c:63:60:6e:11:c1:47:45:8f:c0:09:54:1d: 01:ed:0d:27:f1:fc:02:6d:0f:15:38:b3:e4:94:96: af:a6:cd:cb:71:00:49:b9:44:d5:d7:27:c7:86:37: f3:97:ba:52:45:48:c9:a5:98:fa:ad:7f:10:32:e8: 5c:6b:f4:bb:58:98:23:da:fb:85:6f:02:72:c8:fd: e8:64:4c:95:84:0f:89:0f:f3:37:75:e7:a4:1e:3d: 58:34:81:c3:96:8b:43:ac:4b:f7:51:54:a1:87:f4: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.45.0/24 IPv6: 2001:67c:2004::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25173 Signature Algorithm: sha256WithRSAEncryption 7d:16:6a:eb:c8:0f:74:18:52:e1:76:30:f8:6a:c4:aa:01:d7: 13:7a:10:da:e5:b9:c9:19:f0:46:47:d3:b8:4e:46:bf:ed:78: a9:47:c9:53:56:d8:30:a7:c1:6c:ae:84:7b:48:a6:cc:b2:5e: 33:ec:f0:f7:50:97:c9:08:7f:3e:8e:45:de:28:26:42:5d:3e: 90:0c:f5:f7:df:ac:32:4a:55:ed:e3:8c:f5:15:d9:0a:23:fd: 56:08:e8:14:a5:a4:cd:24:63:86:c5:56:1e:5f:46:38:f8:04: 24:dc:46:bc:7e:2b:22:b0:de:b5:e2:7d:0f:42:87:66:95:48: cb:6c:3a:fe:4a:a5:53:6f:de:f8:7b:1c:a9:0d:b7:f8:2b:df: 0f:c3:4a:42:a0:05:ce:c1:f2:b3:c0:fd:0d:a0:62:6e:63:71: 3b:1f:8c:f3:f6:2c:ae:9f:11:be:77:ba:02:55:ec:d4:e5:29: db:01:08:21:2e:17:c8:fd:c7:c4:74:03:23:ae:91:f5:f6:e5: dd:ef:52:57:b8:29:74:12:e0:a4:08:2b:63:1a:8b:9a:4f:5e: 16:9f:65:89:b3:11:41:dd:fd:f9:fb:c3:57:34:ae:0b:b7:2b: 7f:02:13:12:4e:78:83:40:73:40:d6:76:4c:79:92:48:f2:fe: 02:02:c9:ac -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt87iVFJ/Q5qtgc5n7J5bOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTMyODJmZTNmM2Q3ZDQ2YmQxYjFjYjc3YjJmZWMzN2RlZTAwNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvxjzbZwSAtUz+EAJyG1gqFp73ts sy0CeR/EyjgscL/Clvn+3inZu0OmIAWKkBOmhmMMmpsA3tI75s3GA15I/Sag5NBe AAR3TIU8Rg86napNVcWh/wUGc8i8BmDf9h+hLtGsFps8/hdYn1wzK/HjjO9yszHe qnF7rOdcTSBz319+Yoht9J5MzlyUZDDiqMdaNLQbjEblvHxjYG4RwUdFj8AJVB0B 7Q0n8fwCbQ8VOLPklJavps3LcQBJuUTV1yfHhjfzl7pSRUjJpZj6rX8QMuhca/S7 WJgj2vuFbwJyyP3oZEyVhA+JD/M3deekHj1YNIHDlotDrEv3UVShh/RC0wIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFAkygv4/PX1GvRsct3sv7Dfe4AZjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2ZhNzE5 NS1hMGZlLTRmODQtODEzYy0yYTc3NmY3ODdhMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvZmE3MTk1 LWEwZmUtNGY4NC04MTNjLTJhNzc2Zjc4N2ExYy8xL0NUS0Nfajg5ZlVhOUd4eTNl eV9zTjk3Z0JtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwcktMA8EAgACMAkDBwAgAQZ8IAQwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICYlUwDQYJKoZIhvcNAQELBQADggEBAH0WauvID3QY UuF2MPhqxKoB1xN6ENrluckZ8EZH07hORr/teKlHyVNW2DCnwWyuhHtIpsyyXjPs 8PdQl8kIfz6ORd4oJkJdPpAM9fffrDJKVe3jjPUV2Qoj/VYI6BSlpM0kY4bFVh5f Rjj4BCTcRrx+KyKw3rXifQ9Ch2aVSMtsOv5KpVNv3vh7HKkNt/gr3w/DSkKgBc7B 8rPA/Q2gYm5jcTsfjPP2LK6fEb53ugJV7NTlKdsBCCEuF8j9x8R0AyOukfX25d3v Ule4KXQS4KQIK2Mai5pPXhafZYmzEUHd/fn7w1c0rgu3K38CExJOeINAc0DWdkx5 kkjy/gICyaw= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:00 2026 by rpki-client