This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer File: C_K7rLR03WED6JEXpjZ0VpZN8xk.cer (raw, json) Hash identifier: KCrnoz8WEdN4vrkiBr/bBMKRU1Ye/eqzsm5NiHORLt8= Subject key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783475A0B8B624D740BEE719BCED7C68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198188 IP: 31.186.104.0/21 IP: 185.220.16.0/22 IP: 2a0b:ea40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:75:a0:b8:b6:24:d7:40:be:e7:19:bc:ed:7c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bf2bbacb474dd6103e89117a6367456964df319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:ee:81:ac:dd:56:d4:33:7c:c6:84:4b:c8: 13:56:c9:f5:50:2c:7f:66:27:e3:41:79:28:04:e0: 5a:e3:d3:18:54:8c:d7:65:0b:8e:1e:1b:50:29:42: e1:8f:cf:5c:0c:b4:0f:6a:ae:09:ee:ed:e2:1a:bc: a2:ee:95:9d:4b:ad:26:05:55:96:95:dc:0f:49:91: d9:21:e7:e9:8b:f7:33:c2:59:46:3c:6b:d4:4a:2c: 11:7a:f8:fa:c4:c6:3a:d9:c5:66:c7:e4:3d:d0:de: ad:36:f3:9a:82:34:1b:94:f9:79:9f:27:52:ed:fe: 94:c2:71:78:9e:f4:d5:a8:99:fe:65:17:94:43:32: b3:a6:4b:15:0f:33:6a:c1:94:cb:52:48:cc:fe:b2: e7:b4:b0:5c:f1:d5:7a:a8:09:b3:5f:48:41:b8:12: 28:d8:64:90:ac:48:11:2e:c9:03:f9:ae:b2:50:30: a4:2f:48:75:4b:a0:04:ac:b8:5d:0e:01:6f:9d:a4: c0:4d:36:c5:af:db:b1:ac:96:32:67:86:64:39:8d: c6:9e:58:8f:b0:24:63:df:55:a1:0b:cb:37:69:5a: 78:e0:dd:52:8f:ac:02:69:9c:11:48:ac:7a:9e:2d: a9:40:ac:2b:f7:f6:f7:fd:3a:1d:87:77:4a:2c:9b: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.104.0/21 185.220.16.0/22 IPv6: 2a0b:ea40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198188 Signature Algorithm: sha256WithRSAEncryption a7:5d:cb:5f:91:4b:5c:40:03:12:5c:96:c1:bf:9d:54:81:1e: 8b:2d:17:d6:26:16:ea:fb:5e:db:f0:f7:6b:17:66:2e:06:d9: 27:89:43:fc:af:bb:18:c8:23:e2:06:d1:b4:f3:0d:97:0e:ad: bf:c6:f6:e7:b6:75:3c:0e:87:d5:c2:ad:a6:cb:16:fd:5b:c9: 52:4f:5b:f3:91:85:71:ee:4b:47:e3:62:53:02:0d:77:ab:8e: 16:ac:1b:d8:f1:0d:14:a3:f9:b7:10:70:6f:a6:89:48:e2:5e: 80:e9:a2:e0:1c:5e:1c:44:d3:86:bf:28:ba:54:f1:71:e8:c6: c2:9a:cb:4c:6b:77:65:c7:09:c1:19:1e:c5:8d:3b:75:1c:c0: bc:dd:72:86:75:da:18:26:74:45:a3:6e:26:c6:8f:46:a0:de: 43:6e:3f:37:8a:ba:bf:69:25:25:eb:b9:c8:24:d0:70:2d:c8: 8c:8e:cd:49:ae:5f:75:f3:68:ad:bc:86:61:93:ae:e7:b3:7a: 83:d7:4d:6e:70:35:f9:e1:8c:dc:a2:d2:7e:bd:3d:09:52:99: 80:bf:58:41:78:f5:07:86:60:0f:5a:ec:74:02:8c:e4:7e:c4: 75:13:16:f4:f8:fe:8e:23:ea:f6:4d:94:48:b6:43:08:f6:25: ff:d1:02:b4 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NHWguLYk10C+5xm87XxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmYyYmJhY2I0NzRkZDYxMDNlODkxMTdhNjM2NzQ1Njk2NGRmMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWHugazdVtQzfMaES8gTVsn1UCx/ ZifjQXkoBOBa49MYVIzXZQuOHhtQKULhj89cDLQPaq4J7u3iGryi7pWdS60mBVWW ldwPSZHZIefpi/czwllGPGvUSiwRevj6xMY62cVmx+Q90N6tNvOagjQblPl5nydS 7f6UwnF4nvTVqJn+ZReUQzKzpksVDzNqwZTLUkjM/rLntLBc8dV6qAmzX0hBuBIo 2GSQrEgRLskD+a6yUDCkL0h1S6AErLhdDgFvnaTATTbFr9uxrJYyZ4ZkOY3GnliP sCRj31WhC8s3aVp44N1Sj6wCaZwRSKx6ni2pQKwr9/b3/Todh3dKLJuqcwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2NiZDRh Ny0zOTRkLTRjMDMtYmVkNS1kNmI5NmU4OGE2MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvY2JkNGE3 LTM5NGQtNGMwMy1iZWQ1LWQ2Yjk2ZTg4YTYxMS8xL0NfSzdyTFIwM1dFRDZKRVhw alowVnBaTjh4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDH7poAwQCudwQMA0EAgACMAcDBQMqC+pAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMGLDANBgkqhkiG9w0BAQsFAAOCAQEAp13L X5FLXEADElyWwb+dVIEeiy0X1iYW6vte2/D3axdmLgbZJ4lD/K+7GMgj4gbRtPMN lw6tv8b257Z1PA6H1cKtpssW/VvJUk9b85GFce5LR+NiUwINd6uOFqwb2PENFKP5 txBwb6aJSOJegOmi4BxeHETThr8oulTxcejGwprLTGt3ZccJwRkexY07dRzAvN1y hnXaGCZ0RaNuJsaPRqDeQ24/N4q6v2klJeu5yCTQcC3IjI7NSa5fdfNorbyGYZOu 57N6g9dNbnA1+eGM3KLSfr09CVKZgL9YQXj1B4ZgD1rsdAKM5H7EdRMW9Pj+jiPq 9k2USLZDCPYl/9ECtA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:01 2026 by rpki-client