This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer File: K0lf5W80diAmqUA18yDwqQt6JWY.cer (raw, json) Hash identifier: SFQxUdbxUvjE1Yht8YtrBOTxTLlQRkM1dYHzNRTggq8= Subject key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3A9DFF3A7C60CBD3AF86522A2D882 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198612 IP: 37.208.0.0/19 IP: 185.166.208.0/22 IP: 2a00:c640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a9:df:f3:a7:c6:0c:bd:3a:f8:65:22:a2:d8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:1b:98:07:84:9c:b4:9c:73:53:7b:0f:d8: 9d:f8:fd:15:d6:c7:b1:29:d9:0e:8e:b6:c7:62:2d: 25:00:8d:88:59:cc:d6:78:fd:3f:a4:49:4e:9b:aa: 1b:e1:22:34:13:48:05:1e:f8:98:66:7a:0e:d4:e9: cf:0b:84:8b:17:41:96:ea:57:c4:d2:0c:b7:c8:63: 8e:b5:3b:b8:95:cc:90:86:bc:37:cf:9f:13:28:08: fd:49:ca:bc:7f:64:29:b9:33:fd:4b:5c:d5:f5:a5: 0f:d7:97:9e:d9:3e:d8:98:44:52:f2:73:ed:95:6a: f0:c9:0b:dc:3e:0b:61:e0:8f:d1:b6:cd:65:8d:e9: eb:f3:8f:59:64:d7:8f:92:0f:2c:ef:7a:e3:2d:96: 74:7d:21:88:c7:de:b4:87:d3:13:b4:8f:44:0d:a8: b1:32:83:40:10:73:6c:c0:4e:48:cf:79:bf:0c:56: 48:0e:46:5e:8d:d2:58:d2:17:5d:78:dc:2f:46:9c: dc:50:31:32:48:18:42:cc:98:59:e3:db:6b:5c:73: 33:59:2f:2a:7e:58:a5:a9:69:47:8b:33:6a:be:47: d0:ac:69:15:c3:dc:51:fd:e2:f6:58:14:84:fb:ed: 6b:19:7c:ac:98:76:00:6d:49:98:e2:7f:65:3b:82: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.0.0/19 185.166.208.0/22 IPv6: 2a00:c640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198612 Signature Algorithm: sha256WithRSAEncryption 93:58:69:aa:a3:d1:4c:ed:4b:0a:93:17:f8:2a:2e:ef:5b:e9: f3:55:31:40:dd:2b:e9:67:9a:cc:1e:dd:5f:b5:e8:d9:8e:5e: 89:81:f7:62:d3:14:ea:70:be:e8:b9:a0:60:16:0e:ff:a5:e0: d1:86:99:eb:3b:7e:0d:68:5e:e9:b0:eb:51:ff:54:86:64:42: 57:67:d2:29:9d:8d:ea:5e:4e:9a:e3:03:e8:89:4e:bd:3c:50: 56:32:0d:b4:1a:c5:44:46:7f:a1:f2:52:ab:69:05:f9:13:a2: e9:a1:8f:4e:41:6e:5f:75:1f:d4:fa:5c:0a:fa:4c:b3:bc:3c: bb:86:ef:3f:41:d8:1a:06:19:39:c7:1b:56:3b:79:e5:8b:8b: 90:98:88:40:a2:b7:e0:9b:31:b4:81:6b:68:c3:43:38:fc:f3: d1:e5:38:12:15:d8:db:82:a9:00:b0:74:5a:93:d3:92:af:43: 7c:be:c2:b3:cd:67:4a:96:5c:dd:be:7b:19:96:4c:9e:21:77: ab:3b:f2:7d:e4:7f:c2:3f:37:cf:11:93:1c:72:fe:0c:63:53: 7e:4a:41:49:ff:20:34:93:01:c5:b2:2e:61:68:ad:89:12:98: 7c:a6:68:1f:1c:4a:40:9c:ec:9d:23:18:09:35:50:a6:7d:8b: 18:81:a1:ed -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7o6nf86fGDL06+GUiotiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjQ5NWZlNTZmMzQ3NjIwMjZhOTQwMzVmMzIwZjBhOTBiN2EyNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEMbmAeEnLScc1N7D9id+P0V1sex KdkOjrbHYi0lAI2IWczWeP0/pElOm6ob4SI0E0gFHviYZnoO1OnPC4SLF0GW6lfE 0gy3yGOOtTu4lcyQhrw3z58TKAj9Scq8f2QpuTP9S1zV9aUP15ee2T7YmERS8nPt lWrwyQvcPgth4I/Rts1ljenr849ZZNePkg8s73rjLZZ0fSGIx960h9MTtI9EDaix MoNAEHNswE5Iz3m/DFZIDkZejdJY0hddeNwvRpzcUDEySBhCzJhZ49trXHMzWS8q flilqWlHizNqvkfQrGkVw9xR/eL2WBSE++1rGXysmHYAbUmY4n9lO4JcUQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCtJX+VvNHYgJqlANfMg8KkLeiVmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzRkMjRj Ny03NDc3LTRmN2YtYThiNC05ZDYzNzk1MjExZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNGQyNGM3 LTc0NzctNGY3Zi1hOGI0LTlkNjM3OTUyMTFkMy8xL0swbGY1VzgwZGlBbXFVQTE4 eUR3cVF0NkpXWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFJdAAAwQCuabQMA0EAgACMAcDBQAqAMZAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMH1DANBgkqhkiG9w0BAQsFAAOCAQEAk1hp qqPRTO1LCpMX+Cou71vp81UxQN0r6WeazB7dX7Xo2Y5eiYH3YtMU6nC+6LmgYBYO /6Xg0YaZ6zt+DWhe6bDrUf9UhmRCV2fSKZ2N6l5OmuMD6IlOvTxQVjINtBrFREZ/ ofJSq2kF+ROi6aGPTkFuX3Uf1PpcCvpMs7w8u4bvP0HYGgYZOccbVjt55YuLkJiI QKK34JsxtIFraMNDOPzz0eU4EhXY24KpALB0WpPTkq9DfL7Cs81nSpZc3b57GZZM niF3qzvyfeR/wj83zxGTHHL+DGNTfkpBSf8gNJMBxbIuYWitiRKYfKZoHxxKQJzs nSMYCTVQpn2LGIGh7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:47 2026 by rpki-client