This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer File: Kq8k6REaiJ202uCH5ICeEIbjP4I.cer (raw, json) Hash identifier: 6M4MTB2bpFxRWYICdWok2FctzGbxBRGkodCowpAyaEc= Subject key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75A846C48E3A33339C1E4242672B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203255 IP: 185.137.48.0/22 IP: 2a0f:cb40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:84:6c:48:e3:a3:33:39:c1:e4:24:26:72:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aaf24e9111a889db4dae087e4809e1086e33f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:a9:51:3b:42:80:b6:db:e6:87:99:0c:1b: af:0f:18:f1:ff:87:df:0a:06:1e:58:83:71:91:2c: 59:6c:88:c2:9c:07:3d:cc:57:f0:2f:79:06:4d:74: e0:f3:36:fc:45:e6:51:05:36:43:d0:ef:f3:42:25: 88:28:27:3b:1f:b4:7b:7e:44:db:c7:6f:c5:f3:86: ab:0a:a0:b8:0e:bd:fd:11:76:91:50:22:c5:42:21: 69:b1:89:10:23:5d:f0:55:4d:7c:80:fb:b8:24:9b: 41:2d:1e:92:21:09:c9:b9:6a:75:f8:d0:7a:0e:c3: a0:8a:55:f9:8d:b2:17:ad:be:64:a5:eb:37:5a:c3: 48:e3:03:cf:1f:3a:ba:30:8b:1e:6c:9b:5c:2e:cc: f5:54:fd:86:39:ec:0f:49:c0:47:6c:b8:79:89:9d: 1a:bc:0e:c0:6f:c3:b0:aa:bb:1b:cb:b6:d6:a7:fd: b7:33:2a:c3:5f:c9:76:a0:d6:c7:ce:ed:a9:b0:43: 3c:d6:f4:f7:fd:75:fc:87:a5:c2:63:c7:8e:a6:25: 7c:6c:12:51:a7:27:96:9d:09:4e:d6:b1:1e:39:e6: 12:a6:39:21:7d:f2:96:34:6f:74:7c:d5:09:22:fc: ab:4d:84:ea:fa:ca:ec:31:a9:14:a7:8e:39:03:00: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.48.0/22 IPv6: 2a0f:cb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203255 Signature Algorithm: sha256WithRSAEncryption ad:dc:0b:69:f3:9a:bb:06:73:cf:62:50:c1:ef:52:d2:3f:e0: 84:f0:03:de:ac:d7:7c:d5:63:a5:ce:d4:2a:22:01:13:ca:1a: 83:d1:eb:9e:a0:9d:b4:ba:9c:92:9a:d5:f8:bd:20:d3:e9:be: 13:78:56:47:d5:ac:6d:07:59:32:fc:68:89:22:41:45:e6:b1: 96:f6:e3:42:c5:1e:54:94:9c:bd:30:5b:20:8b:f1:7a:fe:ec: 27:bc:21:1b:dd:f4:ba:6c:ef:ce:f4:a8:9f:05:9d:05:ea:97: 80:d4:87:15:20:7d:b5:c5:a7:eb:ba:df:a4:84:17:c7:bd:4a: 70:65:e6:dc:d1:8a:2d:d2:67:af:4d:75:e0:ee:b6:59:a1:cd: 98:69:fe:5b:ad:95:b0:7e:43:13:2a:a9:f3:2c:30:d1:67:ea: 86:2d:27:36:f7:4f:41:7b:6e:1a:4d:7d:16:b5:8a:61:8c:f0: e2:97:21:17:56:50:6e:77:94:ef:e6:f2:dd:d3:df:a9:05:5d: 90:89:28:8b:0f:56:99:7d:ae:5c:8b:db:1a:9a:f4:87:38:41: 66:b2:50:9c:91:3f:b6:ea:90:7b:3d:60:ef:70:a0:a4:e0:64: 48:20:85:6c:cd:c5:4d:78:32:e5:88:2e:7e:c3:6c:69:c8:74: bf:f4:7a:78 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3x1qEbEjjozM5weQkJnK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWFmMjRlOTExMWE4ODlkYjRkYWUwODdlNDgwOWUxMDg2ZTMzZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkKpUTtCgLbb5oeZDBuvDxjx/4ff CgYeWINxkSxZbIjCnAc9zFfwL3kGTXTg8zb8ReZRBTZD0O/zQiWIKCc7H7R7fkTb x2/F84arCqC4Dr39EXaRUCLFQiFpsYkQI13wVU18gPu4JJtBLR6SIQnJuWp1+NB6 DsOgilX5jbIXrb5kpes3WsNI4wPPHzq6MIsebJtcLsz1VP2GOewPScBHbLh5iZ0a vA7Ab8Owqrsby7bWp/23MyrDX8l2oNbHzu2psEM81vT3/XX8h6XCY8eOpiV8bBJR pyeWnQlO1rEeOeYSpjkhffKWNG90fNUJIvyrTYTq+srsMakUp445AwAqnwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCqvJOkRGoidtNrgh+SAnhCG4z+CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2M4MDg5 Ni1jMzZlLTQ2MjctODM1My0zNDFjM2ZhNDViNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYzgwODk2 LWMzNmUtNDYyNy04MzUzLTM0MWMzZmE0NWI0My8xL0txOGs2UkVhaUoyMDJ1Q0g1 SUNlRUlialA0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYkwMA0EAgACMAcDBQAqD8tAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZ9zANBgkqhkiG9w0BAQsFAAOCAQEArdwLafOauwZz z2JQwe9S0j/ghPAD3qzXfNVjpc7UKiIBE8oag9HrnqCdtLqckprV+L0g0+m+E3hW R9WsbQdZMvxoiSJBReaxlvbjQsUeVJScvTBbIIvxev7sJ7whG930umzvzvSonwWd BeqXgNSHFSB9tcWn67rfpIQXx71KcGXm3NGKLdJnr0114O62WaHNmGn+W62VsH5D Eyqp8yww0Wfqhi0nNvdPQXtuGk19FrWKYYzw4pchF1ZQbneU7+by3dPfqQVdkIko iw9WmX2uXIvbGpr0hzhBZrJQnJE/tuqQez1g73CgpOBkSCCFbM3FTXgy5YgufsNs ach0v/R6eA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:49 2026 by rpki-client