This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer File: RKMb41sydPLLhX5a81aLaFqJEn0.cer (raw, json) Hash identifier: 05NqAXcQyIZXhxN3ALrRNfYFclFK2AzNJ3EqjFjOkuE= Subject key identifier: 44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D87B1000216975A55E85A8D5E991 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.153.159.0/26 IP: 195.26.24.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d8:7b:10:00:21:69:75:a5:5e:85:a8:d5:e9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44a31be35b3274f2cb857e5af3568b685a89127d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:74:6a:d8:a0:2a:e1:bb:45:ad:d2:1b:0b: 18:34:f7:75:69:d0:f4:08:8e:7a:ff:83:88:7a:ae: 21:32:6f:7f:70:eb:6a:c9:ac:af:c5:95:39:3e:f0: a6:6f:39:52:44:a7:af:01:ad:d9:5a:3e:1d:38:5c: 94:db:ae:0d:95:dc:db:9f:e0:ce:19:20:7f:c7:e9: b4:94:52:79:03:fa:dc:63:26:07:8e:b5:97:1f:69: a2:81:e1:f3:fc:aa:48:0c:75:13:b2:36:a7:ad:7d: 9d:15:a2:45:d2:90:8d:24:98:1f:4c:05:df:d0:64: b4:c9:48:be:c0:92:42:9d:11:98:f0:ec:e0:9c:58: c9:6d:ba:ba:c1:6b:34:84:33:be:62:61:27:83:bb: 45:1e:31:11:c8:cd:45:98:22:e5:8b:28:56:01:43: ec:5a:ef:f9:ec:63:24:99:de:59:8d:f0:75:cd:ec: 0c:10:b2:c6:35:48:89:82:26:85:b3:a8:58:a2:7e: 01:9d:b8:0e:94:cb:21:b5:fd:01:19:e2:ff:1e:28: 56:0a:82:49:80:f9:21:d6:8a:f8:f1:01:25:06:c7: 76:77:04:43:3a:5c:5a:d5:54:88:5f:e6:62:00:d1: f7:5f:bf:16:ac:88:67:58:7f:81:49:ce:76:e1:f7: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.159.0/26 195.26.24.0/24 Signature Algorithm: sha256WithRSAEncryption 08:ff:16:a1:86:e3:07:5e:58:59:6d:ea:d0:f4:8b:f8:57:6d: 9b:43:b2:17:f5:df:2c:d1:69:2f:78:aa:5b:55:a2:1d:44:db: d1:18:66:3d:69:d3:19:c0:07:74:37:57:f8:8b:bc:64:3e:56: 27:b5:ec:3f:12:d9:ed:4b:c6:1b:d7:00:1b:74:70:6a:ad:a9: 16:1b:ff:6b:11:10:16:a2:12:6b:88:1d:69:5f:3a:3d:32:44: 5e:3b:7d:11:2a:16:3e:00:5d:a3:e5:ed:fb:82:87:59:61:84: 19:1e:56:cd:4b:78:01:b4:31:a9:b7:3d:d4:09:16:78:74:d3: 90:bd:c7:e2:ca:02:c4:24:c8:12:e6:24:0a:ac:24:ba:d5:99: 27:73:d1:3f:7c:9c:eb:d2:31:21:a5:fe:a6:bc:65:2a:95:f4: 09:eb:77:e6:29:d8:7f:f3:8e:3c:48:6c:e0:fb:59:34:a1:97: 50:0e:2d:13:b1:bb:88:3d:cb:87:42:35:9a:14:7e:32:e5:56: 62:4c:ca:f8:e0:23:ff:f3:09:c1:cb:6d:c7:d0:b7:25:ef:94: ed:a5:4d:db:ec:77:a8:4e:49:ba:c9:e9:b4:90:aa:99:5e:50: 61:a8:0d:f9:02:ae:60:62:92:44:25:ce:c5:0d:8b:0d:bb:2d: a9:0e:44:5c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt/Fdh7EAAhaXWlXoWo1emRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGEzMWJlMzViMzI3NGYyY2I4NTdlNWFmMzU2OGI2ODVhODkxMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8t0atigKuG7Ra3SGwsYNPd1adD0 CI56/4OIeq4hMm9/cOtqyayvxZU5PvCmbzlSRKevAa3ZWj4dOFyU264Nldzbn+DO GSB/x+m0lFJ5A/rcYyYHjrWXH2migeHz/KpIDHUTsjanrX2dFaJF0pCNJJgfTAXf 0GS0yUi+wJJCnRGY8OzgnFjJbbq6wWs0hDO+YmEng7tFHjERyM1FmCLliyhWAUPs Wu/57GMkmd5ZjfB1zewMELLGNUiJgiaFs6hYon4BnbgOlMshtf0BGeL/HihWCoJJ gPkh1or48QElBsd2dwRDOlxa1VSIX+ZiANH3X78WrIhnWH+BSc524fckCQIDAQAB o4ICizCCAocwHQYDVR0OBBYEFESjG+NbMnTyy4V+WvNWi2haiRJ9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2E4NmRm Yi0xMjA0LTQ3ZTMtYWQ3Ni1hZTc3Mjc5NDk0NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvYTg2ZGZi LTEyMDQtNDdlMy1hZDc2LWFlNzcyNzk0OTQ0NS8xL1JLTWI0MXN5ZFBMTGhYNWE4 MWFMYUZxSkVuMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYGCCsGAQUF BwEHAQH/BBcwFTATBAIAATANAwUGwpmfAAMEAMMaGDANBgkqhkiG9w0BAQsFAAOC AQEACP8WoYbjB15YWW3q0PSL+Fdtm0OyF/XfLNFpL3iqW1WiHUTb0RhmPWnTGcAH dDdX+Iu8ZD5WJ7XsPxLZ7UvGG9cAG3Rwaq2pFhv/axEQFqISa4gdaV86PTJEXjt9 ESoWPgBdo+Xt+4KHWWGEGR5WzUt4AbQxqbc91AkWeHTTkL3H4soCxCTIEuYkCqwk utWZJ3PRP3yc69IxIaX+prxlKpX0Cet35inYf/OOPEhs4PtZNKGXUA4tE7G7iD3L h0I1mhR+MuVWYkzK+OAj//MJwcttx9C3Je+U7aVN2+x3qE5JusnptJCqmV5QYagN +QKuYGKSRCXOxQ2LDbstqQ5EXA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:00 2026 by rpki-client