This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer (raw, json) Hash identifier: vcGOvagqkm/HZNyWInGlluvRaQeUw4Vu7KqG4sP5kMQ= Subject key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ADB3D807BE9F91BAC76A3FE0E3DAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8241 AS: 57174 IP: 95.215.176.0/21 IP: 185.42.48.0/22 IP: 185.246.32.0/22 IP: 195.146.64.0/19 IP: 213.181.0.0/19 IP: 2a02:eb80::/29 IP: 2a0d:7480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:db:3d:80:7b:e9:f9:1b:ac:76:a3:fe:0e:3d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464d733de81fbd486d442358e0c15370520f9312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:98:da:f2:1e:74:29:fe:22:2c:06:d3:7f: 6a:3c:2a:22:b2:bc:1e:48:88:b8:be:9a:e7:d8:69: 93:66:45:1e:fd:44:04:6d:7d:8a:aa:11:ba:09:84: c7:4f:4f:55:f6:6a:e3:b2:ad:e6:01:0f:45:dd:e3: 83:ab:e1:82:9d:1b:2b:a4:88:f1:fe:81:05:73:fd: 62:84:b1:2f:06:74:3c:f7:fb:e9:fa:f4:6f:da:63: 4d:ce:8d:77:c7:07:dd:ac:90:4e:8f:86:bb:6e:75: 3a:75:38:29:c4:c0:b9:d0:43:d9:5a:89:a4:a5:e2: 72:d3:25:f6:42:a7:90:6a:4c:b2:ff:05:20:ce:7a: 39:3c:a8:26:81:54:de:83:2d:17:75:48:e4:a6:34: e3:b6:43:26:06:e0:0b:d5:85:bb:bc:4d:53:66:62: 7d:77:8c:38:29:2a:34:a8:09:82:39:9c:68:c8:e4: 42:79:ab:02:6b:89:72:db:78:0f:04:6a:27:07:d4: 52:44:10:fe:83:fe:c4:02:67:f9:b4:c8:16:b9:99: 0b:ee:2e:eb:34:b8:e6:45:68:db:58:ab:9c:51:34: 13:cb:86:4f:04:8d:a0:6d:ea:ea:aa:fe:21:f1:fd: 6c:f9:62:57:42:54:72:34:7b:44:f8:e5:5d:b9:18: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.176.0/21 185.42.48.0/22 185.246.32.0/22 195.146.64.0/19 213.181.0.0/19 IPv6: 2a02:eb80::/29 2a0d:7480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8241 57174 Signature Algorithm: sha256WithRSAEncryption 7a:83:ad:93:e6:50:9c:ed:8f:85:05:7c:de:d6:d3:fe:e9:58: 20:13:9a:f4:10:ce:a5:c5:f9:69:54:e5:a9:5d:11:c1:71:1c: c3:46:fa:30:5a:b1:d6:21:c5:2e:6c:aa:81:57:14:1d:1e:21: 82:83:3a:ab:a1:0e:ff:10:92:14:4a:7f:73:4c:ad:c2:33:45: 7c:ef:0a:2d:0c:43:33:88:bb:6c:c6:bd:43:d3:bb:a9:2d:c0: 67:1e:69:0c:06:94:7a:b1:be:69:20:84:67:92:e7:ca:4a:0f: 88:88:b8:3d:68:d4:f4:1c:6e:f4:00:d3:61:1e:44:1c:d0:07: 1c:68:56:11:47:41:96:4f:9e:38:f1:d0:b0:d4:8d:a6:f5:df: ad:95:11:00:ab:df:bd:1b:e9:8d:ea:88:4c:2d:21:2d:38:1b: 9c:28:b8:64:2f:97:df:5c:27:bf:c1:0c:83:a1:22:a7:4a:89: a5:e9:bf:b4:7d:53:cb:06:eb:45:97:7e:c1:93:0c:91:0f:34: cb:f3:08:5c:b9:a5:72:69:b2:f9:d2:f6:07:bc:1d:1f:96:5d: 2b:51:6d:c1:b5:85:12:e9:c8:4a:9f:9c:84:74:9b:f1:78:4d: d7:9b:00:fb:0a:3f:b6:49:52:c4:0c:d9:d6:27:1e:25:c3:2d: 6a:8a:15:b8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt6Wts9gHvp+RusdqP+Dj2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjRkNzMzZGU4MWZiZDQ4NmQ0NDIzNThlMGMxNTM3MDUyMGY5MzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXWY2vIedCn+IiwG039qPCoisrwe SIi4vprn2GmTZkUe/UQEbX2KqhG6CYTHT09V9mrjsq3mAQ9F3eODq+GCnRsrpIjx /oEFc/1ihLEvBnQ89/vp+vRv2mNNzo13xwfdrJBOj4a7bnU6dTgpxMC50EPZWomk peJy0yX2QqeQakyy/wUgzno5PKgmgVTegy0XdUjkpjTjtkMmBuAL1YW7vE1TZmJ9 d4w4KSo0qAmCOZxoyORCeasCa4ly23gPBGonB9RSRBD+g/7EAmf5tMgWuZkL7i7r NLjmRWjbWKucUTQTy4ZPBI2gberqqv4h8f1s+WJXQlRyNHtE+OVduRg7BwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFEZNcz3oH71IbUQjWODBU3BSD5MSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2Q3ZmZl ZC02YzFkLTQxMzEtOTUwZi1hNDlkMWEwMDZkYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDdmZmVk LTZjMWQtNDEzMS05NTBmLWE0OWQxYTAwNmRjOS8xL1JrMXpQZWdmdlVodFJDTlk0 TUZUY0ZJUGt4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQDX9ewAwQCuSowAwQCufYgAwQFw5JAAwQF1bUA MBQEAgACMA4DBQMqAuuAAwUDKg10gDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIg MQIDAN9WMA0GCSqGSIb3DQEBCwUAA4IBAQB6g62T5lCc7Y+FBXze1tP+6VggE5r0 EM6lxflpVOWpXRHBcRzDRvowWrHWIcUubKqBVxQdHiGCgzqroQ7/EJIUSn9zTK3C M0V87wotDEMziLtsxr1D07upLcBnHmkMBpR6sb5pIIRnkufKSg+IiLg9aNT0HG70 ANNhHkQc0AccaFYRR0GWT5448dCw1I2m9d+tlREAq9+9G+mN6ohMLSEtOBucKLhk L5ffXCe/wQyDoSKnSoml6b+0fVPLButFl37BkwyRDzTL8whcuaVyabL50vYHvB0f ll0rUW3BtYUS6chKn5yEdJvxeE3XmwD7Cj+2SVLEDNnWJx4lwy1qihW4 -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:34 2026 by rpki-client