This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer File: Rk2NgKs3p1e503SClf5mn04JOyM.cer (raw, json) Hash identifier: ss9QmD+zRNncs2B6cPM5M2MK1EnOR8QERxVyiHXaqxg= Subject key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12ECBACFEEB4F210F96F01AE0E9AAA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203328 IP: 185.138.44.0/22 IP: 2a07:9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ec:ba:cf:ee:b4:f2:10:f9:6f:01:ae:0e:9a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464d8d80ab37a757b9d3748295fe669f4e093b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:fc:cd:4f:52:4f:ea:2c:ce:f1:b3:01:e1: 25:2c:58:ba:ec:cf:a7:da:01:ac:07:82:84:8b:f2: 37:41:ad:9f:2d:36:26:c8:79:ca:46:66:17:ca:04: bb:ae:c5:58:df:bd:b9:aa:1f:59:0f:88:bb:b3:9d: d3:70:02:38:1e:53:68:27:ed:9d:bb:ca:bf:7e:aa: 5a:df:30:c7:81:80:c0:13:04:70:0b:f0:29:4b:c9: 46:cc:ba:79:92:4e:c5:b3:48:d7:d1:90:9f:1a:20: c6:b5:f3:d0:ed:76:d6:46:c7:79:2d:df:07:cc:42: 0c:26:0d:56:76:ae:7a:72:38:5e:16:92:90:b9:b9: 36:9d:c7:d8:03:82:24:93:b2:e1:f3:a6:7a:96:40: 90:f6:31:8f:4f:ae:a2:8f:3d:1c:8d:c4:e2:51:e4: 9e:be:bc:28:1f:73:4c:fa:82:51:92:f0:b8:bd:01: 55:03:d8:94:f9:02:03:e6:3c:e5:08:9c:06:f3:39: cd:a5:1d:6e:e0:c7:27:eb:96:d4:5f:7e:f5:9a:45: c9:4a:f5:fa:a5:4f:42:de:d2:31:70:21:cd:fb:93: c1:a9:31:da:17:fc:5a:3e:27:55:c3:81:b9:30:53: a3:0b:d0:85:c8:ba:a3:2f:fb:db:16:1b:40:ac:f3: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.44.0/22 IPv6: 2a07:9c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203328 Signature Algorithm: sha256WithRSAEncryption 87:7a:46:76:d4:e6:b7:dd:9c:30:79:ea:17:d8:49:22:09:f1: 61:da:d1:5e:b5:a4:d2:21:36:04:4d:5d:e4:ed:5c:18:a0:ce: 59:26:71:47:9b:9a:25:a2:c2:43:e8:c2:78:22:d1:b7:ae:2e: 73:1d:ae:4c:39:62:37:7e:1a:04:f8:14:a7:e5:75:f6:9e:ae: 29:1e:ed:aa:6e:db:23:65:56:0b:59:ed:51:90:e4:3e:d2:5b: c1:ed:05:2d:43:80:f1:68:f1:d4:53:70:b3:5c:4f:76:fd:60: 48:ec:bc:09:e9:00:81:5c:da:ad:bb:d5:6a:99:f5:bf:3f:3d: 00:84:77:d7:49:ee:bc:95:6c:86:f9:70:35:b6:d4:5b:ac:57: e6:b8:66:c3:23:c3:cd:29:93:b2:18:5a:46:e0:71:80:17:bb: f1:36:c7:04:8d:9d:47:84:5f:c1:b2:a5:fa:db:2d:53:ad:88: 2b:c6:20:21:7c:b8:85:56:2c:27:e0:af:de:10:b2:b1:80:2d: 2e:24:78:46:eb:b1:82:ef:77:9b:d9:8a:f0:f9:84:7b:8e:7e: 75:ee:6e:74:0a:95:bb:86:41:b2:2d:16:ad:06:b1:23:2c:d0: 62:2c:35:92:24:4b:b6:f1:51:48:8a:e8:65:fc:66:bd:0b:79: 47:ae:a7:bf -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Euy6z+608hD5bwGuDpqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjRkOGQ4MGFiMzdhNzU3YjlkMzc0ODI5NWZlNjY5ZjRlMDkzYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS/8zU9ST+oszvGzAeElLFi67M+n 2gGsB4KEi/I3Qa2fLTYmyHnKRmYXygS7rsVY3725qh9ZD4i7s53TcAI4HlNoJ+2d u8q/fqpa3zDHgYDAEwRwC/ApS8lGzLp5kk7Fs0jX0ZCfGiDGtfPQ7XbWRsd5Ld8H zEIMJg1Wdq56cjheFpKQubk2ncfYA4Ikk7Lh86Z6lkCQ9jGPT66ijz0cjcTiUeSe vrwoH3NM+oJRkvC4vQFVA9iU+QID5jzlCJwG8znNpR1u4Mcn65bUX371mkXJSvX6 pU9C3tIxcCHN+5PBqTHaF/xaPidVw4G5MFOjC9CFyLqjL/vbFhtArPMl9wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEZNjYCrN6dXudN0gpX+Zp9OCTsjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2NlNDdk Mi03ZTcxLTQ1ZGUtOGYxOC05MTFiYjNkY2YwZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvY2U0N2Qy LTdlNzEtNDVkZS04ZjE4LTkxMWJiM2RjZjBkNy8xL1JrMk5nS3MzcDFlNTAzU0Ns ZjVtbjA0Sk95TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYosMA0EAgACMAcDBQMqBwnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaQDANBgkqhkiG9w0BAQsFAAOCAQEAh3pGdtTmt92c MHnqF9hJIgnxYdrRXrWk0iE2BE1d5O1cGKDOWSZxR5uaJaLCQ+jCeCLRt64ucx2u TDliN34aBPgUp+V19p6uKR7tqm7bI2VWC1ntUZDkPtJbwe0FLUOA8Wjx1FNws1xP dv1gSOy8CekAgVzarbvVapn1vz89AIR310nuvJVshvlwNbbUW6xX5rhmwyPDzSmT shhaRuBxgBe78TbHBI2dR4RfwbKl+tstU62IK8YgIXy4hVYsJ+Cv3hCysYAtLiR4 Ruuxgu93m9mK8PmEe45+de5udAqVu4ZBsi0WrQaxIyzQYiw1kiRLtvFRSIroZfxm vQt5R66nvw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:47 2026 by rpki-client