This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer (raw, json) Hash identifier: sVNq4DklsV2kX2Ysfr6IMo6YQagKpFX3wmkBqWXuwdM= Subject key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E383EB84D5F68E41390127BA8557DF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59985 IP: 185.63.68.0/22 IP: 2a04:f380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3e:b8:4d:5f:68:e4:13:90:12:7b:a8:55:7d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464528d9080c665db0551d8ad8b0f71f7bb76996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:a2:30:03:75:ac:c5:3c:37:fa:0c:3e:2b: 84:5b:5e:51:e1:6b:16:62:aa:88:e7:44:f3:87:8e: eb:22:13:7a:b8:cc:7b:df:83:ac:0e:3d:ee:c8:79: 1b:80:4d:8c:34:14:4e:c0:a3:4c:9f:0d:ef:dc:d0: 30:23:91:cd:fc:57:0b:08:1f:bd:4f:da:2b:31:ef: f0:8e:76:70:27:ef:fa:09:0f:ca:89:e3:0b:84:da: 68:60:d0:2c:2a:36:2c:52:09:8b:cb:c2:8a:17:cf: 0b:bb:f3:5e:b5:9d:ec:99:92:5e:94:a4:30:f9:23: 1e:61:73:43:de:14:b4:1f:3e:ff:f9:6b:f0:dd:07: 8d:05:28:78:1d:19:e1:c8:e4:14:f7:29:9f:e8:5c: 3f:6e:9f:ec:f0:b3:06:c9:33:7b:28:0b:78:c9:ee: 8f:95:91:0e:5c:86:f7:0f:e8:f7:4d:e5:27:8c:55: 4c:90:93:37:db:ef:0a:83:c2:06:d4:03:45:cb:cf: fe:b0:c8:e4:80:7c:d5:e2:3c:9c:17:91:42:c1:d9: 3d:f1:59:04:81:dc:43:97:15:19:23:16:b6:6f:ae: b0:70:57:a4:c5:0b:53:8b:d7:08:79:3d:94:c2:f0: fc:c0:51:d2:ef:cc:b1:46:aa:81:c8:f8:ba:b0:fa: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.68.0/22 IPv6: 2a04:f380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59985 Signature Algorithm: sha256WithRSAEncryption 63:54:0b:1b:a9:22:62:20:52:f9:65:44:b5:6d:fc:95:53:6c: 16:a5:27:b4:cf:25:56:48:ed:02:cc:4a:44:5e:d3:c4:e7:55: 5c:16:86:1a:44:72:a6:47:02:7d:2e:de:b8:e4:23:1a:c7:14: 8b:0a:7f:9a:4c:f0:e1:b8:3f:fd:17:ee:30:b4:26:12:ae:e8: 3e:91:10:0c:7f:f2:32:a3:67:31:87:00:89:ec:87:ae:98:a5: 57:b0:75:1e:8c:09:88:24:d4:1b:2f:e8:ba:2d:6a:b7:c5:3e: a1:29:f6:4c:29:0d:c2:86:44:e2:ee:e3:a3:da:c8:10:6d:f4: d6:e4:8b:22:e2:56:ea:3b:4f:51:25:98:2f:da:85:4c:35:93: 2f:31:c7:d0:ef:c2:e7:29:06:74:5e:ca:e0:aa:7e:7d:82:18: 6b:cb:0a:69:5f:6d:43:dc:3e:09:b9:30:f6:0c:78:33:e8:a5: fb:38:6b:28:fb:86:3f:14:ed:fc:2d:36:8c:ae:5b:21:76:51: bb:8e:e2:e3:54:2d:15:6b:0e:92:d0:e9:e1:85:84:c6:bb:63: 51:8b:2d:5e:2d:32:68:da:ce:a9:68:a7:2e:86:c4:5a:41:18: a7:65:5c:46:d7:f5:b2:2f:3f:2f:b2:20:51:76:39:9c:45:f4: 65:cb:eb:a6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OD64TV9o5BOQEnuoVX33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQ1MjhkOTA4MGM2NjVkYjA1NTFkOGFkOGIwZjcxZjdiYjc2OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw+iMAN1rMU8N/oMPiuEW15R4WsW YqqI50Tzh47rIhN6uMx734OsDj3uyHkbgE2MNBROwKNMnw3v3NAwI5HN/FcLCB+9 T9orMe/wjnZwJ+/6CQ/KieMLhNpoYNAsKjYsUgmLy8KKF88Lu/NetZ3smZJelKQw +SMeYXND3hS0Hz7/+Wvw3QeNBSh4HRnhyOQU9ymf6Fw/bp/s8LMGyTN7KAt4ye6P lZEOXIb3D+j3TeUnjFVMkJM32+8Kg8IG1ANFy8/+sMjkgHzV4jycF5FCwdk98VkE gdxDlxUZIxa2b66wcFekxQtTi9cIeT2UwvD8wFHS78yxRqqByPi6sPo1MQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEZFKNkIDGZdsFUditiw9x97t2mWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzQ1ODUy Zi04ZmFlLTQ0MWQtYjEwYy0wYTFiZjViZjBjYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvNDU4NTJm LThmYWUtNDQxZC1iMTBjLTBhMWJmNWJmMGNhMi8xL1JrVW8yUWdNWmwyd1ZSMksy TEQzSDN1M2FaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT9EMA0EAgACMAcDBQMqBPOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDqUTANBgkqhkiG9w0BAQsFAAOCAQEAY1QLG6kiYiBS +WVEtW38lVNsFqUntM8lVkjtAsxKRF7TxOdVXBaGGkRypkcCfS7euOQjGscUiwp/ mkzw4bg//RfuMLQmEq7oPpEQDH/yMqNnMYcAieyHrpilV7B1HowJiCTUGy/oui1q t8U+oSn2TCkNwoZE4u7jo9rIEG301uSLIuJW6jtPUSWYL9qFTDWTLzHH0O/C5ykG dF7K4Kp+fYIYa8sKaV9tQ9w+Cbkw9gx4M+il+zhrKPuGPxTt/C02jK5bIXZRu47i 41QtFWsOktDp4YWExrtjUYstXi0yaNrOqWinLobEWkEYp2VcRtf1si8/L7IgUXY5 nEX0Zcvrpg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:44 2026 by rpki-client