This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aKUCPY4CESaZfXkmpHcBYIqs48c.cer File: aKUCPY4CESaZfXkmpHcBYIqs48c.cer (raw, json) Hash identifier: TO24z1GFdUUnnV0TVWrZng+idRZbPwRWu+UzY5J1PUM= Subject key identifier: 68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C132A9212BB78702B46E34EA5197084 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201991 IP: 146.119.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2a:92:12:bb:78:70:2b:46:e3:4e:a5:19:70:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68a5023d8e021126997d7926a47701608aace3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:08:72:0b:2d:76:1b:25:db:c7:6c:82:e4: f2:2e:9e:d1:74:7b:5f:2c:c2:b9:db:94:19:cb:00: 2f:e9:2e:b5:d0:28:e5:98:23:0b:3a:53:73:f1:a4: 56:99:30:ce:34:cf:4b:3b:20:9b:d4:2c:4c:ec:a7: cc:96:1f:60:11:2a:d7:60:ea:73:91:24:b6:87:06: de:67:b0:67:69:c4:d9:73:37:ef:b3:a1:4d:08:f1: 75:1e:9a:e5:13:29:60:e5:c3:e9:8c:fc:f0:99:38: bf:ee:69:c6:88:ed:e5:10:69:56:94:82:94:0c:9b: f6:43:e4:e4:73:11:85:17:30:14:4c:92:f4:db:f1: 1c:84:76:a7:ee:8e:58:ca:60:2c:ea:7d:d8:a4:48: a0:55:21:17:79:d5:e8:2a:86:df:af:d6:0b:c6:b9: a4:8f:27:15:d5:a4:e3:cf:bd:f7:d7:a4:44:3b:d2: 25:b0:9c:04:c4:76:b3:c8:67:47:1b:68:eb:3d:cd: af:de:e8:ae:29:e7:20:94:60:d2:94:99:14:09:4f: b4:1f:1a:ff:bc:ee:8c:bb:71:d7:97:45:2f:fb:0c: 0c:26:a3:19:70:30:d1:61:b6:44:2a:b3:65:de:16: ef:bc:4c:cd:b1:4b:89:fc:8f:d9:d2:09:34:8f:9b: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.119.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201991 Signature Algorithm: sha256WithRSAEncryption 0b:41:38:a3:2b:5a:21:29:c9:f8:d8:9b:06:cd:6c:88:e6:cc: 89:bc:cf:2f:d2:b6:02:37:eb:31:55:65:7a:4e:79:dd:8e:70: 8f:c5:bc:0a:a8:57:8f:3b:24:ff:52:00:3b:87:a5:1b:50:f6: 4e:64:82:a9:27:61:1d:df:f0:b0:fa:41:90:2a:82:0c:fc:4f: c5:bb:dc:71:fd:3e:74:71:2e:60:79:35:b2:ed:31:47:48:6c: ec:06:29:d0:f6:38:86:97:a7:d3:9f:1e:10:a7:4c:c0:80:c7: b0:7a:5a:6b:f3:46:0a:5c:2a:d5:53:08:53:ec:4a:ed:41:4c: 34:72:70:45:71:6f:6d:1a:49:7c:cf:a0:56:08:45:d9:23:91: f5:85:0b:4f:fd:09:41:69:5d:62:a8:14:b0:d8:82:4a:51:67: b3:2b:a2:56:ee:72:65:84:82:77:19:6f:b7:8d:ce:14:7a:b0: 5c:0b:c4:48:91:97:20:be:e9:42:ef:83:64:21:8b:6e:b1:b4: 23:bd:4b:26:72:4a:35:a8:b7:80:26:c2:43:7b:3e:e0:ce:e4: 50:8e:84:69:a8:43:c2:15:12:8b:40:10:46:be:f4:28:b2:8c: 51:7e:ee:b7:a1:8a:1a:08:a6:0d:b4:75:ed:cc:7a:d4:dc:b2: ca:39:94:4d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8EyqSErt4cCtG406lGXCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGE1MDIzZDhlMDIxMTI2OTk3ZDc5MjZhNDc3MDE2MDhhYWNlM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD4Icgstdhsl28dsguTyLp7RdHtf LMK525QZywAv6S610CjlmCMLOlNz8aRWmTDONM9LOyCb1CxM7KfMlh9gESrXYOpz kSS2hwbeZ7BnacTZczfvs6FNCPF1HprlEylg5cPpjPzwmTi/7mnGiO3lEGlWlIKU DJv2Q+TkcxGFFzAUTJL02/EchHan7o5YymAs6n3YpEigVSEXedXoKobfr9YLxrmk jycV1aTjz73316REO9IlsJwExHazyGdHG2jrPc2v3uiuKecglGDSlJkUCU+0Hxr/ vO6Mu3HXl0Uv+wwMJqMZcDDRYbZEKrNl3hbvvEzNsUuJ/I/Z0gk0j5tGzQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGilAj2OAhEmmX15JqR3AWCKrOPHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4Lzg2MGJl Yi0yZWRiLTRjZTAtYTU1ZS04NDgxZTZjMzNlM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvODYwYmVi LTJlZGItNGNlMC1hNTVlLTg0ODFlNmMzM2UzYy8xL2FLVUNQWTRDRVNhWmZYa21w SGNCWUlxczQ4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAkncwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AxUHMA0GCSqGSIb3DQEBCwUAA4IBAQALQTijK1ohKcn42JsGzWyI5syJvM8v0rYC N+sxVWV6TnndjnCPxbwKqFePOyT/UgA7h6UbUPZOZIKpJ2Ed3/Cw+kGQKoIM/E/F u9xx/T50cS5geTWy7TFHSGzsBinQ9jiGl6fTnx4Qp0zAgMewelpr80YKXCrVUwhT 7ErtQUw0cnBFcW9tGkl8z6BWCEXZI5H1hQtP/QlBaV1iqBSw2IJKUWezK6JW7nJl hIJ3GW+3jc4UerBcC8RIkZcgvulC74NkIYtusbQjvUsmcko1qLeAJsJDez7gzuRQ joRpqEPCFRKLQBBGvvQosoxRfu63oYoaCKYNtHXtzHrU3LLKOZRN -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:36 2026 by rpki-client