This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer File: bKlE6qnH9tRXQG8ULG4oz1rMasg.cer (raw, json) Hash identifier: 5db+0h/3PWLVbw1Dknp9W8MReHB+p5gjZTWjvLyVGPQ= Subject key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED328A7946E7F6720671AB8E392749 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197759 IP: 193.9.249.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:32:8a:79:46:e7:f6:72:06:71:ab:8e:39:27:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:07:d5:c4:f9:ad:21:fe:15:df:ea:8b:70: 60:4c:ef:47:19:de:f4:77:9f:37:bc:69:9f:96:55: 92:b3:27:eb:9b:bc:a1:a4:75:91:bc:f0:55:e0:6b: 15:66:e4:12:d4:eb:46:af:7b:47:88:87:01:76:6e: 7d:f7:07:a3:06:a5:fc:72:99:eb:a6:9f:c5:fa:ad: 26:86:b4:e9:e6:51:f0:8b:97:cc:a1:50:a2:75:22: f6:74:f9:6d:0a:97:e4:91:46:90:47:70:d0:c2:f1: 24:9c:fd:0e:8b:51:e8:cd:7e:9c:2f:ab:5a:e1:2f: 14:8c:4b:b3:f9:6d:db:70:42:d8:60:42:64:3a:13: 6e:87:7c:6d:16:5c:70:de:15:96:5d:ad:c7:8d:d8: 16:1a:dc:70:28:8b:fb:8d:01:99:5c:00:d0:e7:5b: f4:ee:f1:88:4f:40:bb:5d:50:dd:5c:a9:5e:f3:db: a7:1a:2c:27:9b:f8:8f:72:6c:f6:9a:bc:69:95:e5: 4c:ef:57:80:47:21:d4:d7:6b:7b:6b:0a:c2:b6:9d: e7:d3:c7:6f:59:6c:91:f3:46:2e:ac:6f:27:dc:d3: 64:b5:36:06:62:64:f5:9b:c2:a4:96:34:ad:8b:8a: b6:86:3c:e4:c7:21:40:48:67:1b:0c:c8:d8:c3:40: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.249.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197759 Signature Algorithm: sha256WithRSAEncryption 77:47:42:2e:2d:12:68:95:58:19:a3:95:63:c7:1a:d1:18:14: 0f:8c:e0:2f:0e:ca:65:76:f8:a8:66:ed:76:1b:6e:64:f3:b2: 75:2b:2f:c2:1f:0c:8e:3b:74:e2:a6:e4:ef:8d:21:29:8c:37: 09:df:22:32:45:fc:2d:29:62:08:94:17:aa:cb:2f:5c:25:42: 2a:d9:46:b0:81:6b:f9:b4:5a:59:94:fe:63:2d:ef:eb:6a:c2: 38:08:81:fc:58:bb:5f:f6:d3:6b:8d:de:77:c2:c4:c3:97:39: 81:7a:c1:3d:20:db:41:d6:86:57:4b:93:c0:ce:48:7a:67:f3: e2:01:38:4d:08:17:de:8e:c7:95:3c:94:8f:44:99:3e:ff:19: f2:b9:45:a3:be:d8:e4:0f:17:c2:48:a5:b0:f8:ce:2d:1c:ad: 42:10:9d:a4:b9:d9:67:f4:e0:43:40:77:3d:0d:75:43:f2:35: c7:b4:57:1b:f1:a0:ff:9a:07:b0:c6:96:9c:7a:d6:c7:fe:d3: 5f:38:1b:d5:cb:fd:f7:ab:fe:33:0a:b0:78:41:a6:62:85:5a: 38:5e:06:f1:cb:47:81:a7:74:54:00:6e:0a:02:18:96:d5:e9: 88:cb:31:b9:f2:da:eb:c8:ae:c9:73:a4:95:79:40:a2:29:d0: 49:1b:07:ac -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57TKKeUbn9nIGcauOOSdJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2E5NDRlYWE5YzdmNmQ0NTc0MDZmMTQyYzZlMjhjZjVhY2M2YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSMH1cT5rSH+Fd/qi3BgTO9HGd70 d583vGmfllWSsyfrm7yhpHWRvPBV4GsVZuQS1OtGr3tHiIcBdm599wejBqX8cpnr pp/F+q0mhrTp5lHwi5fMoVCidSL2dPltCpfkkUaQR3DQwvEknP0Oi1HozX6cL6ta 4S8UjEuz+W3bcELYYEJkOhNuh3xtFlxw3hWWXa3HjdgWGtxwKIv7jQGZXADQ51v0 7vGIT0C7XVDdXKle89unGiwnm/iPcmz2mrxpleVM71eARyHU12t7awrCtp3n08dv WWyR80YurG8n3NNktTYGYmT1m8KkljSti4q2hjzkxyFASGcbDMjYw0D2GQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGypROqpx/bUV0BvFCxuKM9azGrIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzBlZGMw Yi03ZWJiLTQ3MGEtYjA1Ni0zZGU0NGZjOGIzYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMGVkYzBi LTdlYmItNDcwYS1iMDU2LTNkZTQ0ZmM4YjNiNS8xL2JLbEU2cW5IOXRSWFFHOFVM RzRvejFyTWFzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQn5MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMEfzANBgkqhkiG9w0BAQsFAAOCAQEAd0dCLi0SaJVYGaOVY8ca0RgUD4zgLw7K ZXb4qGbtdhtuZPOydSsvwh8Mjjt04qbk740hKYw3Cd8iMkX8LSliCJQXqssvXCVC KtlGsIFr+bRaWZT+Yy3v62rCOAiB/Fi7X/bTa43ed8LEw5c5gXrBPSDbQdaGV0uT wM5Iemfz4gE4TQgX3o7HlTyUj0SZPv8Z8rlFo77Y5A8XwkilsPjOLRytQhCdpLnZ Z/TgQ0B3PQ11Q/I1x7RXG/Gg/5oHsMaWnHrWx/7TXzgb1cv996v+MwqweEGmYoVa OF4G8ctHgad0VABuCgIYltXpiMsxufLa68iuyXOklXlAoinQSRsHrA== -----END CERTIFICATE-----Generated at Mon Jan 19 18:19:49 2026 by rpki-client