This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer File: cIKkpfKWFe2f7k9nURSF40z3EuA.cer (raw, json) Hash identifier: haVpJaZNMeYnYGmTOTSN5WTZnkNdQD05KzZOFm+qOUg= Subject key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA725632BD477BB34C016C162C806D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214481 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:25:63:2b:d4:77:bb:34:c0:16:c1:62:c8:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0b:51:4c:bb:84:24:ce:c6:4b:06:e9:6a:62: e0:51:3f:f2:6b:3f:7a:21:e8:32:3c:d7:06:98:a6: e3:63:bb:e5:6b:d9:f4:10:cd:fb:f8:e3:b5:47:30: 78:09:1d:3d:24:dd:f1:a2:98:b2:09:19:91:7a:7c: c8:32:e3:37:49:40:48:c7:4a:f3:b0:56:88:01:63: 2d:bd:ad:5a:a4:65:3d:a7:61:4f:02:fd:c7:c5:c7: 07:43:0d:b3:b2:d4:44:83:84:38:27:65:1a:3c:7c: e7:78:44:be:e1:44:95:8b:6a:3e:a1:99:bb:0c:df: 49:6c:f8:b9:16:7b:84:4b:57:45:6f:06:ee:16:e2: b0:0f:ed:61:d7:ac:68:8e:11:d7:1f:91:b4:0b:3b: 66:41:49:9a:40:62:82:f0:28:26:62:49:75:6d:a3: 16:bb:c0:e7:c4:e5:12:1c:85:9f:47:f2:21:78:2a: e2:61:e6:d5:c8:f7:28:ea:c9:d2:cd:0a:89:b8:c3: 3d:d5:8e:f1:d7:eb:a8:a1:f2:64:83:e9:03:c9:a3: 23:41:34:2a:57:42:11:fa:a4:e4:9f:b4:ba:f4:7d: 1b:26:d9:bc:2b:0a:9e:fe:4e:49:4c:92:03:9c:fc: 9f:63:8f:37:8a:11:4d:fa:46:ed:b6:04:68:ee:95: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214481 Signature Algorithm: sha256WithRSAEncryption 34:7e:8d:25:d6:41:38:f0:5d:9e:0d:07:67:e4:77:8c:d0:b7: ee:e7:f7:76:cb:f2:c6:f7:e7:cd:82:98:71:de:42:45:b8:ae: 1d:75:6f:b4:c1:46:2d:3c:e0:96:d9:d3:59:a8:c8:c5:ea:c7: 54:45:4f:24:31:bf:06:4d:ff:54:e3:76:ea:cb:5a:92:9d:ba: b4:6d:87:50:2f:56:05:d4:7b:cc:fb:6e:aa:0b:74:75:57:25: 27:e8:ca:04:71:97:2f:7b:8b:bf:e5:24:8e:8e:0f:07:cd:01: ad:c8:f7:85:72:ec:d4:e2:5a:21:b7:a4:11:a8:2e:19:8a:66: b6:6c:96:46:7c:0b:1c:04:63:cd:be:44:c7:9e:c6:90:b5:e1: e1:cc:30:96:b6:9a:00:7a:3c:b4:ac:d4:5d:1a:c7:7d:f0:ef: f4:2f:34:de:bf:f3:25:84:ac:b5:12:f0:af:20:02:56:6f:48: a8:ce:3a:65:ee:67:ab:8f:48:31:bb:18:9d:db:43:1e:b6:b3: 23:4d:5a:d8:f6:88:25:08:67:84:e0:55:31:b7:7a:9e:65:88: e9:49:f4:6f:be:7f:ac:aa:da:9c:be:30:a3:1e:a6:8a:5f:1e: e1:4c:e4:83:a6:d1:2c:4f:31:8a:b5:c7:20:61:32:dd:d5:53: 9b:ce:58:d5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+pyVjK9R3uzTAFsFiyAbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDgyYTRhNWYyOTYxNWVkOWZlZTRmNjc1MTE0ODVlMzRjZjcxMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QtRTLuEJM7GSwbpamLgUT/yaz96 IegyPNcGmKbjY7vla9n0EM37+OO1RzB4CR09JN3xopiyCRmRenzIMuM3SUBIx0rz sFaIAWMtva1apGU9p2FPAv3HxccHQw2zstREg4Q4J2UaPHzneES+4USVi2o+oZm7 DN9JbPi5FnuES1dFbwbuFuKwD+1h16xojhHXH5G0CztmQUmaQGKC8CgmYkl1baMW u8DnxOUSHIWfR/IheCriYebVyPco6snSzQqJuMM91Y7x1+uoofJkg+kDyaMjQTQq V0IR+qTkn7S69H0bJtm8Kwqe/k5JTJIDnPyfY483ihFN+kbttgRo7pWJ/QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHCCpKXylhXtn+5PZ1EUheNM9xLgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzdiMjg4 NS0zY2YzLTQzNjctYjY0YS05OWUzNWM3MDk0ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvN2IyODg1 LTNjZjMtNDM2Ny1iNjRhLTk5ZTM1YzcwOTQ4Ni8xL2NJS2twZktXRmUyZjdrOW5V UlNGNDB6M0V1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNF0TANBgkqhkiG9w0BAQsFAAOCAQEANH6NJdZBOPBd ng0HZ+R3jNC37uf3dsvyxvfnzYKYcd5CRbiuHXVvtMFGLTzgltnTWajIxerHVEVP JDG/Bk3/VON26stakp26tG2HUC9WBdR7zPtuqgt0dVclJ+jKBHGXL3uLv+Ukjo4P B80Brcj3hXLs1OJaIbekEaguGYpmtmyWRnwLHARjzb5Ex57GkLXh4cwwlraaAHo8 tKzUXRrHffDv9C803r/zJYSstRLwryACVm9IqM46Ze5nq49IMbsYndtDHrazI01a 2PaIJQhnhOBVMbd6nmWI6Un0b75/rKranL4wox6mil8e4Uzkg6bRLE8xirXHIGEy 3dVTm85Y1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:46 2026 by rpki-client