This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer (raw, json) Hash identifier: Fk6v2+wYjHHUdw+bZWcchNUgDOtZ98agyXkKNrHaqHs= Subject key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37A1EB65CAA74D88E372B4D11AF456 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215706 IP: 95.131.203.0/24 IP: 195.234.94.0/24 IP: 2a13:9c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a1:eb:65:ca:a7:4d:88:e3:72:b4:d1:1a:f4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=711280b1338f12fc6f621c4c90560c7bc5908961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:d1:89:a3:38:0d:c0:df:3f:37:b4:26:c7: ad:2f:7e:af:5b:05:1d:67:ad:f3:98:ce:16:6e:3a: 78:8c:9f:90:84:57:5b:04:1a:00:84:0d:71:55:7a: 27:7a:4e:d3:d0:37:06:62:69:2c:eb:fe:e9:a9:52: 96:7b:d2:7f:cc:b6:8b:7d:56:d8:06:11:e7:27:16: 60:11:45:7b:cf:6d:25:66:21:71:53:e4:ce:02:ee: 6d:17:86:0b:65:cf:3a:2f:ed:3d:d6:41:4c:a5:91: 8e:09:3f:40:bb:32:7b:96:2b:71:9c:b8:7e:04:97: 1b:8c:8c:26:d5:a1:51:d6:81:2c:04:5c:5b:b4:c1: 54:23:ae:f9:47:7d:a0:82:30:96:ce:ae:26:f1:cf: bd:62:6a:bb:5b:15:2a:06:e8:b3:bc:dd:58:35:d7: 19:da:ca:86:60:c6:52:49:6f:f1:b0:5d:94:f8:dc: 48:65:c4:7d:fb:6e:3e:5b:37:8d:1c:8d:b4:8e:40: a5:31:25:8b:d4:2f:78:d9:ba:c6:30:e8:96:ee:14: 5c:9f:f0:d2:10:bd:b7:b0:db:ac:3e:a4:71:30:34: 78:16:04:59:44:76:db:65:d6:5a:40:02:c2:1a:de: e1:58:ff:4f:d4:0b:5c:0b:8f:03:7c:21:a7:27:df: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.203.0/24 195.234.94.0/24 IPv6: 2a13:9c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215706 Signature Algorithm: sha256WithRSAEncryption ad:d3:8b:5d:d3:6f:74:32:7e:ed:35:6b:f3:c4:f8:92:e2:69: 39:11:55:50:d6:44:f4:7d:2c:a3:6a:b1:dc:b0:d0:d3:26:74: 10:f4:e0:bf:42:12:09:e5:a5:a6:52:7c:e0:41:d4:92:d0:bc: be:91:ed:1f:e2:35:98:6f:93:e9:82:e9:04:8b:5a:fa:18:1a: af:1d:53:21:4d:e2:ed:1d:ad:37:f2:4c:61:71:1d:6e:28:54: 13:af:19:3f:ca:d5:32:7d:39:be:ff:7b:b7:70:88:1b:6c:e5: 84:9a:8c:ce:72:4f:80:cd:2c:68:11:8d:21:41:66:03:38:f0: 54:99:1f:73:28:64:a1:c2:33:67:bd:2c:4b:75:10:42:c2:09: a2:a8:57:a1:88:3d:05:50:f3:09:d7:f8:26:7b:d3:fb:46:7e: b2:3f:9e:72:ba:c2:66:89:87:c5:07:7e:f7:41:d6:ee:0e:27: b1:96:d6:47:22:6d:31:a2:a4:b5:39:8c:43:fe:0b:39:50:33: ad:ad:24:6a:90:e9:4a:b6:c2:19:00:c3:10:6c:ff:f5:80:4d: 1b:c4:8a:0b:35:38:c5:c3:94:4f:bf:34:d4:cb:53:7f:02:3b: 19:02:6f:27:cc:be:ef:1c:24:36:ae:e8:34:f5:d9:0d:0e:3e: a6:fd:28:25 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+N6HrZcqnTYjjcrTRGvRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTEyODBiMTMzOGYxMmZjNmY2MjFjNGM5MDU2MGM3YmM1OTA4OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor7RiaM4DcDfPze0JsetL36vWwUd Z63zmM4Wbjp4jJ+QhFdbBBoAhA1xVXonek7T0DcGYmks6/7pqVKWe9J/zLaLfVbY BhHnJxZgEUV7z20lZiFxU+TOAu5tF4YLZc86L+091kFMpZGOCT9AuzJ7litxnLh+ BJcbjIwm1aFR1oEsBFxbtMFUI675R32ggjCWzq4m8c+9Ymq7WxUqBuizvN1YNdcZ 2sqGYMZSSW/xsF2U+NxIZcR9+24+WzeNHI20jkClMSWL1C942brGMOiW7hRcn/DS EL23sNusPqRxMDR4FgRZRHbbZdZaQALCGt7hWP9P1AtcC48DfCGnJ9/pGQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHESgLEzjxL8b2IcTJBWDHvFkIlhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2NlMTEz ZC1jOTIzLTQzZjQtOTcwOC1iYjQxN2VjNjQ5YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvY2UxMTNk LWM5MjMtNDNmNC05NzA4LWJiNDE3ZWM2NDlhYi8xL2NSS0FzVE9QRXZ4dlloeE1r RllNZThXUWlXRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAX4PLAwQAw+peMA0EAgACMAcDBQMqE5wAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKmjANBgkqhkiG9w0BAQsFAAOCAQEArdOL XdNvdDJ+7TVr88T4kuJpORFVUNZE9H0so2qx3LDQ0yZ0EPTgv0ISCeWlplJ84EHU ktC8vpHtH+I1mG+T6YLpBIta+hgarx1TIU3i7R2tN/JMYXEdbihUE68ZP8rVMn05 vv97t3CIG2zlhJqMznJPgM0saBGNIUFmAzjwVJkfcyhkocIzZ70sS3UQQsIJoqhX oYg9BVDzCdf4JnvT+0Z+sj+ecrrCZomHxQd+90HW7g4nsZbWRyJtMaKktTmMQ/4L OVAzra0kapDpSrbCGQDDEGz/9YBNG8SKCzU4xcOUT7801MtTfwI7GQJvJ8y+7xwk Nq7oNPXZDQ4+pv0oJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:06 2026 by rpki-client