This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer File: dK68FUpWyDAly9hkGprDFctVHAY.cer (raw, json) Hash identifier: iMRLLffSkM1hVtzFD3RQ2lmevLSDV0MkH9o+7tLS82U= Subject key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2DAF9839FE01D1F44479C0BCED923 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.15.20.0/23 IP: 45.15.23.0/24 IP: 194.53.136.0/23 IP: 2a0e:1d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:da:f9:83:9f:e0:1d:1f:44:47:9c:0b:ce:d9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74aebc154a56c83025cbd8641a9ac315cb551c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:d7:34:28:73:11:03:af:ad:97:e3:ae:ed: 90:a9:e3:b3:3c:12:34:06:8a:31:0a:c0:4b:35:4b: 56:6b:5b:d3:33:63:66:5d:8c:aa:38:74:ed:5f:a1: 01:00:51:31:08:49:4d:64:1f:1d:95:70:92:96:d6: b5:c0:a4:b2:b0:a1:4b:28:09:8a:34:65:d9:36:a5: 96:03:1b:b1:96:5c:5d:23:5f:2e:02:ef:e6:54:b4: d1:fe:91:81:a0:0e:c1:1f:21:04:63:02:91:b3:7c: 2e:2d:3b:b6:1c:96:60:45:4e:1a:e9:1c:f6:cb:21: 48:e3:ea:9f:1d:09:38:02:ea:86:e2:63:ac:09:e5: bc:08:b6:b3:c7:b3:d9:31:cf:10:15:13:c5:79:7d: 12:10:90:ad:81:88:9b:af:34:de:d2:81:7e:be:45: 97:25:31:57:c3:c2:78:ca:b0:a0:10:1d:04:0a:4b: 10:0c:20:81:98:14:d1:9e:8f:83:f5:b4:a4:77:1d: 2f:2b:b2:6c:84:b8:88:ab:62:16:f6:8c:28:13:45: e4:c3:03:86:c3:d3:2d:9b:f2:1e:d1:b8:ce:ec:ac: 2f:26:29:40:38:b9:aa:c6:58:83:87:a8:a2:ce:74: 0c:07:05:4d:52:94:8a:50:3b:da:4e:1d:06:c8:9c: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.20.0/23 45.15.23.0/24 194.53.136.0/23 IPv6: 2a0e:1d80::/29 Signature Algorithm: sha256WithRSAEncryption 96:f4:bd:11:5c:27:91:80:7b:32:44:5c:98:3f:8f:9a:99:27: ad:af:68:78:e7:1d:6c:5c:71:25:14:ff:1f:0c:32:99:b5:5c: 59:81:6e:81:f7:eb:67:83:64:b5:d0:f6:e5:69:c9:9f:4b:fa: f2:09:28:f0:13:44:47:da:a0:61:98:3b:10:f6:cb:bc:b1:04: f4:ad:83:50:02:35:8a:b0:85:5a:4c:cc:44:9a:ae:6a:35:6b: 69:db:b0:e3:2f:87:39:9d:c0:4d:f9:44:4b:eb:0d:99:f1:b0: 1c:d4:7e:a5:70:41:23:16:48:e1:32:70:df:52:3d:69:c3:d3: 62:0f:49:a2:2b:80:34:22:29:d4:59:ec:35:b5:5e:3e:08:f3: ca:4f:87:bf:df:5b:b1:6f:70:d9:1c:7d:86:70:50:9a:46:11: 6c:62:35:f9:a1:3e:44:7d:28:9d:d3:c6:ec:a1:49:51:c8:ef: 40:19:63:93:70:d2:94:80:6b:fa:05:ea:89:99:b7:8b:fa:33: 28:4b:d2:d5:dc:5c:d6:08:36:b2:32:7f:da:0c:41:8b:c0:4d: c9:2d:d7:05:1f:e9:c3:41:2a:c5:dd:27:1c:ab:0b:53:6e:9c: ad:8d:8d:8d:10:3e:0c:44:21:40:42:99:86:23:ba:0c:05:34: 4d:b9:1d:5b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4otr5g5/gHR9ER5wLztkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGFlYmMxNTRhNTZjODMwMjVjYmQ4NjQxYTlhYzMxNWNiNTUxYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R/XNChzEQOvrZfjru2QqeOzPBI0 BooxCsBLNUtWa1vTM2NmXYyqOHTtX6EBAFExCElNZB8dlXCSlta1wKSysKFLKAmK NGXZNqWWAxuxllxdI18uAu/mVLTR/pGBoA7BHyEEYwKRs3wuLTu2HJZgRU4a6Rz2 yyFI4+qfHQk4AuqG4mOsCeW8CLazx7PZMc8QFRPFeX0SEJCtgYibrzTe0oF+vkWX JTFXw8J4yrCgEB0ECksQDCCBmBTRno+D9bSkdx0vK7JshLiIq2IW9owoE0XkwwOG w9Mtm/Ie0bjO7KwvJilAOLmqxliDh6iiznQMBwVNUpSKUDvaTh0GyJxPGQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFHSuvBVKVsgwJcvYZBqawxXLVRwGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzZkZTdh MC00MDczLTQyNzItYmY0NC0wN2ExZDY1NTQ4YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNmRlN2Ew LTQwNzMtNDI3Mi1iZjQ0LTA3YTFkNjU1NDhiYS8xL2RLNjhGVXBXeURBbHk5aGtH cHJERmN0VkhBWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBLQ8UAwQALQ8XAwQBwjWIMA0EAgACMAcDBQMq Dh2AMA0GCSqGSIb3DQEBCwUAA4IBAQCW9L0RXCeRgHsyRFyYP4+amSetr2h45x1s XHElFP8fDDKZtVxZgW6B9+tng2S10PblacmfS/ryCSjwE0RH2qBhmDsQ9su8sQT0 rYNQAjWKsIVaTMxEmq5qNWtp27DjL4c5ncBN+URL6w2Z8bAc1H6lcEEjFkjhMnDf Uj1pw9NiD0miK4A0IinUWew1tV4+CPPKT4e/31uxb3DZHH2GcFCaRhFsYjX5oT5E fSid08bsoUlRyO9AGWOTcNKUgGv6BeqJmbeL+jMoS9LV3FzWCDayMn/aDEGLwE3J LdcFH+nDQSrF3SccqwtTbpytjY2NED4MRCFAQpmGI7oMBTRNuR1b -----END CERTIFICATE-----Generated at Sun Jan 18 09:50:35 2026 by rpki-client