This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer File: k059UV3emgPC3Ic4mi_KTn1YxOw.cer (raw, json) Hash identifier: iVlQ5wuKVJxix7WcwlDGr64aa6Dwf/hpe7FOpXmdOKg= Subject key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791010999949D5866DFF1A36C4655825 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202443 IP: 194.34.168.0/22 IP: 2a0c:bac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:10:99:99:49:d5:86:6d:ff:1a:36:c4:65:58:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:95:8b:b7:32:f3:42:9c:a4:75:00:d4:9a: 9e:d0:7d:7a:85:8c:ed:e1:04:00:64:8e:ee:2e:4a: f0:37:e7:eb:90:09:5d:f1:b2:36:56:71:14:0d:d7: 8a:b0:9c:73:9e:d4:e5:cb:07:76:cd:d1:4b:aa:9f: 37:c7:77:d3:a5:d5:e4:04:a3:3f:c8:ce:49:37:f6: 83:5a:fb:9a:2b:cb:8c:18:f9:d9:cd:32:fb:4b:8f: 1d:a8:c4:61:c2:98:a6:be:0f:45:97:4a:df:11:86: 5c:a8:c8:de:df:3a:64:36:cc:0e:97:27:8b:3c:2f: 1e:3b:f4:cf:e6:a6:93:b1:c4:59:d5:58:00:61:b1: 98:7e:16:aa:84:7a:97:7a:91:d8:1f:92:e1:dc:1f: d8:47:83:80:1f:05:77:9b:3a:f6:71:7b:d0:6b:b4: 05:bb:7d:c9:51:e5:30:37:ce:4b:28:68:46:8b:34: c2:98:b7:f1:f2:87:08:08:35:0c:a9:af:19:47:a9: 0e:b1:fd:85:6a:8e:a1:9d:83:48:37:ef:b2:0e:e5: fc:43:fd:8a:7e:3e:c8:aa:e4:da:5e:24:9b:db:33: ef:28:1a:e6:66:61:bf:c7:8e:e6:56:2e:0b:c8:d9: 7f:5e:3e:b3:1b:80:23:5a:2d:28:5f:11:ad:55:56: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.168.0/22 IPv6: 2a0c:bac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202443 Signature Algorithm: sha256WithRSAEncryption 67:d2:38:10:fd:f0:32:af:35:3a:36:8b:dc:4e:78:21:e4:1a: 90:d2:21:17:d0:a5:98:bc:0f:97:74:25:46:7b:35:f2:76:22: 0b:05:25:7a:c3:58:07:68:9c:ab:6a:ad:33:e2:81:91:77:b7: 8e:c2:ac:46:de:ce:90:90:db:f9:08:08:0f:92:f1:a8:b3:75: 60:2b:90:6f:9c:6a:6d:b0:12:48:50:e2:bb:a7:ba:bf:32:a0: 2c:c5:fa:d2:d7:fa:d4:27:f1:6b:a4:90:20:ad:f5:68:90:0c: 5a:db:d5:81:18:f6:4e:d8:12:b7:e8:f6:eb:a6:81:4c:0f:78: 04:96:b7:6b:23:45:3f:b4:ae:a2:bd:9a:d2:56:13:fa:0d:29: 38:c4:eb:d8:e8:2a:96:50:7f:27:9f:a5:9b:32:ce:e2:76:37: 85:c5:33:31:5b:d1:07:e8:03:7d:bf:41:d3:51:7d:e9:7a:49: 1f:d7:dc:2f:e4:93:5e:da:15:60:8d:b6:56:0a:7b:b5:ca:b7: 49:0c:17:61:4f:3d:00:9e:91:ce:41:84:5c:b8:80:84:d8:f3: fc:5d:91:f4:99:9d:7d:e0:0b:04:b6:fa:c0:db:19:3a:ae:1a: ad:d3:05:73:aa:15:e9:bc:42:58:ea:1e:22:6d:f3:39:53:0f: 36:2f:a7:70 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EBCZmUnVhm3/GjbEZVglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzRlN2Q1MTVkZGU5YTAzYzJkYzg3Mzg5YTJmY2E0ZTdkNThjNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcaVi7cy80KcpHUA1Jqe0H16hYzt 4QQAZI7uLkrwN+frkAld8bI2VnEUDdeKsJxzntTlywd2zdFLqp83x3fTpdXkBKM/ yM5JN/aDWvuaK8uMGPnZzTL7S48dqMRhwpimvg9Fl0rfEYZcqMje3zpkNswOlyeL PC8eO/TP5qaTscRZ1VgAYbGYfhaqhHqXepHYH5Lh3B/YR4OAHwV3mzr2cXvQa7QF u33JUeUwN85LKGhGizTCmLfx8ocICDUMqa8ZR6kOsf2Fao6hnYNIN++yDuX8Q/2K fj7IquTaXiSb2zPvKBrmZmG/x47mVi4LyNl/Xj6zG4AjWi0oXxGtVVaDHQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJNOfVFd3poDwtyHOJovyk59WMTsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzc1OTMy Ny1jYzlmLTRkNmQtYWM3OS05Y2I4ZDAyM2NjMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNzU5MzI3 LWNjOWYtNGQ2ZC1hYzc5LTljYjhkMDIzY2MwYi8xL2swNTlVVjNlbWdQQzNJYzRt aV9LVG4xWXhPdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwiKoMA0EAgACMAcDBQMqDLrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWyzANBgkqhkiG9w0BAQsFAAOCAQEAZ9I4EP3wMq81 OjaL3E54IeQakNIhF9ClmLwPl3QlRns18nYiCwUlesNYB2icq2qtM+KBkXe3jsKs Rt7OkJDb+QgID5LxqLN1YCuQb5xqbbASSFDiu6e6vzKgLMX60tf61Cfxa6SQIK31 aJAMWtvVgRj2TtgSt+j266aBTA94BJa3ayNFP7Suor2a0lYT+g0pOMTr2OgqllB/ J5+lmzLO4nY3hcUzMVvRB+gDfb9B01F96XpJH9fcL+STXtoVYI22Vgp7tcq3SQwX YU89AJ6RzkGEXLiAhNjz/F2R9JmdfeALBLb6wNsZOq4ardMFc6oV6bxCWOoeIm3z OVMPNi+ncA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:21 2026 by rpki-client