This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer File: k1x7dikZzzbcFCY_XllV6P-jXTs.cer (raw, json) Hash identifier: OrdugV1c4aCShWRVyGzSJRSSXtmcjeW+biOwECwqZXg= Subject key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5A4639A2E09C343F556C88BE1AFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8917 IP: 91.230.214.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5a:46:39:a2:e0:9c:34:3f:55:6c:88:be:1a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:d9:d8:12:ff:07:98:18:a5:a4:4d:f0:1e: a0:31:69:80:08:1f:da:d0:cb:fb:07:ce:ce:7f:f4: aa:5c:fc:43:31:18:c8:4b:0d:8c:f5:4e:c2:94:3f: 77:1c:58:52:77:10:d7:73:cd:1b:e2:f1:b1:6c:4e: 4d:9e:dc:87:5d:17:fd:10:11:46:75:53:98:8e:d7: 24:f4:14:49:f6:5f:e5:71:58:bf:66:f0:f5:f3:0c: 8a:ee:a7:6f:88:ac:b6:ab:df:b1:78:f9:20:00:43: 43:ac:94:e6:b0:ff:a9:00:27:66:cd:ac:1f:e5:41: 2a:62:32:54:dc:ff:f4:5a:cf:de:6f:a5:e2:41:d0: 7b:94:74:36:18:29:48:5b:06:46:27:f0:68:6c:7f: a7:fa:5d:ee:d1:a8:18:07:90:6e:30:c3:60:17:41: 92:c8:bd:24:ae:1b:a1:07:f3:f4:9f:7e:ca:9c:0a: d4:e5:49:92:fd:6d:30:70:16:ff:00:b1:cf:0d:36: 73:96:72:72:b2:8b:28:91:bf:01:08:a2:a2:9a:b8: 0e:3d:46:aa:f5:de:b5:c3:35:20:a1:df:e8:17:5d: eb:0d:2a:55:bc:c5:79:7f:8e:03:79:a2:49:cb:88: 21:ba:3a:52:6a:47:a8:e8:94:3f:07:17:ce:e3:a1: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.214.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8917 Signature Algorithm: sha256WithRSAEncryption 8b:d7:d6:18:21:e8:6d:15:73:4f:d7:3a:c3:05:67:54:31:82: 59:44:e7:c6:2f:85:41:e2:98:e6:76:59:89:69:32:f7:7b:19: b0:21:c2:28:e5:5e:54:f8:32:c5:44:79:ab:cd:3f:f8:f0:97: 2c:d6:ac:eb:c6:70:91:81:fa:56:f6:e5:76:fb:70:a3:03:6d: 28:02:1d:2a:f3:9a:c1:cb:48:7d:bf:93:27:e0:7b:6b:48:52: 9d:27:ed:55:66:95:89:23:25:e2:99:bc:68:1c:31:40:d9:78: d8:e2:8a:f4:30:97:ea:42:ac:b9:08:29:cc:29:2b:a7:5d:86: fd:67:92:a1:1c:8d:e1:ce:b4:3c:8f:b5:e5:32:e3:e5:e2:07: 89:66:0f:96:0c:f7:2e:54:7d:23:5f:a4:30:55:35:e1:35:92: b3:52:2b:88:db:12:69:4c:a1:00:e9:67:4f:89:f4:22:77:fc: 67:dd:42:df:8d:07:2f:bd:e8:f0:a0:60:88:1c:56:f1:b7:ca: 98:b7:4b:b4:54:8b:75:df:75:cc:ca:d5:96:c2:4d:72:3a:f3: 95:26:65:02:0b:bc:70:68:ea:2c:32:3e:e5:e2:5a:ea:e4:61: 71:bc:86:f7:45:09:db:bc:3c:d9:3c:49:5d:bf:20:38:9f:2e: 49:09:15:65 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt261pGOaLgnDQ/VWyIvhr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzVjN2I3NjI5MTljZjM2ZGMxNDI2M2Y1ZTU5NTVlOGZmYTM1ZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzTZ2BL/B5gYpaRN8B6gMWmACB/a 0Mv7B87Of/SqXPxDMRjISw2M9U7ClD93HFhSdxDXc80b4vGxbE5NntyHXRf9EBFG dVOYjtck9BRJ9l/lcVi/ZvD18wyK7qdviKy2q9+xePkgAENDrJTmsP+pACdmzawf 5UEqYjJU3P/0Ws/eb6XiQdB7lHQ2GClIWwZGJ/BobH+n+l3u0agYB5BuMMNgF0GS yL0krhuhB/P0n37KnArU5UmS/W0wcBb/ALHPDTZzlnJysosokb8BCKKimrgOPUaq 9d61wzUgod/oF13rDSpVvMV5f44DeaJJy4ghujpSakeo6JQ/BxfO46E3swIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJNce3YpGc823BQmP15ZVej/o107MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2UwMDQy Yy1lYmQyLTRhOGQtOWU2Ny1hZWQxNjQ4MzJhOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZTAwNDJj LWViZDItNGE4ZC05ZTY3LWFlZDE2NDgzMmE4Yi8xL2sxeDdkaWtaenpiY0ZDWV9Y bGxWNlAtalhUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+bWMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AiLVMA0GCSqGSIb3DQEBCwUAA4IBAQCL19YYIehtFXNP1zrDBWdUMYJZROfGL4VB 4pjmdlmJaTL3exmwIcIo5V5U+DLFRHmrzT/48Jcs1qzrxnCRgfpW9uV2+3CjA20o Ah0q85rBy0h9v5Mn4HtrSFKdJ+1VZpWJIyXimbxoHDFA2XjY4or0MJfqQqy5CCnM KSunXYb9Z5KhHI3hzrQ8j7XlMuPl4geJZg+WDPcuVH0jX6QwVTXhNZKzUiuI2xJp TKEA6WdPifQid/xn3ULfjQcvvejwoGCIHFbxt8qYt0u0VIt133XMytWWwk1yOvOV JmUCC7xwaOosMj7l4lrq5GFxvIb3RQnbvDzZPEldvyA4ny5JCRVl -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:41 2026 by rpki-client