This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer (raw, json) Hash identifier: mpMSO4X8J3cIASV7Qnf5GMYZgj3iIAqwZbehg1lyifE= Subject key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A372666B1FA238301B0932288C0E0A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44612 AS: 208247 IP: 45.151.86.0/23 IP: 185.214.24.0/22 IP: 2a0b:9440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:72:66:6b:1f:a2:38:30:1b:09:32:28:8c:0e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=935c42857e302feb14017301e43c39fe45e7f629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:35:ec:7a:fe:7a:9e:a4:89:75:f3:48:2c: a7:da:fc:54:3c:31:c4:ae:62:48:4c:b5:f5:30:af: 28:43:d6:72:7b:56:04:5b:fa:cf:f4:85:6f:90:d3: 83:7b:ba:64:c1:20:1f:35:4e:99:07:85:9e:9b:10: e2:40:fb:2c:27:32:6e:b5:b1:22:89:f1:7e:0a:86: ac:c2:44:96:97:14:84:8d:83:54:71:a0:5b:5d:af: 23:15:59:bb:60:55:ce:f5:e5:e6:90:11:7b:98:1b: 3b:9f:01:5c:59:1e:8f:8e:01:b4:12:3d:c4:12:83: 0b:b7:ac:22:37:89:6d:a3:e4:9f:3a:f8:d7:03:8b: 9b:89:0a:1a:49:d5:3b:1e:2e:b7:cf:c2:b9:e0:8a: b4:9a:54:4b:f4:37:41:44:78:83:70:3f:56:03:ad: 31:6b:98:45:8f:cd:91:bb:92:d3:8c:d0:d7:67:0d: 69:b3:a9:45:45:b8:dd:92:d1:23:7e:65:cb:ba:39: 8e:aa:31:8b:48:ce:77:79:a6:0a:ca:ea:7d:68:8a: f4:e4:b9:b3:34:04:c0:ad:80:ab:19:31:af:67:40: 4c:f9:ed:92:bc:a9:be:a2:f0:ef:6a:69:6a:e7:2d: de:ef:9a:44:6f:01:21:3b:ed:81:86:69:c9:11:13: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.86.0/23 185.214.24.0/22 IPv6: 2a0b:9440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44612 208247 Signature Algorithm: sha256WithRSAEncryption 76:65:ee:91:18:b8:47:fe:0c:d3:14:7c:77:7d:3d:ad:68:c5: 35:21:ad:f9:67:f8:33:49:90:4c:70:23:9e:ca:b9:14:42:33: 26:49:7c:1b:81:c6:a7:48:2e:2f:2e:0d:b1:34:96:8d:20:cc: 11:03:79:06:18:70:20:4d:9f:15:ae:b8:d8:23:80:17:7d:f0: b0:1b:b5:c4:c2:4a:bb:f2:5a:06:15:70:ef:b1:cb:9a:2f:6a: 75:67:34:5e:09:39:ff:e4:5f:37:ef:1d:a2:ee:e1:30:0c:f1: 38:d9:ee:ca:12:a9:e4:d7:e2:cb:67:c1:a6:7b:7b:fb:70:0f: 4f:69:94:07:a4:ae:be:1f:aa:a6:37:3e:2d:12:a3:07:09:0e: 00:4f:8a:a5:aa:ed:2b:ab:b4:9c:6d:4e:6d:77:70:1d:8e:da: 04:f1:37:38:50:d8:02:d7:b3:18:1c:7e:64:39:be:f6:2b:1a: 6e:23:8a:aa:64:65:49:64:cf:a2:c5:ff:21:e1:d1:0a:3f:ef: 6d:fd:94:01:de:ac:3f:15:14:85:94:79:b9:d5:90:6c:eb:97: a7:93:e1:df:c5:f5:50:cf:26:de:d0:58:88:ba:a9:b1:24:82: da:31:ae:22:ec:0c:b4:db:28:8f:98:d5:82:95:ae:df:8d:35: ba:aa:94:59 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt4o3Jmax+iODAbCTIojA4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzVjNDI4NTdlMzAyZmViMTQwMTczMDFlNDNjMzlmZTQ1ZTdmNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcg17Hr+ep6kiXXzSCyn2vxUPDHE rmJITLX1MK8oQ9Zye1YEW/rP9IVvkNODe7pkwSAfNU6ZB4WemxDiQPssJzJutbEi ifF+CoaswkSWlxSEjYNUcaBbXa8jFVm7YFXO9eXmkBF7mBs7nwFcWR6PjgG0Ej3E EoMLt6wiN4lto+SfOvjXA4ubiQoaSdU7Hi63z8K54Iq0mlRL9DdBRHiDcD9WA60x a5hFj82Ru5LTjNDXZw1ps6lFRbjdktEjfmXLujmOqjGLSM53eaYKyup9aIr05Lmz NATArYCrGTGvZ0BM+e2SvKm+ovDvamlq5y3e75pEbwEhO+2BhmnJERMe3wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzU1ZTUy OS1iODM5LTQ0NGYtODcyZC0xYmZkMTBhODg0NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNTVlNTI5 LWI4MzktNDQ0Zi04NzJkLTFiZmQxMGE4ODQ1YS8xL2sxeENoWDR3TC1zVUFYTUI1 RHc1X2tYbjlpay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBLZdWAwQCudYYMA0EAgACMAcDBQMqC5RAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCuRAIDAy13MA0GCSqGSIb3DQEBCwUAA4IB AQB2Ze6RGLhH/gzTFHx3fT2taMU1Ia35Z/gzSZBMcCOeyrkUQjMmSXwbgcanSC4v Lg2xNJaNIMwRA3kGGHAgTZ8VrrjYI4AXffCwG7XEwkq78loGFXDvscuaL2p1ZzRe CTn/5F837x2i7uEwDPE42e7KEqnk1+LLZ8Gme3v7cA9PaZQHpK6+H6qmNz4tEqMH CQ4AT4qlqu0rq7ScbU5td3AdjtoE8Tc4UNgC17MYHH5kOb72KxpuI4qqZGVJZM+i xf8h4dEKP+9t/ZQB3qw/FRSFlHm51ZBs65enk+HfxfVQzybe0FiIuqmxJILaMa4i 7Ay02yiPmNWCla7fjTW6qpRZ -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:03 2026 by rpki-client