This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer File: k4KIfhkEky8RhsLDHGqS_17GQ4c.cer (raw, json) Hash identifier: kqHb5rcqKwuTH1HzyPhtUU6ue8POHxS6+uhgwScSU8M= Subject key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D94FEB87CDD39FFA26E0190BFA92830 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 07:21:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24994 IP: 89.31.72.0/21 IP: 185.5.208.0/22 IP: 194.242.61.0/24 IP: 212.54.224.0/21 IP: 2a03:2700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:94:fe:b8:7c:dd:39:ff:a2:6e:01:90:bf:a9:28:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 07:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9382887e1904932f1186c2c31c6a92ff5ec64387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:b0:7a:ad:c0:76:01:99:f2:ff:42:66:a2: f3:8a:1f:e1:03:91:c1:48:f5:4d:54:02:81:62:69: 7c:34:17:42:65:81:d9:94:16:63:06:2e:8a:82:55: 3d:9f:df:a0:66:59:c2:33:62:c1:c7:0b:84:0d:3e: 4b:ab:68:d2:92:66:28:52:cc:7d:1b:86:c4:e2:a4: 86:09:8b:83:a2:1d:43:5d:d1:2a:95:db:ce:59:ec: 1e:4c:a7:88:cf:ed:0c:4e:d2:15:7a:b2:af:81:81: 39:d1:fc:a0:26:44:33:29:1c:e0:01:fe:be:ad:d7: 85:ec:8f:0d:11:4a:82:46:36:a5:28:3f:29:12:b1: 8d:bc:d7:fe:4e:73:04:2c:65:2f:f4:5f:f5:3d:d3: 2b:84:13:95:0a:7e:72:e7:1e:d7:f1:38:e4:09:c8: 5d:37:70:70:84:6c:39:2f:71:f2:58:19:4c:c1:37: 6d:ab:89:75:3b:ac:ba:55:41:a0:eb:69:8a:c8:b0: 50:bf:1d:ae:7d:77:a3:af:e3:06:9f:55:86:ef:4c: 97:82:e0:06:3d:c6:4c:aa:9f:16:73:61:72:1a:ff: 30:f0:17:ca:e5:3c:30:6e:e7:c2:9e:32:e7:f8:62: 0c:81:c9:da:4f:94:f2:8b:91:3c:84:25:e7:13:9a: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.72.0/21 185.5.208.0/22 194.242.61.0/24 212.54.224.0/21 IPv6: 2a03:2700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24994 Signature Algorithm: sha256WithRSAEncryption 8a:8d:47:d5:0d:9b:33:ab:87:f5:88:a7:e9:28:4b:cb:ba:7b: 7a:b5:fb:65:58:29:8d:4c:cf:2d:b1:e2:61:e0:46:17:0a:ca: c4:0c:7a:a6:b9:65:de:75:39:4d:cb:06:ee:ae:46:07:69:7d: d8:7d:9c:7e:16:ec:c1:7c:d5:5e:c5:c9:bb:d9:65:0a:ac:5e: 85:5f:d7:d5:0a:4d:ca:8c:23:ec:ee:bd:4b:87:d2:ab:4c:e3: 8a:23:64:07:b7:4d:1d:a2:4d:0c:a0:dd:94:03:90:dd:36:98: 3f:a4:b7:18:5e:82:29:97:ec:77:58:b3:8f:d0:52:b6:f3:65: cc:48:4b:c6:f0:18:38:56:c7:1d:4d:9f:d5:da:64:3f:8a:23: 38:d7:cd:3c:c1:49:de:21:79:c0:56:90:b0:cd:78:55:aa:e3: 42:e0:3f:66:50:f7:ad:ef:09:eb:85:75:58:b5:da:46:c9:20: fa:c8:63:dd:ac:d7:e8:e3:73:83:91:16:63:69:ac:b8:16:e1: 54:e5:0b:ba:2f:f5:36:34:01:fb:d7:b8:34:53:e0:de:61:62: d5:f5:1c:40:2e:31:be:fe:fd:f8:ef:d1:21:d5:ef:8d:b5:79: cd:9f:c9:d5:15:1f:ee:8d:0f:e3:64:97:1c:62:98:d4:f7:0c: e8:e5:85:25 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt9lP64fN05/6JuAZC/qSgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDcyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzgyODg3ZTE5MDQ5MzJmMTE4NmMyYzMxYzZhOTJmZjVlYzY0Mzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUqweq3AdgGZ8v9CZqLzih/hA5HB SPVNVAKBYml8NBdCZYHZlBZjBi6KglU9n9+gZlnCM2LBxwuEDT5Lq2jSkmYoUsx9 G4bE4qSGCYuDoh1DXdEqldvOWeweTKeIz+0MTtIVerKvgYE50fygJkQzKRzgAf6+ rdeF7I8NEUqCRjalKD8pErGNvNf+TnMELGUv9F/1PdMrhBOVCn5y5x7X8TjkCchd N3BwhGw5L3HyWBlMwTdtq4l1O6y6VUGg62mKyLBQvx2ufXejr+MGn1WG70yXguAG PcZMqp8Wc2FyGv8w8BfK5TwwbufCnjLn+GIMgcnaT5Tyi5E8hCXnE5pkqwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFJOCiH4ZBJMvEYbCwxxqkv9exkOHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2JmOTBl Yi0xNWM4LTQwZDgtYTIyMC01Yzk0NTQ2OGM0NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvYmY5MGVi LTE1YzgtNDBkOC1hMjIwLTVjOTQ1NDY4YzQ3NS8xL2s0S0lmaGtFa3k4UmhzTERI R3FTXzE3R1E0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDWR9IAwQCuQXQAwQAwvI9AwQD1DbgMA0EAgAC MAcDBQMqAycAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmGiMA0GCSqGSIb3DQEB CwUAA4IBAQCKjUfVDZszq4f1iKfpKEvLunt6tftlWCmNTM8tseJh4EYXCsrEDHqm uWXedTlNywburkYHaX3YfZx+FuzBfNVexcm72WUKrF6FX9fVCk3KjCPs7r1Lh9Kr TOOKI2QHt00dok0MoN2UA5DdNpg/pLcYXoIpl+x3WLOP0FK282XMSEvG8Bg4Vscd TZ/V2mQ/iiM41808wUneIXnAVpCwzXhVquNC4D9mUPet7wnrhXVYtdpGySD6yGPd rNfo43ODkRZjaay4FuFU5Qu6L/U2NAH717g0U+DeYWLV9RxALjG+/v3479Eh1e+N tXnNn8nVFR/ujQ/jZJccYpjU9wzo5YUl -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:09 2026 by rpki-client