This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer File: k4otcueQJvUr9WV-l__RsRvohkE.cer (raw, json) Hash identifier: ixHhujakKEWls/03acjrvLG18WFQjuCGAmwrzOroif0= Subject key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDF4E97A20280BAA42B40BEE14D5F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59761 IP: 185.249.157.0/24 IP: 2a13:f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f4:e9:7a:20:28:0b:aa:42:b4:0b:ee:14:d5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=938a2d72e79026f52bf5657e97ffd1b11be88641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:9a:13:06:fd:80:fe:b2:7a:f8:31:22:f6: 21:46:82:42:23:80:fa:2e:48:eb:4d:2b:5c:56:50: 4d:73:87:24:56:e8:ba:3a:05:9d:00:94:1b:aa:fa: 8f:2a:31:b1:e7:c7:63:b7:f8:5b:8b:91:96:5d:b3: 7c:5c:b5:ac:9b:28:1f:68:5c:41:04:aa:91:ce:b4: 5c:b5:23:56:2e:db:ef:26:fb:06:ac:45:ad:41:66: 2c:28:71:ec:ac:62:b8:93:b9:61:06:b8:b6:31:4e: a5:04:b2:45:02:4b:07:70:0c:35:95:47:32:cc:92: 22:c0:57:61:16:7a:56:e3:11:c1:2e:11:13:77:19: 0c:b2:2a:10:c7:d0:1d:cd:8a:87:e4:bb:8d:79:cb: 6b:58:c0:92:74:ff:c4:ba:39:eb:74:9c:8b:07:6d: c4:b9:87:45:d1:80:6a:69:f0:b2:4f:a0:ac:25:0e: a7:e5:8c:b4:7f:06:b9:3c:1e:71:17:1d:f7:7a:93: 35:fa:d6:70:94:55:74:76:89:5c:ea:cf:d9:e4:02: 2e:ec:97:59:f0:4d:8a:4b:f4:66:9b:d3:dc:cb:55: 0e:e9:5e:ae:67:ff:f5:38:be:ac:48:08:8e:f3:dc: 3d:4e:03:84:53:77:38:f0:9d:8e:09:c5:be:43:f8: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.157.0/24 IPv6: 2a13:f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59761 Signature Algorithm: sha256WithRSAEncryption 8c:6d:2c:16:6a:b8:b0:84:1b:a6:49:67:ba:95:3b:df:23:53: 9b:54:8d:74:45:1f:0d:4b:28:b0:42:15:b3:bf:1d:f2:9d:b1: c3:53:a4:11:25:95:62:2f:5a:41:cd:1e:74:63:8a:5e:95:d4: 67:54:fa:5c:00:7c:17:31:8e:29:0d:8e:ad:46:82:4b:a3:df: 47:7f:1b:47:f5:12:2e:b8:e1:aa:fe:14:dc:76:7b:a0:b1:c0: c0:3a:2b:9c:c9:bb:9a:d5:c9:9e:4c:06:0a:98:e8:98:c7:12: 34:0e:69:16:8f:89:d2:95:70:2e:d6:47:e6:ae:ab:f9:84:bd: d6:0a:ac:30:7b:83:da:6e:43:47:6f:a2:7e:1d:3d:fa:d2:ed: 26:91:c9:7a:1a:31:ca:0d:a0:e3:21:a3:d9:79:65:a4:81:25: 83:de:0a:0b:a6:63:04:ba:fe:1d:49:d9:a0:2b:fd:d9:ef:30: 9e:71:0b:1c:56:77:99:a3:d3:b2:2d:3c:9a:dc:1d:14:f7:28: c2:e3:9c:bc:c3:67:9d:f1:ee:2e:87:ba:11:96:6a:7a:2b:c1: e5:aa:3d:a8:67:84:30:ef:ef:40:d6:8f:2f:b8:00:e9:84:c8: 98:53:bb:d4:fc:73:c9:b2:7f:ac:ce:b2:91:8f:1a:07:fd:17: 1f:be:01:e7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87fTpeiAoC6pCtAvuFNXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzhhMmQ3MmU3OTAyNmY1MmJmNTY1N2U5N2ZmZDFiMTFiZTg4NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw22aEwb9gP6yevgxIvYhRoJCI4D6 LkjrTStcVlBNc4ckVui6OgWdAJQbqvqPKjGx58djt/hbi5GWXbN8XLWsmygfaFxB BKqRzrRctSNWLtvvJvsGrEWtQWYsKHHsrGK4k7lhBri2MU6lBLJFAksHcAw1lUcy zJIiwFdhFnpW4xHBLhETdxkMsioQx9AdzYqH5LuNectrWMCSdP/EujnrdJyLB23E uYdF0YBqafCyT6CsJQ6n5Yy0fwa5PB5xFx33epM1+tZwlFV0dolc6s/Z5AIu7JdZ 8E2KS/Rmm9Pcy1UO6V6uZ//1OL6sSAiO89w9TgOEU3c48J2OCcW+Q/gGHQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJOKLXLnkCb1K/Vlfpf/0bEb6IZBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzhmN2Qz Ny1hNzQwLTQyYjAtYWNkMC1jMzY5NzYzNjM5NjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGY3ZDM3 LWE3NDAtNDJiMC1hY2QwLWMzNjk3NjM2Mzk2OC8xL2s0b3RjdWVRSnZVcjlXVi1s X19Sc1J2b2hrRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufmdMA0EAgACMAcDBQMqEw8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDpcTANBgkqhkiG9w0BAQsFAAOCAQEAjG0sFmq4sIQb pklnupU73yNTm1SNdEUfDUsosEIVs78d8p2xw1OkESWVYi9aQc0edGOKXpXUZ1T6 XAB8FzGOKQ2OrUaCS6PfR38bR/USLrjhqv4U3HZ7oLHAwDornMm7mtXJnkwGCpjo mMcSNA5pFo+J0pVwLtZH5q6r+YS91gqsMHuD2m5DR2+ifh09+tLtJpHJehoxyg2g 4yGj2XllpIElg94KC6ZjBLr+HUnZoCv92e8wnnELHFZ3maPTsi08mtwdFPcowuOc vMNnnfHuLoe6EZZqeivB5ao9qGeEMO/vQNaPL7gA6YTImFO71PxzybJ/rM6ykY8a B/0XH74B5w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:42 2026 by rpki-client