This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer File: k7ke76bYBG2RjjZARWBJUmQLwV0.cer (raw, json) Hash identifier: zJZ7qtZ1eBJYjJb544VoaJfqDn462QCahvWuW8cE8rY= Subject key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE13D9199478C5898CAA8AB4ABC121 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208017 IP: 139.28.156.0/22 IP: 2a0e:ae80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:13:d9:19:94:78:c5:89:8c:aa:8a:b4:ab:c1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b91eefa6d8046d918e364045604952640bc15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:56:df:70:53:52:bf:01:b1:5e:43:8d:cd: 25:81:f3:ea:a3:2e:11:08:54:09:d8:cd:5b:79:40: 27:c3:b5:c0:da:25:d2:14:f7:f2:a5:31:87:8c:1a: 74:2b:32:8b:b3:c0:bc:cc:64:d1:ba:6c:67:25:12: f5:23:1a:4c:fd:24:f0:9b:16:0b:7c:5b:e3:ad:5d: 4f:cb:c6:e9:67:7d:b8:de:8d:f9:97:52:d8:c4:bd: 13:e2:dc:3a:3f:81:dc:97:de:7f:d0:f4:c1:e9:fd: 31:6a:b9:5d:28:f7:5f:a9:76:b2:66:8e:47:3e:58: e6:fc:98:ec:bf:d7:b3:14:72:a3:93:8a:d5:f3:58: f6:1b:32:f0:43:e7:8d:53:39:53:d4:7f:7a:31:2b: 16:df:b6:16:75:3a:a4:ae:f9:e9:02:22:34:21:ca: be:66:7b:4b:38:a1:9a:8a:fa:c1:b8:ca:1d:47:71: 6c:81:ec:e2:6c:75:a3:1e:c6:26:ce:60:bc:9e:35: fe:bf:1f:a1:dd:b2:55:da:33:46:2b:19:9d:f0:00: 9f:fc:1d:fc:16:95:3f:f3:39:d5:04:1f:d5:58:06: 42:fb:0b:7f:79:bb:2c:e0:ed:23:08:50:96:89:7a: f7:04:de:a0:2e:e1:2a:13:58:82:eb:db:c7:d9:38: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.156.0/22 IPv6: 2a0e:ae80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208017 Signature Algorithm: sha256WithRSAEncryption 0c:32:a1:76:31:79:cc:b5:0c:e9:d5:8f:cd:d7:2b:0d:90:5c: c7:9c:21:13:a9:4c:f1:bb:be:78:84:96:5d:cc:95:1e:70:25: 8d:cf:e5:5a:bc:47:37:9c:33:db:4b:d9:63:09:4f:f9:11:93: bf:ba:c8:07:27:71:05:ef:4e:19:ba:5b:81:c3:e2:8d:75:61: 10:3c:a3:48:43:14:ba:7e:d7:8a:6b:c5:65:9c:93:e1:28:9e: 97:6c:d9:c3:ba:f7:c9:72:2d:c2:4c:2a:be:04:95:ec:ed:dc: c3:41:dd:48:5a:6e:c9:06:40:4b:62:30:e5:cc:ae:69:9f:d3: 41:90:91:7d:ba:f7:64:40:2a:92:14:e1:eb:42:cb:b7:8e:92: d6:88:89:15:47:9f:1c:74:29:7d:af:74:6b:dc:74:37:2d:01: 21:90:15:0f:bb:8a:81:1b:98:b9:1b:ed:05:c6:1c:0f:b3:cf: e0:a0:37:e1:77:f3:fd:8e:74:ee:e3:ad:c0:ae:10:7c:6e:0d: 8e:27:a7:bb:dc:0b:a6:e0:80:97:55:c9:1b:89:08:31:46:02: 77:fb:70:47:d5:da:00:cb:bd:bd:30:f1:94:56:5c:46:66:3f: 82:f4:27:1b:fc:71:a1:32:8f:6e:b1:29:28:bb:fa:ca:48:bd: 9c:93:dc:e5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87hPZGZR4xYmMqoq0q8EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2I5MWVlZmE2ZDgwNDZkOTE4ZTM2NDA0NTYwNDk1MjY0MGJjMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPBW33BTUr8BsV5Djc0lgfPqoy4R CFQJ2M1beUAnw7XA2iXSFPfypTGHjBp0KzKLs8C8zGTRumxnJRL1IxpM/STwmxYL fFvjrV1Py8bpZ3243o35l1LYxL0T4tw6P4Hcl95/0PTB6f0xarldKPdfqXayZo5H Pljm/Jjsv9ezFHKjk4rV81j2GzLwQ+eNUzlT1H96MSsW37YWdTqkrvnpAiI0Icq+ ZntLOKGaivrBuModR3FsgezibHWjHsYmzmC8njX+vx+h3bJV2jNGKxmd8ACf/B38 FpU/8znVBB/VWAZC+wt/ebss4O0jCFCWiXr3BN6gLuEqE1iC69vH2Tg5PQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJO5Hu+m2ARtkY42QEVgSVJkC8FdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2JhYmVm OS0wNzlkLTQwZjQtYTIxMS0zNTg2YWFlMTNkYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYmFiZWY5 LTA3OWQtNDBmNC1hMjExLTM1ODZhYWUxM2RhNy8xL2s3a2U3NmJZQkcyUmpqWkFS V0JKVW1RTHdWMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCixycMA0EAgACMAcDBQMqDq6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMskTANBgkqhkiG9w0BAQsFAAOCAQEADDKhdjF5zLUM 6dWPzdcrDZBcx5whE6lM8bu+eISWXcyVHnAljc/lWrxHN5wz20vZYwlP+RGTv7rI BydxBe9OGbpbgcPijXVhEDyjSEMUun7XimvFZZyT4Siel2zZw7r3yXItwkwqvgSV 7O3cw0HdSFpuyQZAS2Iw5cyuaZ/TQZCRfbr3ZEAqkhTh60LLt46S1oiJFUefHHQp fa90a9x0Ny0BIZAVD7uKgRuYuRvtBcYcD7PP4KA34Xfz/Y507uOtwK4QfG4Njien u9wLpuCAl1XJG4kIMUYCd/twR9XaAMu9vTDxlFZcRmY/gvQnG/xxoTKPbrEpKLv6 yki9nJPc5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:21 2026 by rpki-client