This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer File: k9TErXMeRe0yCi84q3C3p7_36nk.cer (raw, json) Hash identifier: k8lIh38zVPiQF1D1MTGpP2XR0X/DViM1HU/Ex3zmL1k= Subject key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112C8B77E9ECE1D2F8A60445253827 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42852 IP: 91.151.224.0/20 IP: 149.3.152.0/21 IP: 185.30.36.0/22 IP: 2a0a:240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:8b:77:e9:ec:e1:d2:f8:a6:04:45:25:38:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:17:03:cf:e6:8c:bd:d3:c2:5b:0f:ef:fc: 57:54:6e:fb:ae:c4:06:06:44:9b:90:26:78:b4:37: 17:16:1c:da:b1:3e:a4:a8:67:4e:40:bc:07:95:f9: d6:a1:34:b3:ae:ae:ec:95:ac:86:ba:80:dc:ce:36: e6:d9:6d:75:72:bd:30:20:aa:c7:e6:d1:87:1e:0f: b5:69:2c:ad:c4:3b:3a:b7:38:b8:3c:a1:30:66:75: c2:cc:bc:ed:a0:b6:ac:7b:86:e9:4e:fa:9a:39:40: e0:ff:8d:77:9a:3a:8e:e5:42:29:31:b3:3f:de:db: 5c:ce:35:c1:ec:f7:4d:d1:db:12:52:81:ac:59:dd: e1:69:75:1f:5a:76:96:99:01:70:a2:6f:01:5b:0e: db:cc:83:35:1f:19:a8:81:70:6a:5b:46:9a:9e:d1: 18:fc:75:0c:0d:18:9f:5a:88:e3:ad:b3:6b:bf:72: cb:c7:0b:02:2b:cd:6a:a3:4b:63:6e:24:2e:4e:72: d3:81:d7:26:a9:4d:61:ce:ef:72:d4:08:bb:03:22: ff:d4:49:dd:1a:6b:0c:13:51:10:53:b8:36:e7:ad: 84:76:13:cb:f9:f5:ef:bf:54:9a:a1:7b:d5:ea:7e: 86:67:34:b8:2d:81:2b:4f:a2:72:82:67:25:6c:b7: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.224.0/20 149.3.152.0/21 185.30.36.0/22 IPv6: 2a0a:240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42852 Signature Algorithm: sha256WithRSAEncryption 5a:57:0d:ad:43:aa:09:09:a1:05:bf:6a:53:fa:03:34:04:5c: d1:ab:4b:23:54:f3:bd:80:a4:81:04:dd:a0:6e:0d:3e:ac:05: bb:b8:db:50:a8:1b:e4:0e:6d:f7:ca:71:24:36:f6:54:b9:a0: a9:97:a8:17:2c:60:e8:b4:88:b0:97:d3:1e:67:ae:a5:a6:f6: e8:9e:ab:f1:3d:98:ff:62:67:7a:37:77:ad:58:40:f5:b6:36: ed:fc:e2:13:69:34:51:f7:e4:fc:87:4a:d3:15:4b:24:1a:39: 1a:f0:79:ae:04:cd:0d:c9:53:86:97:c7:32:61:51:c6:ec:7c: 05:29:90:fc:84:45:e5:de:e8:c7:95:55:06:9e:2c:b9:3d:bc: ca:8a:d6:11:dc:bd:49:6c:aa:71:ed:17:df:db:af:fc:ce:90: f5:0d:56:f1:5f:45:b4:b3:ae:69:16:eb:76:db:ff:5e:93:0e: 61:28:46:76:99:a5:c9:d4:48:b4:f9:2e:ad:8d:0f:a4:b3:a5: b0:63:4f:68:ca:6a:37:6d:4b:2a:b1:50:78:6c:9b:83:50:50: 6e:a2:8d:dd:4e:95:dc:ce:e5:63:95:56:f1:46:f0:65:de:3e: be:61:29:57:04:0a:9e:7d:2c:5f:6c:95:83:59:5a:bb:8a:02: 52:95:eb:94 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5ESyLd+ns4dL4pgRFJTgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2Q0YzRhZDczMWU0NWVkMzIwYTJmMzhhYjcwYjdhN2JmZjdlYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOEXA8/mjL3TwlsP7/xXVG77rsQG BkSbkCZ4tDcXFhzasT6kqGdOQLwHlfnWoTSzrq7slayGuoDczjbm2W11cr0wIKrH 5tGHHg+1aSytxDs6tzi4PKEwZnXCzLztoLase4bpTvqaOUDg/413mjqO5UIpMbM/ 3ttczjXB7PdN0dsSUoGsWd3haXUfWnaWmQFwom8BWw7bzIM1HxmogXBqW0aantEY /HUMDRifWojjrbNrv3LLxwsCK81qo0tjbiQuTnLTgdcmqU1hzu9y1Ai7AyL/1End GmsME1EQU7g2562EdhPL+fXvv1SaoXvV6n6GZzS4LYErT6JygmclbLd/nwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJPUxK1zHkXtMgovOKtwt6e/9+p5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5L2VlMDUz OC0zOWM5LTQ0NTAtOTY0Ny1hYmE1NWUyNDI0ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZWUwNTM4 LTM5YzktNDQ1MC05NjQ3LWFiYTU1ZTI0MjRkMi8xL2s5VEVyWE1lUmUweUNpODRx M0MzcDdfMzZuay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEW5fgAwQDlQOYAwQCuR4kMA0EAgACMAcDBQMq CgJAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCnZDANBgkqhkiG9w0BAQsFAAOC AQEAWlcNrUOqCQmhBb9qU/oDNARc0atLI1TzvYCkgQTdoG4NPqwFu7jbUKgb5A5t 98pxJDb2VLmgqZeoFyxg6LSIsJfTHmeupab26J6r8T2Y/2Jnejd3rVhA9bY27fzi E2k0Uffk/IdK0xVLJBo5GvB5rgTNDclThpfHMmFRxux8BSmQ/IRF5d7ox5VVBp4s uT28yorWEdy9SWyqce0X39uv/M6Q9Q1W8V9FtLOuaRbrdtv/XpMOYShGdpmlydRI tPkurY0PpLOlsGNPaMpqN21LKrFQeGybg1BQbqKN3U6V3M7lY5VW8UbwZd4+vmEp VwQKnn0sX2yVg1lau4oCUpXrlA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:14 2026 by rpki-client