This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer (raw, json) Hash identifier: jrPwkv392SsaiHa2AUtluWNvOAwAtwQe8E84H+mJpA4= Subject key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7AE3A0ACEBBEDD9BC0A8E63445C27 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15595 AS: 44078 IP: 46.37.192.0/19 IP: 79.135.192.0/19 IP: 81.25.224.0/20 IP: 185.191.80.0/22 IP: 185.191.112.0/22 IP: 2a02:d300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ae:3a:0a:ce:bb:ed:d9:bc:0a:8e:63:44:5c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:85:c1:1e:5b:5a:44:a8:7e:ed:c1:4e:52: 84:22:a8:cf:e0:e2:73:b8:51:6e:34:f0:b4:0a:92: a9:1d:0a:b9:51:a3:b0:80:7d:f9:e9:38:00:03:de: fa:d1:1a:4c:61:b4:44:de:49:4f:54:f6:be:3f:7a: 07:dd:6e:fd:79:22:7c:6c:4e:31:17:29:fb:fe:43: 12:00:44:9b:8f:d3:1e:0a:59:98:c2:53:df:45:6e: f7:04:25:95:2c:4c:ee:e9:dc:90:89:4a:b3:b1:de: 99:ee:10:c0:c8:4b:4f:95:06:89:68:79:62:09:7c: 81:41:15:bc:95:02:e0:5c:78:c9:f4:60:a7:d8:ca: b7:cf:d9:75:69:41:f6:02:6f:61:00:90:90:fd:d1: 8b:f9:da:5b:8d:72:67:d4:b5:ad:65:bc:0d:00:d3: ff:76:f6:72:93:18:ad:e5:99:79:e3:d9:cf:34:ce: 32:37:f3:64:07:be:17:b5:d8:58:21:20:93:d4:a5: bd:b0:23:2c:91:56:cd:ee:24:a1:45:4f:28:ab:41: 0f:79:20:74:d6:dd:50:21:f4:48:61:b4:97:3c:98: 11:f4:0d:6c:8f:c2:70:90:d9:78:b9:24:52:05:2f: 5d:cb:67:f9:fb:d6:1a:32:fd:67:f8:46:d8:ab:af: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.192.0/19 79.135.192.0/19 81.25.224.0/20 185.191.80.0/22 185.191.112.0/22 IPv6: 2a02:d300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15595 44078 Signature Algorithm: sha256WithRSAEncryption 94:c2:18:0a:7d:43:f0:e7:93:7c:11:f7:dc:0a:52:30:64:77: 8d:76:cd:f8:17:e1:4f:32:14:9d:9d:0c:2a:23:b5:2d:dd:94: 05:c7:ff:ac:ad:c5:64:75:c3:79:80:e9:33:b3:e1:be:bb:ef: 1c:8f:ae:28:5b:a8:1b:7d:3f:70:2e:68:b8:b7:66:40:dc:82: 9a:a2:d7:a2:d1:e9:0d:b5:8b:1d:27:57:a4:e0:45:9a:1a:28: 79:ae:99:3a:c4:1e:f7:ba:f8:3e:89:21:e1:0d:71:e5:9a:30: 68:36:8e:c0:18:b2:3c:6a:7b:6e:8f:22:c3:e4:f8:55:40:21: a4:3b:7a:8a:fd:f7:bb:27:44:95:58:ca:de:f9:6e:eb:e6:88: e3:55:9c:17:f9:dd:9e:2b:52:df:77:a6:40:53:7d:4a:92:5c: 28:43:e2:e2:31:67:0e:16:29:49:53:62:07:9f:e5:ee:c8:36: 5d:de:24:14:a9:07:88:d1:5d:c4:e4:f8:00:ee:b5:8e:e8:e4: 85:0e:ed:d6:56:cb:b1:22:0a:c0:a8:3a:c4:b3:74:be:a7:d5: 08:d1:66:3c:69:9f:49:70:ea:f4:9c:b8:ef:f2:75:72:45:6c: e3:9d:86:9b:ad:c9:a8:16:71:c9:8e:84:56:ef:90:ad:68:b2: 31:8a:7f:19 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt6x646Cs677dm8Co5jRFwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDNlYzRjNTAyYTQyYzViYmZkYjcwZWE5ZjQ0MGNhMTUwMGFjYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cOFwR5bWkSofu3BTlKEIqjP4OJz uFFuNPC0CpKpHQq5UaOwgH356TgAA9760RpMYbRE3klPVPa+P3oH3W79eSJ8bE4x Fyn7/kMSAESbj9MeClmYwlPfRW73BCWVLEzu6dyQiUqzsd6Z7hDAyEtPlQaJaHli CXyBQRW8lQLgXHjJ9GCn2Mq3z9l1aUH2Am9hAJCQ/dGL+dpbjXJn1LWtZbwNANP/ dvZykxit5Zl549nPNM4yN/NkB74XtdhYISCT1KW9sCMskVbN7iShRU8oq0EPeSB0 1t1QIfRIYbSXPJgR9A1sj8JwkNl4uSRSBS9dy2f5+9YaMv1n+EbYq6/KuQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFJA+xMUCpCxbv9tw6p9EDKFQCsxQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzQwYzU0 OC01Y2M2LTQ3YzMtOWU4Zi1iZGRiMjlmODVmYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNDBjNTQ4 LTVjYzYtNDdjMy05ZThmLWJkZGIyOWY4NWZiOC8xL2tEN0V4UUtrTEZ1XzIzRHFu MFFNb1ZBS3pGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQFLiXAAwQFT4fAAwQEURngAwQCub9QAwQCub9w MA0EAgACMAcDBQMqAtMAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAjzrAgMArC4w DQYJKoZIhvcNAQELBQADggEBAJTCGAp9Q/Dnk3wR99wKUjBkd412zfgX4U8yFJ2d DCojtS3dlAXH/6ytxWR1w3mA6TOz4b677xyPrihbqBt9P3AuaLi3ZkDcgpqi16LR 6Q21ix0nV6TgRZoaKHmumTrEHve6+D6JIeENceWaMGg2jsAYsjxqe26PIsPk+FVA IaQ7eor997snRJVYyt75buvmiONVnBf53Z4rUt93pkBTfUqSXChD4uIxZw4WKUlT Ygef5e7INl3eJBSpB4jRXcTk+ADutY7o5IUO7dZWy7EiCsCoOsSzdL6n1QjRZjxp n0lw6vScuO/ydXJFbOOdhputyagWccmOhFbvkK1osjGKfxk= -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:56 2026 by rpki-client