This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer File: kTOA6LhQRU2zgd3euawsyKL2JTE.cer (raw, json) Hash identifier: fdstH+oRTfpJMQBmTKBARhZfSgxF0F/Vgyn0s8qVF3U= Subject key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F833C04DC66BD151189BDD9D9658643 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.26.87.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:3c:04:dc:66:bd:15:11:89:bd:d9:d9:65:86:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=913380e8b850454db381dddeb9ac2cc8a2f62531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:84:52:07:3b:0d:4f:92:20:ed:0f:37:d6: 94:38:68:2b:90:1b:f7:66:f1:85:52:55:1c:e9:aa: 5c:77:23:ba:14:9f:8a:9d:d8:d1:55:28:7f:59:08: 92:49:b4:4d:81:0f:40:48:f2:5d:31:7a:e2:fa:9f: eb:ca:8d:50:99:0f:ff:7d:04:15:dd:06:49:bb:af: df:be:22:0d:40:f2:5d:d3:11:5f:31:c2:a3:b0:13: 11:f3:2f:f1:94:00:21:78:f5:cb:1e:a4:32:6e:ab: 01:ab:be:dc:e5:d4:b7:5c:d0:fa:66:f0:11:7d:7e: 71:12:fd:61:78:c6:41:ab:3b:06:11:34:50:16:20: f5:99:b2:34:47:6d:48:5c:1a:bb:19:65:e7:55:e2: 1b:0f:d4:44:49:ff:0b:5b:c5:0b:31:47:50:c4:7c: 1f:da:18:b9:b8:7d:5b:13:16:dd:56:c8:62:7c:1d: c9:97:95:68:b4:05:13:9a:2d:76:1e:72:5e:ea:60: ed:ce:f2:e9:7f:57:92:86:16:20:d5:7e:a5:42:24: 30:26:06:6d:f0:d3:5f:93:22:8c:0d:f8:54:1e:56: e9:a9:6b:a7:98:b5:c2:ac:4c:03:e5:9e:00:9b:6e: 37:63:2c:16:86:1b:6f:b5:25:ea:21:35:87:84:97: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.87.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:27:52:24:26:d9:b8:45:5e:b0:f3:7b:e6:a1:3c:5d:b7:29: 64:3e:85:15:62:74:90:a7:a9:3a:f8:fe:e4:2e:68:3c:28:15: 18:57:e9:17:b5:ee:93:ac:01:d7:cf:fb:e4:00:7c:60:f8:1e: ff:e7:dc:94:3e:48:18:36:9a:1c:43:52:dc:f0:5a:91:d1:5e: 55:ff:68:29:75:f2:3e:6c:94:68:f9:0c:7c:2e:6b:c7:fe:9d: 32:5a:18:1e:80:01:ba:08:0c:b3:eb:0f:5b:cf:da:41:14:b5: 4d:30:6a:d9:7b:89:97:8b:d0:e3:b6:33:c8:52:62:b6:40:b2: 65:71:df:29:e1:32:58:c6:d4:af:2e:44:0a:b6:ee:5b:03:6f: ad:5f:e9:f0:bf:ea:76:5b:19:7f:74:89:7f:97:d4:68:e6:b4: 39:77:04:8e:96:49:72:48:7d:3f:2e:d7:e4:3b:30:f6:31:c6: 0e:cd:88:21:3e:fb:a4:28:f1:ee:e1:6a:0a:6d:ae:be:ed:7c: 2f:96:43:70:89:9e:5f:a8:71:b0:8b:6d:1d:d8:da:f7:7c:5f: 9f:71:02:61:08:9d:25:09:c9:38:f2:90:6d:11:61:44:12:35: 37:2b:05:2a:b9:ad:b8:01:21:10:b6:3b:3e:38:ef:a5:d8:1d: a8:70:13:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/gzwE3Ga9FRGJvdnZZYZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTMzODBlOGI4NTA0NTRkYjM4MWRkZGViOWFjMmNjOGEyZjYyNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaCEUgc7DU+SIO0PN9aUOGgrkBv3 ZvGFUlUc6apcdyO6FJ+KndjRVSh/WQiSSbRNgQ9ASPJdMXri+p/ryo1QmQ//fQQV 3QZJu6/fviINQPJd0xFfMcKjsBMR8y/xlAAhePXLHqQybqsBq77c5dS3XND6ZvAR fX5xEv1heMZBqzsGETRQFiD1mbI0R21IXBq7GWXnVeIbD9RESf8LW8ULMUdQxHwf 2hi5uH1bExbdVshifB3Jl5VotAUTmi12HnJe6mDtzvLpf1eShhYg1X6lQiQwJgZt 8NNfkyKMDfhUHlbpqWunmLXCrEwD5Z4Am243YywWhhtvtSXqITWHhJcSCQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJEzgOi4UEVNs4Hd3rmsLMii9iUxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzg2OTRi OS0wMWQ3LTQ4YjgtYTg4Mi05NGU3MDBiZDU1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvODY5NGI5 LTAxZDctNDhiOC1hODgyLTk0ZTcwMGJkNTVmNS8xL2tUT0E2TGhRUlUyemdkM2V1 YXdzeUtMMkpURS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuRpXMA0GCSqGSIb3DQEBCwUAA4IBAQCLJ1Ik Jtm4RV6w83vmoTxdtylkPoUVYnSQp6k6+P7kLmg8KBUYV+kXte6TrAHXz/vkAHxg +B7/59yUPkgYNpocQ1Lc8FqR0V5V/2gpdfI+bJRo+Qx8LmvH/p0yWhgegAG6CAyz 6w9bz9pBFLVNMGrZe4mXi9DjtjPIUmK2QLJlcd8p4TJYxtSvLkQKtu5bA2+tX+nw v+p2Wxl/dIl/l9Ro5rQ5dwSOlklySH0/LtfkOzD2McYOzYghPvukKPHu4WoKba6+ 7XwvlkNwiZ5fqHGwi20d2Nr3fF+fcQJhCJ0lCck48pBtEWFEEjU3KwUqua24ASEQ tjs+OO+l2B2ocBND -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:23 2026 by rpki-client