This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer File: k_0m06C2k6ApvGLcud2pUZ5HdkA.cer (raw, json) Hash identifier: i+ODtDx31JrmHL7huK8esQr9x5Mz4JT4WjplNFq6iMw= Subject key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB96440EBC0277633703D20110EE14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60515 IP: 185.88.32.0/22 IP: 2a05:c880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:96:44:0e:bc:02:77:63:37:03:d2:01:10:ee:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:16:a0:5c:53:2e:fe:2d:93:c2:a8:31:02: 53:1f:8a:50:ef:74:db:b2:68:86:fb:ec:bf:dc:63: 41:fe:f6:69:c0:0c:9e:2d:90:1e:40:06:d4:83:50: 77:d1:f3:d2:b9:80:84:8b:d8:14:da:fb:dc:8c:14: 9d:f5:1e:82:00:a6:a9:07:f2:5f:54:6a:35:9d:81: 3d:3c:7f:84:46:d9:42:a8:b1:ac:c6:e9:92:27:a9: 26:af:0c:63:47:59:2a:84:cb:f5:51:30:df:86:e7: 2a:7d:1e:b8:4b:0c:20:1f:41:07:ba:e1:36:0c:86: b5:68:4f:9c:06:90:c3:2f:e1:00:16:b6:76:60:6c: b0:3a:1f:84:97:ba:db:2a:6b:e9:a2:f7:ac:37:90: 05:56:78:97:bc:8a:3b:27:1f:6b:3b:ac:25:71:08: a9:a5:fc:da:20:a4:3e:6d:64:6c:3e:8f:9c:61:d4: e6:6d:72:d9:e4:7d:72:1b:7e:91:67:30:b4:39:e8: 3a:06:83:93:1e:fd:36:42:15:93:64:12:8c:2c:e9: df:79:cc:60:25:c1:51:ce:e0:ab:36:de:89:d9:c0: d3:c8:ef:ae:44:62:57:ad:be:8f:0f:95:39:30:86: 55:c4:fa:50:a8:21:35:5d:3a:30:e9:e4:c5:a4:90: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.32.0/22 IPv6: 2a05:c880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60515 Signature Algorithm: sha256WithRSAEncryption 94:15:ad:18:fc:f7:b0:4e:75:d9:4d:ca:87:31:d0:a2:3f:9b: 37:49:b0:9b:2f:5e:06:d7:c0:fd:22:12:4f:60:7a:24:5b:8e: 7d:3e:45:66:c0:29:44:ae:b0:3a:ed:90:01:53:a1:9a:0c:4b: 74:57:76:29:de:50:6f:d9:aa:6e:aa:e2:35:5f:3a:ef:87:d3: a7:28:32:31:58:02:a2:c6:e9:63:ea:39:5a:e5:b6:00:ee:4f: 03:10:85:27:a4:e6:4f:89:5a:92:93:f6:a6:13:5c:c7:37:04: 17:42:f7:af:34:72:10:fd:73:22:49:c2:53:fc:13:ee:ff:f7: f3:1a:82:d1:bf:81:72:ef:78:d9:e7:be:90:b9:af:a2:81:fa: 9e:fb:37:e3:ce:fe:ce:0a:45:73:ce:e7:29:6e:ee:1e:3c:0a: 84:86:46:86:7f:0c:76:31:17:4f:05:65:93:e1:4f:c3:68:84: 6f:f2:a9:97:38:ad:a0:21:de:2d:e2:5a:99:05:cb:ac:3c:30: d1:9f:2f:9f:79:b8:54:77:b6:79:00:f4:d3:af:d9:34:13:57: bf:ed:95:14:4e:17:42:31:02:52:d0:0a:87:0d:06:27:c9:d2: 8e:2b:64:cb:53:9e:0e:f3:74:b0:03:6e:d4:ce:4d:cd:7b:3c: a2:1c:99:02 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt265ZEDrwCd2M3A9IBEO4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ZkMjZkM2EwYjY5M2EwMjliYzYyZGNiOWRkYTk1MTllNDc3NjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtswWoFxTLv4tk8KoMQJTH4pQ73Tb smiG++y/3GNB/vZpwAyeLZAeQAbUg1B30fPSuYCEi9gU2vvcjBSd9R6CAKapB/Jf VGo1nYE9PH+ERtlCqLGsxumSJ6kmrwxjR1kqhMv1UTDfhucqfR64SwwgH0EHuuE2 DIa1aE+cBpDDL+EAFrZ2YGywOh+El7rbKmvpovesN5AFVniXvIo7Jx9rO6wlcQip pfzaIKQ+bWRsPo+cYdTmbXLZ5H1yG36RZzC0Oeg6BoOTHv02QhWTZBKMLOnfecxg JcFRzuCrNt6J2cDTyO+uRGJXrb6PD5U5MIZVxPpQqCE1XTow6eTFpJClvwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJP9JtOgtpOgKbxi3LndqVGeR3ZAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzBkZjlh Yi0yZTc4LTRiOTgtYTZlZi03M2JiOTMwMGY1NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMGRmOWFi LTJlNzgtNGI5OC1hNmVmLTczYmI5MzAwZjU3NS8xL2tfMG0wNkMyazZBcHZHTGN1 ZDJwVVo1SGRrQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVggMA0EAgACMAcDBQMqBciAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsYzANBgkqhkiG9w0BAQsFAAOCAQEAlBWtGPz3sE51 2U3KhzHQoj+bN0mwmy9eBtfA/SIST2B6JFuOfT5FZsApRK6wOu2QAVOhmgxLdFd2 Kd5Qb9mqbqriNV8674fTpygyMVgCosbpY+o5WuW2AO5PAxCFJ6TmT4lakpP2phNc xzcEF0L3rzRyEP1zIknCU/wT7v/38xqC0b+Bcu942ee+kLmvooH6nvs3487+zgpF c87nKW7uHjwKhIZGhn8MdjEXTwVlk+FPw2iEb/KplzitoCHeLeJamQXLrDww0Z8v n3m4VHe2eQD006/ZNBNXv+2VFE4XQjECUtAKhw0GJ8nSjitky1OeDvN0sANu1M5N zXs8ohyZAg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:55 2026 by rpki-client