This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer (raw, json) Hash identifier: FxjGknsi1ff4Pts6MYTrjVvcafwmHDYdSZIEpTY1Za8= Subject key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED220D613C62ECC02B01039319EFAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56640 IP: 195.22.121.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:22:0d:61:3c:62:ec:c0:2b:01:03:93:19:ef:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93f01e9086d40d508f5842e982f253689f7fe4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:5e:8b:34:99:4b:f1:97:d2:bf:a5:fc:ac: 1e:4a:65:0c:d4:29:09:3d:66:e7:af:6a:fc:4c:23: 8c:59:ba:7b:b1:d3:b9:19:45:ea:86:b9:97:d0:f8: 73:c5:bd:76:fd:cd:52:6c:66:f6:87:1b:fe:4e:07: bc:d3:e9:74:dd:16:47:80:ff:b3:72:93:8f:4a:96: 62:ae:4f:6a:8a:9d:53:42:ff:d3:ce:0f:f6:d9:5f: 5d:61:c9:f9:d8:24:2a:f6:6f:f3:de:2f:2e:08:60: ae:d0:71:cd:d8:93:11:9e:a3:8e:3e:72:da:5b:0c: 03:26:20:07:1a:55:ee:77:e8:28:86:e8:b3:59:6c: c4:56:59:6c:49:17:21:c7:05:08:4f:d8:32:df:ec: 26:a7:a0:a4:12:0d:5f:02:83:cf:b8:b9:d1:f7:93: d2:8b:b0:65:a2:78:c8:ab:50:3e:ea:54:63:77:67: e1:b0:d3:b7:64:a7:4d:98:3c:db:21:f9:f0:d7:6c: a1:32:07:04:80:c0:1e:a8:9b:91:0b:c4:38:10:12: 71:41:d0:c5:a1:2d:68:2c:f1:62:65:fb:53:ae:76: 31:d9:21:e5:8c:7d:01:a3:c6:c6:18:ce:1f:7d:36: a5:b6:a7:00:ba:32:e6:77:8e:3c:cb:03:87:3f:e3: c7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.22.121.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56640 Signature Algorithm: sha256WithRSAEncryption 53:e1:1d:15:24:2f:2b:e4:56:41:0a:3d:ca:8b:d1:01:dc:1d: fb:75:41:9e:f0:87:9f:f9:1c:22:bb:7f:6a:81:c3:eb:be:e1: cd:a5:8d:6c:3e:94:60:3a:88:c7:10:27:0e:ef:1c:fd:29:7a: 4c:d5:f8:89:1a:93:24:4b:d2:e0:0e:f9:35:f5:2c:0c:4f:39: 4c:96:b5:d1:c0:14:a0:ed:c7:2e:82:8a:56:b9:3a:de:88:e4: d1:2c:b1:f0:f8:1c:b1:0e:4f:5a:02:be:2d:cd:cb:9c:14:30: 1a:72:f8:e2:6a:82:7f:fb:77:f9:1c:6f:d5:a1:19:7f:49:ab: b6:56:9f:73:27:f9:8f:82:68:fe:4f:7d:01:62:7a:82:03:c0: 42:42:88:03:73:5c:fe:ee:46:1d:74:ce:6e:77:be:48:7b:9d: 8d:c6:fa:5a:39:d7:71:ec:c5:5f:3e:d8:41:60:11:fb:9f:0b: 38:0d:92:5c:37:2c:34:d3:25:7a:81:4b:0c:15:2d:74:dc:8b: ac:17:74:db:50:3e:9c:f2:89:e6:ff:87:14:cb:7d:77:0f:28: 3c:ab:e2:af:e4:4c:83:e1:c5:e6:f4:f8:aa:ab:81:86:70:45: 5b:e9:7f:ad:2d:59:df:f8:d7:b6:18:41:4a:83:58:cd:54:e7: df:e8:f6:68 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57SINYTxi7MArAQOTGe+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2YwMWU5MDg2ZDQwZDUwOGY1ODQyZTk4MmYyNTM2ODlmN2ZlNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eBeizSZS/GX0r+l/KweSmUM1CkJ PWbnr2r8TCOMWbp7sdO5GUXqhrmX0Phzxb12/c1SbGb2hxv+Tge80+l03RZHgP+z cpOPSpZirk9qip1TQv/Tzg/22V9dYcn52CQq9m/z3i8uCGCu0HHN2JMRnqOOPnLa WwwDJiAHGlXud+gohuizWWzEVllsSRchxwUIT9gy3+wmp6CkEg1fAoPPuLnR95PS i7BlonjIq1A+6lRjd2fhsNO3ZKdNmDzbIfnw12yhMgcEgMAeqJuRC8Q4EBJxQdDF oS1oLPFiZftTrnYx2SHljH0Bo8bGGM4ffTaltqcAujLmd448ywOHP+PHEwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJPwHpCG1A1Qj1hC6YLyU2iff+TJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzYyNWE5 Mi1jMmQxLTRlYTgtOWNlOC1lOWM5MmI3MWY1MGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvNjI1YTky LWMyZDEtNGVhOC05Y2U4LWU5YzkyYjcxZjUwYy8xL2tfQWVrSWJVRFZDUFdFTHBn dkpUYUo5XzVNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwxZ5MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdQDANBgkqhkiG9w0BAQsFAAOCAQEAU+EdFSQvK+RWQQo9yovRAdwd+3VBnvCH n/kcIrt/aoHD677hzaWNbD6UYDqIxxAnDu8c/Sl6TNX4iRqTJEvS4A75NfUsDE85 TJa10cAUoO3HLoKKVrk63ojk0Syx8PgcsQ5PWgK+Lc3LnBQwGnL44mqCf/t3+Rxv 1aEZf0mrtlafcyf5j4Jo/k99AWJ6ggPAQkKIA3Nc/u5GHXTObne+SHudjcb6WjnX cezFXz7YQWAR+58LOA2SXDcsNNMleoFLDBUtdNyLrBd021A+nPKJ5v+HFMt9dw8o PKvir+RMg+HF5vT4qquBhnBFW+l/rS1Z3/jXthhBSoNYzVTn3+j2aA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:48 2026 by rpki-client