This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer File: kar8rbbFKYTjVYnrd1jwUKrO_HY.cer (raw, json) Hash identifier: qTv+EGhlEjMJIqr0sKasmo5+/yDEykaLhkAafP7UuUI= Subject key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2EFC9965DAD3D721FDBF4F7432BC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.226.120.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ef:c9:96:5d:ad:3d:72:1f:db:f4:f7:43:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91aafcadb6c52984e35589eb7758f050aacefc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:27:25:f9:02:8a:1f:41:aa:34:9d:22:64:56: a7:f4:cf:6d:fa:fa:54:9b:bb:92:68:d6:6e:56:9a: 88:24:fc:25:48:cf:c1:b1:7d:94:ee:4d:b4:e5:f9: 07:c2:55:bf:7e:a5:a4:c9:d3:eb:8c:f0:43:95:69: cc:f4:07:8c:50:27:ef:de:e1:93:ff:48:d1:2f:4b: 6f:8d:47:71:6c:ce:2a:66:96:87:a5:e4:63:d2:07: 31:26:7f:bf:d9:f0:42:19:45:98:47:95:31:98:5a: df:eb:07:e3:f1:3e:73:15:a7:9a:0f:98:93:d2:1f: 87:ae:3f:ea:00:af:71:2d:03:2d:1b:3d:85:3d:ac: 88:a0:ec:e0:d2:04:0c:ca:34:c6:d4:5d:44:a9:ed: 02:86:78:b1:59:fb:87:8b:e1:45:2e:ed:e8:8e:c0: c7:b0:5b:1d:1f:35:cf:cd:d2:41:02:d1:6c:bb:97: b7:d6:8e:ea:83:b4:99:96:1f:ea:3c:50:51:e9:b8: b0:39:ec:ad:44:ca:fa:36:f5:c8:d3:06:52:ea:a5: 09:74:cb:47:04:6d:6f:00:4e:0c:56:43:5b:93:f1: cb:a0:0f:c6:f1:02:dc:56:a7:ce:17:42:26:4d:76: 1e:5d:f4:c3:2e:a4:36:a8:ac:14:2a:9f:e3:a5:4e: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.120.0/24 Signature Algorithm: sha256WithRSAEncryption 09:49:b2:16:98:b7:9b:9e:8b:99:c4:2d:7d:e8:0b:60:24:0c: fa:41:0f:a6:8b:ec:58:3a:9b:7a:d4:7f:a8:97:eb:ed:b3:42: 56:33:98:b7:b2:37:93:7e:88:a3:b4:1a:a2:37:3b:7b:77:37: 92:d2:6c:7c:5b:60:cb:d1:b5:64:f0:5c:e9:8f:cc:77:06:df: 91:f2:ee:08:c5:e6:19:ed:fa:a9:36:37:5b:e8:49:ad:ea:24: cc:22:11:4b:7e:a0:57:dc:05:0e:0b:1d:b0:27:3f:b0:47:4a: 22:33:e6:64:40:10:5d:ae:6c:50:24:92:58:e1:78:fc:6e:00: 69:e7:dc:05:b1:4f:ff:c2:01:c2:4b:0d:82:37:5a:2a:2e:08: 70:d2:1b:c3:5b:bc:04:4c:11:a5:4e:d3:76:e1:08:94:54:f4: b4:bc:66:1f:fa:a1:e6:a8:c4:15:67:8a:fb:28:75:6c:bb:85: 18:77:ae:fc:1f:80:0b:52:ff:50:1b:c4:32:92:c2:57:9d:9b: 18:65:68:58:3b:bc:ec:a7:a0:39:14:45:30:9b:4c:b2:a3:57: fc:5e:b1:20:d3:6e:86:f6:cf:dc:e6:4b:3c:b4:2b:76:69:83: d5:c8:c8:cb:d6:52:56:3a:b4:aa:fe:9e:a9:76:28:c3:1b:cb: ce:94:39:0c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4ou/Jll2tPXIf2/T3QyvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWFhZmNhZGI2YzUyOTg0ZTM1NTg5ZWI3NzU4ZjA1MGFhY2VmYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjicl+QKKH0GqNJ0iZFan9M9t+vpU m7uSaNZuVpqIJPwlSM/BsX2U7k205fkHwlW/fqWkydPrjPBDlWnM9AeMUCfv3uGT /0jRL0tvjUdxbM4qZpaHpeRj0gcxJn+/2fBCGUWYR5UxmFrf6wfj8T5zFaeaD5iT 0h+Hrj/qAK9xLQMtGz2FPayIoOzg0gQMyjTG1F1Eqe0ChnixWfuHi+FFLu3ojsDH sFsdHzXPzdJBAtFsu5e31o7qg7SZlh/qPFBR6biwOeytRMr6NvXI0wZS6qUJdMtH BG1vAE4MVkNbk/HLoA/G8QLcVqfOF0ImTXYeXfTDLqQ2qKwUKp/jpU6MiwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJGq/K22xSmE41WJ63dY8FCqzvx2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2ExMmIw YS1kNDhkLTRkM2ItYmM0Ny0wNTU3YmQ3MjE3ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvYTEyYjBh LWQ0OGQtNGQzYi1iYzQ3LTA1NTdiZDcyMTdmMS8xL2thcjhyYmJGS1lUalZZbnJk MWp3VUtyT19IWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALuJ4MA0GCSqGSIb3DQEBCwUAA4IBAQAJSbIW mLebnouZxC196AtgJAz6QQ+mi+xYOpt61H+ol+vts0JWM5i3sjeTfoijtBqiNzt7 dzeS0mx8W2DL0bVk8Fzpj8x3Bt+R8u4IxeYZ7fqpNjdb6Emt6iTMIhFLfqBX3AUO Cx2wJz+wR0oiM+ZkQBBdrmxQJJJY4Xj8bgBp59wFsU//wgHCSw2CN1oqLghw0hvD W7wETBGlTtN24QiUVPS0vGYf+qHmqMQVZ4r7KHVsu4UYd678H4ALUv9QG8QyksJX nZsYZWhYO7zsp6A5FEUwm0yyo1f8XrEg026G9s/c5ks8tCt2aYPVyMjL1lJWOrSq /p6pdijDG8vOlDkM -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:15 2026 by rpki-client