This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer (raw, json) Hash identifier: 2xT5wbW4E4t8rdPWU4lhhGccHxX+UuEGSLaHqdhzD54= Subject key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E345E51907527E9C6F9F54D56C87F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49675 AS: 201268 IP: 46.17.200.0/21 IP: 89.169.16.0/22 IP: 91.221.248.0/23 IP: 185.161.180.0/22 IP: 2a02:26a8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:34:5e:51:90:75:27:e9:c6:f9:f5:4d:56:c8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:38:84:81:0e:0a:5b:c5:75:a8:a1:1a:a4: 89:bb:75:84:d9:c8:f8:aa:a4:98:5e:c5:af:c0:31: 54:3d:f9:f4:62:10:e5:ef:7a:80:48:3c:58:91:bc: 02:e1:76:fe:f3:ad:45:99:f7:3a:b4:b3:7b:04:d1: df:f7:bb:6e:b7:a2:9c:3c:a7:a2:d4:09:15:00:58: a2:75:d6:dd:45:32:48:c8:55:d9:5c:cf:ea:60:ed: 6c:6c:b2:e1:dc:08:98:1f:08:58:87:18:75:ca:d9: 16:e4:42:51:8e:b1:c9:4c:b6:86:49:d6:cc:b0:94: fc:79:14:6b:0c:6d:62:7b:9b:34:4a:e5:48:4b:b5: 4a:f2:71:89:14:5f:5b:21:fc:83:20:79:3f:92:05: 45:09:af:f2:68:77:04:c3:c6:b2:8a:7a:c5:c0:b8: ca:84:be:ce:ae:2a:e3:9b:47:ad:15:42:dc:1f:89: 63:7e:1d:b5:7c:7c:f5:7e:21:4d:68:38:50:76:b1: ed:9d:9b:bd:c0:42:ec:dc:d5:e5:66:0b:c6:28:12: 79:c5:a4:84:20:1a:9f:fa:f3:85:35:c3:0f:2b:00: e8:b5:b7:cf:85:d4:2a:3a:b8:70:89:26:74:51:ab: a7:12:44:76:25:81:90:43:89:2d:9f:60:b6:a2:ff: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.200.0/21 89.169.16.0/22 91.221.248.0/23 185.161.180.0/22 IPv6: 2a02:26a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49675 201268 Signature Algorithm: sha256WithRSAEncryption 85:8a:d5:0e:f3:55:69:8f:ba:ea:e7:60:05:5e:7e:b7:d2:4b: 12:de:b3:32:fd:d3:d7:11:fb:b8:dd:1b:74:3c:9d:f2:8f:c5: 73:aa:17:6e:91:10:d7:6d:1e:83:d4:05:9d:3c:1f:9a:42:fa: 25:c4:41:2a:07:68:62:a0:95:50:01:bd:1d:37:cc:6e:65:20: 4e:49:0d:5a:db:ba:ef:c7:89:7a:61:6f:a3:37:ec:5a:33:6a: 30:8a:04:4e:29:f6:49:46:cd:80:03:32:d5:9c:b6:14:fb:e2: c4:20:c4:bf:65:2b:49:57:56:e8:25:37:a2:05:b6:06:36:2d: 15:c8:3b:eb:85:b7:3a:18:94:f1:4d:c1:f1:25:78:d8:2b:99: be:38:8a:2b:24:3a:95:47:e0:82:31:4d:f1:74:32:d3:24:54: 91:19:1a:d4:f7:73:0c:10:38:a4:98:f8:23:7e:86:f8:28:73: c9:02:e5:6a:17:53:77:da:5f:73:f2:ed:26:2b:52:82:e6:ee: 17:52:25:a5:ba:32:94:d3:ad:fc:a4:d8:45:77:ec:29:56:49: 79:58:b2:1e:26:c8:cd:c8:72:bd:68:ae:04:7f:80:73:88:0e: f6:52:46:02:94:df:72:01:16:86:96:38:e4:0a:33:4f:ac:63: ab:fe:54:b9 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt5fjReUZB1J+nG+fVNVsh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWQwMWM0N2YwMGU2NGYzNWNjNzUyZDAzYjM0YTcxYjcxNDA2YjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE04hIEOClvFdaihGqSJu3WE2cj4 qqSYXsWvwDFUPfn0YhDl73qASDxYkbwC4Xb+861Fmfc6tLN7BNHf97tut6KcPKei 1AkVAFiiddbdRTJIyFXZXM/qYO1sbLLh3AiYHwhYhxh1ytkW5EJRjrHJTLaGSdbM sJT8eRRrDG1ie5s0SuVIS7VK8nGJFF9bIfyDIHk/kgVFCa/yaHcEw8ayinrFwLjK hL7Orirjm0etFULcH4ljfh21fHz1fiFNaDhQdrHtnZu9wELs3NXlZgvGKBJ5xaSE IBqf+vOFNcMPKwDotbfPhdQqOrhwiSZ0UaunEkR2JYGQQ4ktn2C2ov8VfQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFJHQHEfwDmTzXMdS0Ds0pxtxQGs/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2IwZmMw Yy1jNTM3LTQwYjQtOWI1Yi01NmIwMDZlZjBkM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvYjBmYzBj LWM1MzctNDBiNC05YjViLTU2YjAwNmVmMGQzYi8xL2tkQWNSX0FPWlBOY3gxTFFP elNuRzNGQWF6OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDLhHIAwQCWakQAwQBW934AwQCuaG0MA0EAgAC MAcDBQAqAiaoMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDCCwIDAxI0MA0GCSqG SIb3DQEBCwUAA4IBAQCFitUO81Vpj7rq52AFXn630ksS3rMy/dPXEfu43Rt0PJ3y j8VzqhdukRDXbR6D1AWdPB+aQvolxEEqB2hioJVQAb0dN8xuZSBOSQ1a27rvx4l6 YW+jN+xaM2owigROKfZJRs2AAzLVnLYU++LEIMS/ZStJV1boJTeiBbYGNi0VyDvr hbc6GJTxTcHxJXjYK5m+OIorJDqVR+CCMU3xdDLTJFSRGRrU93MMEDikmPgjfob4 KHPJAuVqF1N32l9z8u0mK1KC5u4XUiWlujKU0638pNhFd+wpVkl5WLIeJsjNyHK9 aK4Ef4BziA72UkYClN9yARaGljjkCjNPrGOr/lS5 -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:21 2026 by rpki-client