This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer (raw, json) Hash identifier: 71vFwl96P4udDDd8Cuq8Z3i6vTwiXQHocdki3vIfStA= Subject key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79114A0C595EBACB8502FF189001C419 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8699 IP: 185.120.28.0/22 IP: 2a03:a3e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4a:0c:59:5e:ba:cb:85:02:ff:18:90:01:c4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=922e330b5879590abae81bf40a91a5101bc18fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:47:b3:44:8e:d3:e9:92:f0:ca:b5:f7:c7: 49:a6:4e:dd:7b:c6:3e:13:07:92:68:23:79:da:9a: ac:60:09:ee:ec:ae:66:73:84:a6:a1:0c:34:3a:a3: ed:bb:01:f5:b6:eb:e4:e8:7c:d1:67:93:c7:79:0f: 88:a9:e0:21:8f:28:4f:d5:96:f1:c4:f8:3c:dd:61: d9:4a:39:16:b1:c6:87:ba:ee:9f:c1:77:07:21:dc: d5:55:a7:3b:d4:be:87:95:98:7e:90:af:fa:b0:ff: 3a:56:ca:67:eb:01:66:d9:35:3f:68:48:06:d5:50: 8f:96:43:63:d6:92:16:a1:32:4d:1b:4e:79:5c:2a: 15:6b:4b:a1:59:52:16:6b:0f:37:ac:12:07:04:7a: 73:5e:55:58:48:55:cb:f0:18:52:cc:52:25:df:d3: 49:6b:14:73:19:be:fb:0d:d9:23:db:c4:a2:95:90: a5:be:5c:65:6f:56:dc:cf:59:87:5c:a2:c9:ce:f6: 31:b6:88:00:4f:a2:e1:f5:8e:e7:d5:3b:5c:d2:28: 70:f9:10:36:8d:68:80:2a:13:cd:6f:a1:ca:4f:23: 13:cb:9a:a4:f1:f5:54:2d:bb:f8:55:3c:dd:69:fa: e5:e8:ee:85:9c:ef:5c:fb:f2:1c:a9:a5:f5:e5:d7: 5c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.28.0/22 IPv6: 2a03:a3e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8699 Signature Algorithm: sha256WithRSAEncryption 28:59:51:56:5a:fc:3d:80:f3:3c:fe:f3:12:1e:37:04:00:a7: bd:76:99:08:81:41:b2:d3:5b:1c:bb:4f:92:3d:41:23:a4:0c: a0:a2:58:92:b2:a0:3f:60:0f:47:da:3a:6e:3a:5c:f3:74:03: 0e:a4:84:ec:e8:38:dc:6d:a2:8b:af:ba:ff:01:ee:64:3f:82: d5:be:bc:2a:fe:a8:23:d4:9d:d4:10:7e:60:10:fa:d4:02:9c: 00:0f:1c:e0:13:ee:7b:d7:af:4d:73:34:79:b4:00:66:ec:ad: 50:88:1d:f6:4a:dc:39:91:e7:46:b7:0b:26:7e:37:75:09:ad: 2f:2a:e9:8b:68:cc:19:71:20:69:35:7c:c9:78:7d:6a:c9:09: 89:97:54:dd:bd:02:dc:94:ea:04:3b:12:7b:69:e2:9b:92:6e: 3b:ab:a7:3c:44:0c:48:a3:a5:d2:25:d0:ff:96:50:56:97:ca: 18:6c:af:77:26:78:3c:bb:04:7f:af:15:56:64:57:1a:f5:52: 55:db:c8:9c:67:92:48:40:5d:17:83:43:f5:f7:51:48:a4:e3: 3b:e9:e4:25:6b:10:ab:b1:f1:4f:8e:24:28:b5:4c:be:82:8b: 90:58:2f:ee:0e:82:1d:10:74:32:3e:54:50:7f:a0:18:63:2c: f3:46:e6:1a -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt5EUoMWV66y4UC/xiQAcQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjJlMzMwYjU4Nzk1OTBhYmFlODFiZjQwYTkxYTUxMDFiYzE4ZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUZHs0SO0+mS8Mq198dJpk7de8Y+ EweSaCN52pqsYAnu7K5mc4SmoQw0OqPtuwH1tuvk6HzRZ5PHeQ+IqeAhjyhP1Zbx xPg83WHZSjkWscaHuu6fwXcHIdzVVac71L6HlZh+kK/6sP86Vspn6wFm2TU/aEgG 1VCPlkNj1pIWoTJNG055XCoVa0uhWVIWaw83rBIHBHpzXlVYSFXL8BhSzFIl39NJ axRzGb77Ddkj28SilZClvlxlb1bcz1mHXKLJzvYxtogAT6Lh9Y7n1Ttc0ihw+RA2 jWiAKhPNb6HKTyMTy5qk8fVULbv4VTzdafrl6O6FnO9c+/IcqaX15ddctwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFJIuMwtYeVkKuugb9AqRpRAbwY+gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2YxODBm Zi0zMzZjLTRiNDUtOTM3OC01Njg2NzJjMjVjYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvZjE4MGZm LTMzNmMtNGI0NS05Mzc4LTU2ODY3MmMyNWNhOC8xL2tpNHpDMWg1V1FxNjZCdjBD cEdsRUJ2Qmo2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXgcMA0EAgACMAcDBQAqA6PgMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAiH7MA0GCSqGSIb3DQEBCwUAA4IBAQAoWVFWWvw9gPM8 /vMSHjcEAKe9dpkIgUGy01scu0+SPUEjpAygoliSsqA/YA9H2jpuOlzzdAMOpITs 6DjcbaKLr7r/Ae5kP4LVvrwq/qgj1J3UEH5gEPrUApwADxzgE+57169NczR5tABm 7K1QiB32Stw5kedGtwsmfjd1Ca0vKumLaMwZcSBpNXzJeH1qyQmJl1TdvQLclOoE OxJ7aeKbkm47q6c8RAxIo6XSJdD/llBWl8oYbK93Jng8uwR/rxVWZFca9VJV28ic Z5JIQF0Xg0P191FIpOM76eQlaxCrsfFPjiQotUy+gouQWC/uDoIdEHQyPlRQf6AY YyzzRuYa -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:53 2026 by rpki-client