This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer File: koCqYVCQTiD4hKRjybZq5tQWG5s.cer (raw, json) Hash identifier: 0yRFfuM6HsKo4D86Y6rAn4aPEYIpoPGwu6dom+Buz1Y= Subject key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E386CEA39F5147947C3599AE73A028B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201520 IP: 185.15.196.0 -- 185.15.198.255 IP: 185.95.0.0/24 IP: 185.95.2.0/23 IP: 2a04:fc80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6c:ea:39:f5:14:79:47:c3:59:9a:e7:3a:02:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:a1:2d:ac:0b:13:21:f4:b6:06:c3:8d:95: 45:94:b9:d4:b6:64:bd:16:51:e6:a5:92:5b:bb:9f: 29:62:78:e2:88:96:9b:55:cd:53:5f:b7:1e:98:94: f2:7a:6c:7e:04:b3:76:01:bd:ef:86:99:07:64:31: c9:de:b6:3b:6a:7c:99:b5:be:8a:37:79:8a:fd:16: d0:af:1e:65:30:26:97:90:f2:b4:4c:cf:93:fe:e1: a5:e2:d6:00:ff:7d:32:ce:60:d0:0d:82:36:30:cc: 50:9a:b5:cd:d9:ab:6a:46:5f:76:6f:a1:fc:86:f8: 0e:0e:3f:8c:da:43:d7:f6:dc:9c:4f:10:da:6c:e2: 36:3f:1b:c4:e8:a2:7f:1c:e2:0c:2c:82:80:14:ff: c9:d7:6d:50:ed:9f:27:68:9a:4a:61:51:aa:58:ec: 2e:23:ad:c1:71:7b:d8:d8:a1:fb:3b:b3:7a:02:8c: e5:a0:54:ae:bf:7e:dd:5f:91:21:d3:b6:1c:42:f5: 1c:78:c9:19:85:cf:65:d3:db:c8:11:e2:35:f4:a8: 4a:8c:08:c1:e6:f2:56:c3:d0:5b:01:a9:41:d6:18: df:95:87:6f:3e:ce:d3:c7:08:bc:8d:cb:97:24:58: 13:ce:43:a4:b8:73:55:75:d0:d4:cc:ff:9c:27:1c: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.196.0-185.15.198.255 185.95.0.0/24 185.95.2.0/23 IPv6: 2a04:fc80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201520 Signature Algorithm: sha256WithRSAEncryption 6b:a3:d8:08:b5:e8:25:ff:5b:49:4f:81:bc:12:77:5e:57:93: 01:39:45:4d:4f:e1:14:b5:05:aa:53:2c:e7:2b:82:0d:8b:fc: 95:e2:c7:74:e6:14:85:8d:88:da:61:be:eb:e9:12:dd:67:23: a2:af:68:59:1d:7d:28:eb:7c:8e:16:42:db:f2:46:b8:3b:6c: da:8f:d5:11:c4:66:5e:ae:97:c3:9f:4f:0b:f4:b3:7f:df:a7: 89:60:d4:c3:cd:d3:1c:37:df:98:ce:a7:1d:bf:d9:11:d6:16: b1:7f:ad:a6:5b:33:79:c2:30:5b:e7:62:01:89:61:9a:b1:54: a9:82:90:a0:e2:88:f4:45:de:00:fa:ac:71:00:f4:68:31:0d: d6:52:29:40:f7:97:b8:5d:4b:b2:06:26:f5:b8:de:8c:c1:c9: 41:62:11:97:12:4c:18:c4:56:ef:b8:a1:0b:d0:43:40:a7:b2: 12:73:f6:0b:e5:dd:39:9d:d5:63:fc:f5:8b:b3:d8:c9:a9:99: 79:76:96:17:17:40:8f:97:7e:00:50:39:5e:8a:32:69:a4:b5: e6:c2:e3:31:9c:ad:1c:3d:75:0a:e7:5d:88:d0:29:48:e2:ce: 07:b7:b3:6e:c4:2e:8e:da:c5:84:86:3c:f5:d8:69:d0:d2:b4: 8d:a8:e8:73 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt+OGzqOfUUeUfDWZrnOgKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjgwYWE2MTUwOTA0ZTIwZjg4NGE0NjNjOWI2NmFlNmQ0MTYxYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpChLawLEyH0tgbDjZVFlLnUtmS9 FlHmpZJbu58pYnjiiJabVc1TX7cemJTyemx+BLN2Ab3vhpkHZDHJ3rY7anyZtb6K N3mK/RbQrx5lMCaXkPK0TM+T/uGl4tYA/30yzmDQDYI2MMxQmrXN2atqRl92b6H8 hvgODj+M2kPX9tycTxDabOI2PxvE6KJ/HOIMLIKAFP/J121Q7Z8naJpKYVGqWOwu I63BcXvY2KH7O7N6AozloFSuv37dX5Eh07YcQvUceMkZhc9l09vIEeI19KhKjAjB 5vJWw9BbAalB1hjflYdvPs7Txwi8jcuXJFgTzkOkuHNVddDUzP+cJxxUDwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFJKAqmFQkE4g+ISkY8m2aubUFhubMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2QwOGJi ZC0wOGIwLTRhMjItOGI1Ny03ZTAxNzExNTBjZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDA4YmJk LTA4YjAtNGEyMi04YjU3LTdlMDE3MTE1MGNmYi8xL2tvQ3FZVkNRVGlENGhLUmp5 YlpxNXRRV0c1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaMAwDBAK5D8QDBAC5D8YDBAC5XwADBAG5XwIwDQQC AAIwBwMFAyoE/IAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxMwMA0GCSqGSIb3 DQEBCwUAA4IBAQBro9gItegl/1tJT4G8EndeV5MBOUVNT+EUtQWqUyznK4INi/yV 4sd05hSFjYjaYb7r6RLdZyOir2hZHX0o63yOFkLb8ka4O2zaj9URxGZerpfDn08L 9LN/36eJYNTDzdMcN9+Yzqcdv9kR1haxf62mWzN5wjBb52IBiWGasVSpgpCg4oj0 Rd4A+qxxAPRoMQ3WUilA95e4XUuyBib1uN6MwclBYhGXEkwYxFbvuKEL0ENAp7IS c/YL5d05ndVj/PWLs9jJqZl5dpYXF0CPl34AUDleijJppLXmwuMxnK0cPXUK512I 0ClI4s4Ht7NuxC6O2sWEhjz12GnQ0rSNqOhz -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:01 2026 by rpki-client