This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer (raw, json) Hash identifier: 6qi7RXaNxaAAX4+72c6HN7UfKhbyuAP4tsU/VzWLNkg= Subject key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13873C8EC208D4EB0F807EB98A9534 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12902 AS: 60341 AS: 199816 IP: 79.98.168.0/21 IP: 185.32.232.0/22 IP: 185.44.244.0/22 IP: 185.45.116.0/22 IP: 185.47.20.0/22 IP: 185.50.92.0/22 IP: 185.82.188.0/22 IP: 185.187.20.0/22 IP: 185.225.220.0/22 IP: 185.240.112.0/22 IP: 194.180.197.0/24 IP: 194.180.216.0/24 IP: 194.180.219.0/24 IP: 194.180.227.0/24 IP: 217.77.128.0/19 IP: 2001:9c0::/29 IP: 2a00:c660::/29 IP: 2a01:77e0::/29 IP: 2a05:92c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:87:3c:8e:c2:08:d4:eb:0f:80:7e:b9:8a:95:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca1f4713024804c445403af63fa644b2a935d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:f2:81:4b:36:df:e9:05:94:f4:db:03:6a: 3e:8c:39:8a:f8:77:d1:23:bd:31:dc:31:eb:a2:24: d0:c0:70:bc:c7:3d:3d:dd:a1:3d:53:30:26:70:ae: 9a:68:f9:36:78:b5:d6:a9:23:6c:56:bf:10:d9:12: b6:95:d1:1b:1f:b8:aa:3e:c6:6f:b9:04:55:41:0c: 5a:b9:27:ea:62:ef:fe:f2:fe:17:0a:19:1d:1f:6b: 7f:c1:92:fc:0b:1d:74:a6:70:1c:bb:d0:78:bd:42: 0b:a4:89:2d:4e:4e:90:ca:20:c4:dc:56:a3:2d:21: 16:52:10:2a:a7:ac:38:09:58:bf:83:5b:9b:f8:1d: 2f:fa:36:3f:66:64:34:13:85:9e:40:40:28:05:62: fb:5d:bc:e2:bc:48:48:08:dd:d7:44:6b:d2:6d:f6: 0a:fc:07:7a:94:ef:65:c8:a3:08:50:ec:f2:b2:01: ae:4a:cc:e7:2f:fa:b0:f7:67:27:9a:86:30:04:96: 47:e8:72:1a:4e:c4:ea:54:16:a5:67:b0:c3:ca:56: c7:40:b3:db:4b:67:c9:02:e1:ed:60:c4:dc:39:7d: 49:8f:39:8d:49:28:24:6f:2a:ee:ec:1d:00:c7:d7: 9b:66:5d:a3:7f:8e:9d:3c:5e:eb:5b:93:8e:e6:52: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.168.0/21 185.32.232.0/22 185.44.244.0/22 185.45.116.0/22 185.47.20.0/22 185.50.92.0/22 185.82.188.0/22 185.187.20.0/22 185.225.220.0/22 185.240.112.0/22 194.180.197.0/24 194.180.216.0/24 194.180.219.0/24 194.180.227.0/24 217.77.128.0/19 IPv6: 2001:9c0::/29 2a00:c660::/29 2a01:77e0::/29 2a05:92c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12902 60341 199816 Signature Algorithm: sha256WithRSAEncryption 02:2e:e6:be:9a:55:8f:cc:da:b7:64:95:2f:1a:02:f7:cd:79: 12:37:3a:e7:fb:79:6e:be:a9:60:2b:d9:12:a6:a6:e7:14:cc: 1f:32:a0:b4:61:de:19:3b:40:1a:f9:0c:0f:5e:22:aa:77:ee: 6a:a2:eb:9f:21:9d:56:89:e4:60:ef:f6:21:dd:0f:26:0e:26: 5d:4f:1b:e6:43:68:51:82:90:14:d7:71:5e:36:b3:03:7e:f7: e6:3c:38:70:ba:b3:89:06:e0:e0:47:4f:ea:ca:da:cc:e8:08: f9:1c:d9:de:8c:d2:77:47:9b:cb:9e:9c:9d:4d:64:b2:41:99: 53:57:b0:eb:5d:72:1e:4f:96:74:1b:c0:d2:99:96:9f:f1:89: fa:85:9a:f5:c4:27:45:e2:41:be:b5:83:49:ae:62:48:7f:66: bc:72:3f:5f:f3:ba:b6:14:47:8b:94:46:9f:96:97:4c:3b:48: 4f:58:c4:fe:e0:bd:d3:90:a6:6d:64:e0:aa:e2:c8:5f:b8:29: 07:c8:e9:58:16:82:a3:05:a4:c1:cf:33:88:50:cb:12:87:04: 84:ba:e6:58:1a:35:87:83:46:18:08:be:ba:83:e5:c4:67:21: e3:82:41:25:ae:b4:09:d6:27:59:1c:f3:c9:e0:70:90:c1:04: d3:25:90:a6 -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZt/E4c8jsII1OsPgH65ipU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2ExZjQ3MTMwMjQ4MDRjNDQ1NDAzYWY2M2ZhNjQ0YjJhOTM1ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V3ygUs23+kFlPTbA2o+jDmK+HfR I70x3DHroiTQwHC8xz093aE9UzAmcK6aaPk2eLXWqSNsVr8Q2RK2ldEbH7iqPsZv uQRVQQxauSfqYu/+8v4XChkdH2t/wZL8Cx10pnAcu9B4vUILpIktTk6QyiDE3Faj LSEWUhAqp6w4CVi/g1ub+B0v+jY/ZmQ0E4WeQEAoBWL7XbzivEhICN3XRGvSbfYK /Ad6lO9lyKMIUOzysgGuSsznL/qw92cnmoYwBJZH6HIaTsTqVBalZ7DDylbHQLPb S2fJAuHtYMTcOX1JjzmNSSgkbyru7B0Ax9ebZl2jf46dPF7rW5OO5lJEnwIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFKyh9HEwJIBMRFQDr2P6ZEsqk10kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyL2M2ZDZi ZS1iZjRhLTQzZTUtYTkwOC01Y2EwMTZhMTAwNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzZkNmJl LWJmNGEtNDNlNS1hOTA4LTVjYTAxNmExMDA1NC8xL3JLSDBjVEFrZ0V4RVZBT3ZZ X3BrU3lxVFhTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGZBggrBgEF BQcBBwEB/wSBiTCBhjBgBAIAATBaAwQDT2KoAwQCuSDoAwQCuSz0AwQCuS10AwQC uS8UAwQCuTJcAwQCuVK8AwQCubsUAwQCueHcAwQCufBwAwQAwrTFAwQAwrTYAwQA wrTbAwQAwrTjAwQF2U2AMCIEAgACMBwDBQMgAQnAAwUDKgDGYAMFAyoBd+ADBQMq BZLAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAjJmAgMA67UCAwMMiDANBgkqhkiG 9w0BAQsFAAOCAQEAAi7mvppVj8zat2SVLxoC9815Ejc65/t5br6pYCvZEqam5xTM HzKgtGHeGTtAGvkMD14iqnfuaqLrnyGdVonkYO/2Id0PJg4mXU8b5kNoUYKQFNdx XjazA3735jw4cLqziQbg4EdP6srazOgI+RzZ3ozSd0eby56cnU1kskGZU1ew611y Hk+WdBvA0pmWn/GJ+oWa9cQnReJBvrWDSa5iSH9mvHI/X/O6thRHi5RGn5aXTDtI T1jE/uC905CmbWTgquLIX7gpB8jpWBaCowWkwc8ziFDLEocEhLrmWBo1h4NGGAi+ uoPlxGch44JBJa60CdYnWRzzyeBwkMEE0yWQpg== -----END CERTIFICATE-----Generated at Mon Jan 26 20:27:59 2026 by rpki-client