This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer File: rKjs_uUfaNX4A6rm-_wf3EGQJio.cer (raw, json) Hash identifier: KrJVu9VM2xAEVzs0ym6DxL9qlYDAcbUNqYN7pOVXRM8= Subject key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2A509C2A76AE519DD01B26EB26564 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210035 IP: 193.203.227.0/24 IP: 2a12:7d40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a5:09:c2:a7:6a:e5:19:dd:01:b2:6e:b2:65:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:21:74:8d:60:5d:3f:03:bd:d4:03:d8:98: a5:29:51:6b:fa:99:73:d2:e9:87:11:bd:0c:38:52: ef:e0:c2:65:b5:d2:1c:53:59:df:8e:f8:90:1a:67: a7:61:01:9f:f8:ad:fb:ea:72:cc:c8:6f:2d:e9:d9: d2:07:bf:a0:a2:84:48:fa:c0:3d:24:fb:0a:89:7b: e6:d9:64:bb:1c:e9:30:8d:4e:12:cb:49:3d:ff:c2: 0b:7e:f7:5a:4a:e4:3d:93:19:c7:b5:e8:81:ab:4b: 5c:3a:a7:74:6d:e7:d9:2f:81:7f:31:9c:86:3b:b2: f4:f4:fc:60:53:14:ba:e4:6e:10:3a:89:57:46:63: 68:6e:06:ea:7a:de:0d:5d:2c:21:c8:63:ee:90:33: ff:85:b7:d6:0f:64:7a:1b:36:8c:1b:12:d4:04:08: bd:da:b9:f0:53:bd:74:a4:17:f5:fa:b8:65:89:f1: 2c:35:56:8b:3f:c2:b7:00:aa:2e:84:03:d2:88:e3: fa:50:3e:8d:d6:ee:26:96:c9:9a:95:b4:46:e5:18: d5:b4:25:46:f8:d3:9e:8e:de:bc:f8:53:1e:15:65: e1:e8:c8:62:16:68:f3:d8:39:1f:aa:55:53:98:d9: 85:7e:c1:48:b0:50:af:00:ed:fa:86:b7:16:56:0f: 0d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.227.0/24 IPv6: 2a12:7d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210035 Signature Algorithm: sha256WithRSAEncryption 87:40:f5:09:49:fa:a3:80:85:b7:52:ce:8e:8c:db:a6:e3:ad: a9:d4:ea:c7:de:37:c1:71:96:b6:e0:fa:35:be:06:cb:61:7b: 71:6c:57:f6:42:53:24:e8:f9:ff:a7:03:98:09:07:31:86:ee: ab:4f:77:0d:b5:61:5b:bb:fb:a9:1f:63:9c:c3:e2:cd:35:e4: 51:a9:01:70:90:71:6b:e5:8d:4b:55:46:1c:12:99:94:91:b6: c4:65:01:5e:de:a7:93:ab:10:56:f0:8d:4b:f9:a3:c3:d3:cb: ec:63:67:7c:4e:bd:f6:94:2c:2c:0d:c4:db:1a:e8:cf:3e:40: 6b:68:b4:5c:b7:5f:9b:5f:ec:81:ef:cf:0c:4b:a2:c2:bd:cf: 7a:72:96:20:4b:22:71:1f:8e:ca:9a:76:06:a8:9e:bc:53:bd: b4:11:29:3c:07:13:ff:1f:70:0c:3c:23:18:32:83:b9:8b:25: 17:6c:ba:59:f2:df:4b:72:aa:a1:c0:58:ed:47:92:94:ee:3d: bf:4d:46:69:d7:35:59:e7:f9:12:04:17:51:9b:21:1a:a5:bb: a2:01:95:80:8a:36:ce:47:d1:16:ba:2a:f2:70:9c:8c:cc:c9: b1:29:03:f1:79:2a:1d:c4:97:8b:cd:02:23:59:27:60:89:c4: 7b:f4:8a:2c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8qUJwqdq5RndAbJusmVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E4ZWNmZWU1MWY2OGQ1ZjgwM2FhZTZmYmZjMWZkYzQxOTAyNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmghdI1gXT8DvdQD2JilKVFr+plz 0umHEb0MOFLv4MJltdIcU1nfjviQGmenYQGf+K376nLMyG8t6dnSB7+gooRI+sA9 JPsKiXvm2WS7HOkwjU4Sy0k9/8ILfvdaSuQ9kxnHteiBq0tcOqd0befZL4F/MZyG O7L09PxgUxS65G4QOolXRmNobgbqet4NXSwhyGPukDP/hbfWD2R6GzaMGxLUBAi9 2rnwU710pBf1+rhlifEsNVaLP8K3AKouhAPSiOP6UD6N1u4mlsmalbRG5RjVtCVG +NOejt68+FMeFWXh6MhiFmjz2DkfqlVTmNmFfsFIsFCvAO36hrcWVg8NUQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKyo7P7lH2jV+AOq5vv8H9xBkCYqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2IwOTUz MC05Y2EwLTQ0MDctOGEwNS1iYmQ3YjBhYmE2YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvYjA5NTMw LTljYTAtNDQwNy04YTA1LWJiZDdiMGFiYTZhYi8xL3JLanNfdVVmYU5YNEE2cm0t X3dmM0VHUUppby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwcvjMA0EAgACMAcDBQAqEn1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0czANBgkqhkiG9w0BAQsFAAOCAQEAh0D1CUn6o4CF t1LOjozbpuOtqdTqx943wXGWtuD6Nb4Gy2F7cWxX9kJTJOj5/6cDmAkHMYbuq093 DbVhW7v7qR9jnMPizTXkUakBcJBxa+WNS1VGHBKZlJG2xGUBXt6nk6sQVvCNS/mj w9PL7GNnfE699pQsLA3E2xrozz5Aa2i0XLdfm1/sge/PDEuiwr3PenKWIEsicR+O ypp2BqievFO9tBEpPAcT/x9wDDwjGDKDuYslF2y6WfLfS3KqocBY7UeSlO49v01G adc1Wef5EgQXUZshGqW7ogGVgIo2zkfRFroq8nCcjMzJsSkD8XkqHcSXi80CI1kn YInEe/SKLA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:11:06 2026 by rpki-client