This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer File: rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer (raw, json) Hash identifier: X0k9kpDlpw47atz70ZGTKGpTinRDx0b6TWWuKC+OBSU= Subject key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED19D640DD169E81C02A6D62CF348F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39882 AS: 198849 AS: 201071 IP: 91.109.248.0/21 IP: 92.249.5.0/24 IP: 185.114.228.0/22 IP: 217.147.112.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:19:d6:40:dd:16:9e:81:c0:2a:6d:62:cf:34:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acf910f36291c3c224ddb596d956543197f163de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:55:2a:1d:d4:5f:1d:1d:34:38:27:a5:a3: 81:57:31:10:a0:ed:1d:64:cb:a6:c8:95:cc:ce:a5: 9f:b0:ba:17:9a:96:10:20:45:83:db:a0:1b:d4:49: 90:b4:0d:1f:d6:89:c0:ce:93:b4:c7:54:f0:ef:98: 00:0a:ba:f0:97:f4:64:74:d1:6c:fc:7b:b6:50:4a: 16:c6:63:3f:82:24:ce:3d:ce:1d:e2:2b:c4:8a:6a: 48:de:35:c8:e2:36:fc:59:2c:e5:fa:f7:aa:49:a1: b4:5e:16:14:4a:b6:86:ab:04:15:29:75:9c:59:11: c5:28:ee:17:e1:56:f9:52:3c:f4:df:a3:56:4b:48: a2:36:83:31:04:33:f5:15:58:86:09:e1:5b:4d:04: 30:b2:cb:de:f2:db:c6:f2:42:de:ec:4c:ae:ad:53: 2d:ac:4f:10:58:7c:fd:44:16:e6:40:41:de:45:2c: 27:ab:27:4f:a4:86:a5:54:c5:11:ae:04:9f:ba:08: 3b:f7:e0:56:24:72:86:b6:9c:3d:69:2f:db:2f:c9: e5:11:ab:a7:68:5b:84:77:28:00:f5:a2:d2:98:7c: c0:af:da:50:4d:0a:dd:4e:57:d1:69:3b:02:91:09: 2b:23:5b:18:52:e7:e0:ac:c6:03:38:9f:8a:e1:1a: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.248.0/21 92.249.5.0/24 185.114.228.0/22 217.147.112.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39882 198849 201071 Signature Algorithm: sha256WithRSAEncryption 4e:09:c4:30:bc:1c:45:b1:4e:b3:22:4c:03:b8:6c:ce:16:fd: 83:7c:e9:91:e9:88:25:6d:f9:7a:44:88:c1:36:86:ec:9d:5a: ec:29:93:fb:87:63:4a:8e:ef:66:00:c1:9e:9d:2f:2e:5c:3b: 6d:e7:6a:2d:a1:4d:bb:a1:2b:b8:01:ae:d1:e3:d2:94:a3:bb: 6a:13:bd:04:78:68:50:f3:cd:88:cc:27:81:a0:2b:fb:ed:38: f3:8b:3b:bc:f3:b0:b5:91:14:af:43:97:81:ec:b4:37:3d:1c: d6:31:7d:01:8b:6f:81:42:da:4f:02:59:cf:5f:8c:37:9d:8a: 47:b4:e2:66:21:d0:ee:92:66:61:29:3c:7e:0f:18:43:a3:b6: e8:9b:2b:2b:c7:a0:a2:c4:f7:f0:ca:d8:15:00:88:d2:f4:79: 10:eb:0b:9c:9f:7a:65:b6:40:9a:ef:fa:89:99:e0:40:90:33: 2f:29:ae:63:85:fb:cb:0c:0d:e9:02:1a:fb:e3:2c:ef:05:dd: 2d:93:57:56:7b:11:57:ef:80:96:79:5c:3c:bf:c4:8a:30:35: 99:8f:4a:80:00:6e:34:1c:43:68:9d:82:f3:10:e5:54:cb:a4: 30:44:8a:41:83:57:e5:47:8b:8a:26:22:9d:59:f0:a4:ee:c2: 00:19:6e:11 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt57RnWQN0WnoHAKm1izzSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2Y5MTBmMzYyOTFjM2MyMjRkZGI1OTZkOTU2NTQzMTk3ZjE2M2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/VVKh3UXx0dNDgnpaOBVzEQoO0d ZMumyJXMzqWfsLoXmpYQIEWD26Ab1EmQtA0f1onAzpO0x1Tw75gACrrwl/RkdNFs /Hu2UEoWxmM/giTOPc4d4ivEimpI3jXI4jb8WSzl+veqSaG0XhYUSraGqwQVKXWc WRHFKO4X4Vb5Ujz036NWS0iiNoMxBDP1FViGCeFbTQQwssve8tvG8kLe7EyurVMt rE8QWHz9RBbmQEHeRSwnqydPpIalVMURrgSfugg79+BWJHKGtpw9aS/bL8nlEaun aFuEdygA9aLSmHzAr9pQTQrdTlfRaTsCkQkrI1sYUufgrMYDOJ+K4Rqs/wIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFKz5EPNikcPCJN21ltlWVDGX8WPeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzFmNWUw Ny0zMmI2LTQxMTQtOGIwZC1kM2I1OGY2OTgxNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvMWY1ZTA3 LTMyYjYtNDExNC04YjBkLWQzYjU4ZjY5ODE0OC8xL3JQa1E4MktSdzhJazNiV1cy VlpVTVpmeFk5NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQDW234AwQAXPkFAwQCuXLkAwQE2ZNwMCQGCCsG AQUFBwEIAQH/BBUwE6ARMA8CAwCbygIDAwjBAgMDEW8wDQYJKoZIhvcNAQELBQAD ggEBAE4JxDC8HEWxTrMiTAO4bM4W/YN86ZHpiCVt+XpEiME2huydWuwpk/uHY0qO 72YAwZ6dLy5cO23nai2hTbuhK7gBrtHj0pSju2oTvQR4aFDzzYjMJ4GgK/vtOPOL O7zzsLWRFK9Dl4HstDc9HNYxfQGLb4FC2k8CWc9fjDedike04mYh0O6SZmEpPH4P GEOjtuibKyvHoKLE9/DK2BUAiNL0eRDrC5yfemW2QJrv+omZ4ECQMy8prmOF+8sM DekCGvvjLO8F3S2TV1Z7EVfvgJZ5XDy/xIowNZmPSoAAbjQcQ2idgvMQ5VTLpDBE ikGDV+VHi4omIp1Z8KTuwgAZbhE= -----END CERTIFICATE-----Generated at Wed Jan 21 13:51:17 2026 by rpki-client