This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer File: rkopxhOOLZPVSjYyi5TLH4o4Kms.cer (raw, json) Hash identifier: V+L0s6xfsaEfrOSC24uGIs2ZC17JUqk6CkldVe5oWtg= Subject key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC1575F4D4F65D7B12954B826281D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202611 AS: 213952 IP: 185.32.184.0/23 IP: 2a0b:1440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:15:75:f4:d4:f6:5d:7b:12:95:4b:82:62:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:dd:a3:f2:df:6d:cb:5f:7f:07:c1:70:cb: bb:47:e6:dd:9d:76:ed:b7:ff:62:fa:81:af:a8:db: 9d:ac:8e:fd:5c:31:d9:6e:9f:df:e0:29:0c:01:0e: 6a:5a:2d:36:be:93:05:b1:8e:a8:e9:87:fd:b0:f9: 0c:f4:4c:da:80:11:51:0b:5c:ca:09:8d:02:9d:1a: c1:bc:b8:d7:04:84:72:18:af:7c:21:68:40:9b:fd: 73:3a:eb:28:67:69:cd:3a:35:a3:31:db:55:f4:99: ba:fa:be:7e:4d:61:ae:04:9f:67:41:d5:ed:ca:3c: 31:37:70:1d:84:c4:8f:49:44:8b:52:0d:de:81:64: cf:6a:80:e4:5e:91:bf:f2:5d:19:7c:d3:4f:42:13: 37:b2:7f:50:8b:6a:3c:28:ee:e3:4b:7d:ba:91:c4: 08:43:6d:36:18:34:25:4e:11:8d:6f:1d:7e:b8:c4: 80:3a:8e:8b:fe:68:1a:df:74:be:f4:9c:d1:a5:fc: 90:fc:92:be:a9:26:18:a2:50:a4:cc:d8:fe:75:05: 25:2e:7b:de:04:e4:1c:e2:76:4c:10:e7:4e:03:06: 51:05:6d:ce:e5:f2:62:21:df:86:89:b2:15:ef:7b: 98:ea:82:2b:23:66:22:88:4f:70:f1:a5:f1:cf:9e: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.184.0/23 IPv6: 2a0b:1440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202611 213952 Signature Algorithm: sha256WithRSAEncryption a8:4b:23:d0:23:22:36:c4:78:f8:a4:ef:4a:14:b5:05:2a:27: fa:3d:eb:c9:49:6e:69:23:0d:8b:b3:a2:d2:57:ad:5a:b8:73: be:4b:b1:9a:0b:7b:49:57:9c:45:a2:a2:56:a3:0c:a4:09:e5: aa:be:b7:45:4d:e6:02:e8:e7:a1:fe:33:44:fc:15:2d:0a:b2: 8b:8d:f5:11:9a:09:86:a6:47:68:f6:cc:07:6e:b4:01:64:07: e5:f0:43:be:d1:11:34:ec:21:d2:81:87:73:c5:88:df:66:80: 91:19:ee:f4:d7:64:d3:fc:22:19:c0:f5:d3:1d:e7:ef:1d:33: 00:c0:39:d8:27:6a:5e:95:e5:d6:30:2e:6d:d4:81:77:ec:83: ce:86:c7:33:0f:11:99:33:ea:9c:45:69:98:83:0d:89:b7:00: 80:e9:95:35:b2:8a:87:af:28:fa:90:2d:a9:05:40:0c:5a:9a: 98:26:51:e1:94:a5:fb:5a:2b:99:cb:d2:64:bb:d9:2a:af:f8: c7:b3:6d:41:7a:29:72:11:d4:9c:f8:bd:06:00:e9:c7:13:1b: fe:62:65:db:1a:9f:d7:19:97:e9:1f:ac:e5:f3:f1:3a:c6:ac: 02:ab:28:5e:e3:d4:25:da:da:73:3a:8a:a0:22:94:b7:3b:7f: 14:82:1d:8d -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt57BV19NT2XXsSlUuCYoHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTRhMjljNjEzOGUyZDkzZDU0YTM2MzI4Yjk0Y2IxZjhhMzgyYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocndo/LfbctffwfBcMu7R+bdnXbt t/9i+oGvqNudrI79XDHZbp/f4CkMAQ5qWi02vpMFsY6o6Yf9sPkM9EzagBFRC1zK CY0CnRrBvLjXBIRyGK98IWhAm/1zOusoZ2nNOjWjMdtV9Jm6+r5+TWGuBJ9nQdXt yjwxN3AdhMSPSUSLUg3egWTPaoDkXpG/8l0ZfNNPQhM3sn9Qi2o8KO7jS326kcQI Q202GDQlThGNbx1+uMSAOo6L/mga33S+9JzRpfyQ/JK+qSYYolCkzNj+dQUlLnve BOQc4nZMEOdOAwZRBW3O5fJiId+GibIV73uY6oIrI2YiiE9w8aXxz55/jQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFK5KKcYTji2T1Uo2MouUyx+KOCprMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzM1YmUw NC1kNWI3LTQ0YWEtYWRlNC0xMzQwMWQxZjIyZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMzViZTA0 LWQ1YjctNDRhYS1hZGU0LTEzNDAxZDFmMjJkMi8xL3Jrb3B4aE9PTFpQVlNqWXlp NVRMSDRvNEttcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuSC4MA0EAgACMAcDBQMqCxRAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMXcwIDA0PAMA0GCSqGSIb3DQEBCwUAA4IBAQCoSyPQ IyI2xHj4pO9KFLUFKif6PevJSW5pIw2Ls6LSV61auHO+S7GaC3tJV5xFoqJWowyk CeWqvrdFTeYC6Oeh/jNE/BUtCrKLjfURmgmGpkdo9swHbrQBZAfl8EO+0RE07CHS gYdzxYjfZoCRGe7012TT/CIZwPXTHefvHTMAwDnYJ2peleXWMC5t1IF37IPOhscz DxGZM+qcRWmYgw2JtwCA6ZU1soqHryj6kC2pBUAMWpqYJlHhlKX7WiuZy9Jku9kq r/jHs21BeilyEdSc+L0GAOnHExv+YmXbGp/XGZfpH6zl8/E6xqwCqyhe49Ql2tpz OoqgIpS3O38Ugh2N -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:57 2026 by rpki-client