This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer (raw, json) Hash identifier: khg0oUHg6PKpeFslTtDFwv7KarL0auDhJvhcvfvlOGo= Subject key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4DEB466247098AB9CB356B55EA34D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 217.65.79.0/24 IP: 2a05:8e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:de:b4:66:24:70:98:ab:9c:b3:56:b5:5e:a3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:47:43:dc:3a:76:a8:00:f6:72:da:98:57: e6:d7:05:3d:ec:bd:d1:e9:33:9a:76:55:40:01:be: 40:20:e1:52:60:0c:d6:ec:e8:f4:bc:80:9b:d1:62: e5:df:35:c4:0a:bd:5d:44:17:e2:21:41:0f:6a:93: 37:93:51:f6:41:35:68:b6:24:20:18:08:81:37:2b: 70:a6:10:39:c8:bf:d9:af:3a:80:20:8e:2c:c0:94: ba:15:f2:6c:ee:c2:be:08:1c:c4:c5:79:3d:53:9c: f0:06:4d:eb:5b:cd:96:d4:ff:3e:88:01:32:7b:c9: 7d:6a:2b:c9:f8:db:84:20:f4:16:e2:0b:fb:01:4c: 4e:1c:8a:e0:eb:ff:da:39:51:dc:2d:f4:33:3d:db: bd:59:16:49:35:74:36:3e:9f:96:95:43:92:ee:ab: 3b:5a:69:dd:c2:da:8a:4b:9c:2e:93:4c:bc:97:df: 1c:fc:c0:22:65:50:fa:23:b7:b6:c9:97:61:16:56: 0b:99:2c:6d:5e:5f:b3:52:75:ba:f6:a6:08:fd:52: 3a:8f:25:d4:dc:03:5d:93:94:26:6d:d3:01:89:05: 95:53:73:86:2e:38:f9:47:b7:c1:85:bb:ea:0c:65: 7c:8c:61:3a:e9:d1:58:3f:9f:dc:14:3d:ec:f7:c9: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.65.79.0/24 IPv6: 2a05:8e80::/29 Signature Algorithm: sha256WithRSAEncryption a9:70:fe:a1:95:67:95:7a:a2:eb:66:8b:f2:61:a6:f2:c3:d3: 05:38:7a:68:53:8b:02:f4:d0:d6:db:8e:63:20:a1:49:a1:53: fa:87:14:34:da:6a:b9:e9:9c:f9:a1:29:51:54:68:8d:ae:5f: e1:fa:77:84:57:e2:df:ce:92:ae:f6:2c:53:28:95:bb:f0:dc: f5:8b:82:d7:8b:96:c4:c2:45:c7:33:2a:f0:14:13:70:4c:8c: ae:9e:8a:cf:e8:7c:de:d5:88:33:30:4a:7f:ce:03:1e:bf:be: 48:04:d9:f9:4c:15:02:29:1e:6e:4e:9c:55:bd:76:b7:d3:11: 43:50:1e:17:79:1a:95:cb:26:d5:d5:36:a2:7e:e7:b5:36:1c: 7c:9c:8c:a9:6d:7a:8d:ef:9d:be:d1:08:ef:35:ae:68:24:43: 87:c1:17:bd:69:11:ce:8d:e0:62:01:4a:68:7c:2d:e8:31:42: 02:11:f4:4a:4a:c6:b2:75:f5:4c:fc:d4:fc:c2:9a:bd:30:bc: a0:72:71:c8:1f:dd:72:85:57:4f:4b:f4:59:e6:6a:2b:7f:23: 8a:64:01:be:18:c4:72:f3:d8:1c:a3:b4:9c:be:1c:2d:b5:d8: a3:0f:88:84:8e:58:d4:e9:83:ac:a4:a5:79:6f:b5:d9:b6:be: 1f:8f:96:a3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pN60ZiRwmKucs1a1XqNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTRhZDJkNGIwYjczMzBlNGE5YjVhZmExMWE2MTk4ZmNiNjUxYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMdHQ9w6dqgA9nLamFfm1wU97L3R 6TOadlVAAb5AIOFSYAzW7Oj0vICb0WLl3zXECr1dRBfiIUEPapM3k1H2QTVotiQg GAiBNytwphA5yL/ZrzqAII4swJS6FfJs7sK+CBzExXk9U5zwBk3rW82W1P8+iAEy e8l9aivJ+NuEIPQW4gv7AUxOHIrg6//aOVHcLfQzPdu9WRZJNXQ2Pp+WlUOS7qs7 WmndwtqKS5wuk0y8l98c/MAiZVD6I7e2yZdhFlYLmSxtXl+zUnW69qYI/VI6jyXU 3ANdk5QmbdMBiQWVU3OGLjj5R7fBhbvqDGV8jGE66dFYP5/cFD3s98nG6QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFK5K0tSwtzMOSpta+hGmGY/LZRv3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzljOGU1 OS1hZmRmLTQyYTYtODBkNy04YTk2NjdkNzYyYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOWM4ZTU5 LWFmZGYtNDJhNi04MGQ3LThhOTY2N2Q3NjJhNS8xL3JrclMxTEMzTXc1S20xcjZF YVlaajh0bEdfYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA2UFPMA0EAgACMAcDBQMqBY6AMA0GCSqGSIb3 DQEBCwUAA4IBAQCpcP6hlWeVeqLrZovyYabyw9MFOHpoU4sC9NDW245jIKFJoVP6 hxQ02mq56Zz5oSlRVGiNrl/h+neEV+LfzpKu9ixTKJW78Nz1i4LXi5bEwkXHMyrw FBNwTIyunorP6Hze1YgzMEp/zgMev75IBNn5TBUCKR5uTpxVvXa30xFDUB4XeRqV yybV1Taifue1Nhx8nIypbXqN752+0QjvNa5oJEOHwRe9aRHOjeBiAUpofC3oMUIC EfRKSsaydfVM/NT8wpq9MLygcnHIH91yhVdPS/RZ5morfyOKZAG+GMRy89gco7Sc vhwttdijD4iEjljU6YOspKV5b7XZtr4fj5aj -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:40 2026 by rpki-client