This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer File: sK_tekcdesOF47k2Wk6WASoBwJU.cer (raw, json) Hash identifier: MvgYlAmVtNqiRptIC+5ZvOuhDsxxbccdaUZCUS8YSZg= Subject key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC81672125649FCA0F709ADBA433F8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34620 IP: 85.255.64.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:16:72:12:56:49:fc:a0:f7:09:ad:ba:43:3f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:b9:04:b5:92:9f:20:4b:3a:df:68:f2:3f: 29:c5:5c:83:eb:3c:98:40:91:1e:73:39:e0:44:a8: a6:30:12:6f:06:c8:08:41:fe:e2:f2:6b:e9:b6:2a: 0e:39:5e:3b:55:f9:35:17:98:ed:a0:64:f8:73:a7: 15:32:4a:7d:e8:87:93:8b:ee:3b:ab:93:23:12:f6: 07:b7:cc:e4:83:73:8a:60:26:70:cf:af:b9:89:bf: 63:ec:5f:db:0c:dc:14:9b:13:bf:b4:dd:06:a2:f1: 2c:65:38:d3:77:5d:ad:12:28:36:fa:00:a0:f9:b6: fa:9e:8a:c8:b9:0d:86:22:b7:b4:b6:39:4c:01:0e: c4:91:0a:19:82:c9:da:41:28:5e:65:3e:a9:e5:be: 9c:cd:61:f1:e8:d6:a7:ff:db:ea:99:7e:fb:74:70: 07:4f:da:4a:bb:aa:1d:ec:06:fe:14:f9:8e:38:ed: a4:11:09:47:8b:e4:06:9c:32:1c:31:c0:4f:3d:0c: 7a:0d:d0:37:dd:a6:6a:1c:9e:dd:77:fb:b0:e0:3d: d0:04:40:18:6f:fe:29:f4:4a:2c:66:3d:17:d0:d2: 18:ed:f7:3c:17:4b:8d:a9:59:60:99:a2:b5:ba:b1: e1:4d:35:0d:35:fb:08:0b:df:63:19:97:39:71:f4: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.64.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34620 Signature Algorithm: sha256WithRSAEncryption 44:9b:85:62:0c:3e:4e:99:e0:94:c4:b1:ce:40:0a:08:23:85: 34:ed:04:bf:91:65:6d:e2:00:41:92:0a:52:df:ad:33:09:b0: 39:ed:f7:29:3b:a3:09:e7:a8:cb:93:7e:f8:82:55:c4:2f:83: 8b:ff:aa:5f:b2:00:ea:cf:1a:78:07:50:59:a1:a0:5c:8e:51: 9c:2b:ca:cd:92:85:72:d9:53:25:3e:3a:66:58:0a:75:f8:cc: 88:67:f5:57:6c:27:85:7c:be:29:48:48:22:d3:f5:be:b7:5e: 68:42:40:8a:7c:cc:d7:b1:b3:46:aa:dd:21:02:72:c0:e3:3c: a3:1e:6f:ba:2f:48:5c:6e:dc:7a:67:0c:cf:dc:a5:3d:54:45: 1f:c0:62:8e:4a:4f:86:20:07:2f:99:3b:60:de:65:e5:c5:b8: b0:15:aa:d6:97:34:66:05:52:94:00:97:7d:11:66:57:90:2a: 1b:79:a4:d9:7d:18:1f:28:2f:06:7c:e8:5e:2e:89:cf:80:74: b2:55:ef:35:d5:98:22:9e:fb:49:f4:ea:38:6e:ec:48:a8:ac: 9b:3c:16:e5:86:b5:7f:2d:ce:70:1c:a5:e4:6f:9c:fb:d9:93: 8d:73:e8:b1:c7:9e:2b:76:02:5e:a1:a1:ac:8e:eb:28:2e:0e: 0f:04:a0:2d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yBZyElZJ/KD3Ca26Qz+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGFmZWQ3YTQ3MWQ3YWMzODVlM2I5MzY1YTRlOTYwMTJhMDFjMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTi5BLWSnyBLOt9o8j8pxVyD6zyY QJEeczngRKimMBJvBsgIQf7i8mvptioOOV47Vfk1F5jtoGT4c6cVMkp96IeTi+47 q5MjEvYHt8zkg3OKYCZwz6+5ib9j7F/bDNwUmxO/tN0GovEsZTjTd12tEig2+gCg +bb6norIuQ2GIre0tjlMAQ7EkQoZgsnaQSheZT6p5b6czWHx6Nan/9vqmX77dHAH T9pKu6od7Ab+FPmOOO2kEQlHi+QGnDIcMcBPPQx6DdA33aZqHJ7dd/uw4D3QBEAY b/4p9EosZj0X0NIY7fc8F0uNqVlgmaK1urHhTTUNNfsIC99jGZc5cfSnjwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLCv7XpHHXrDheO5NlpOlgEqAcCVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzZmNjYx My1lNzk4LTQ3ZjQtYjMxMy0zMDRhNTRlOGMyNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNmY2NjEz LWU3OTgtNDdmNC1iMzEzLTMwNGE1NGU4YzI2NC8xL3NLX3Rla2NkZXNPRjQ3azJX azZXQVNvQndKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEVf9AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCHPDANBgkqhkiG9w0BAQsFAAOCAQEARJuFYgw+TpnglMSxzkAKCCOFNO0Ev5Fl beIAQZIKUt+tMwmwOe33KTujCeeoy5N++IJVxC+Di/+qX7IA6s8aeAdQWaGgXI5R nCvKzZKFctlTJT46ZlgKdfjMiGf1V2wnhXy+KUhIItP1vrdeaEJAinzM17GzRqrd IQJywOM8ox5vui9IXG7cemcMz9ylPVRFH8BijkpPhiAHL5k7YN5l5cW4sBWq1pc0 ZgVSlACXfRFmV5AqG3mk2X0YHygvBnzoXi6Jz4B0slXvNdWYIp77SfTqOG7sSKis mzwW5Ya1fy3OcByl5G+c+9mTjXPosceeK3YCXqGhrI7rKC4ODwSgLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:36 2026 by rpki-client