This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer (raw, json) Hash identifier: qpLZl5ygNNZWGD7ylCBFFnF5pq/qyBLyosGLUawFFHY= Subject key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9F779634B950FDCF55A2C8391724 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29670 AS: 44339 AS: 57555 IP: 185.1.74.0/24 IP: 185.177.204.0/22 IP: 192.109.21.0/24 IP: 192.109.42.0/24 IP: 192.109.82.0/24 IP: 193.29.188.0/24 IP: 217.197.80.0/20 IP: 2001:67c:1400::/45 IP: 2001:7f8:a5::/48 IP: 2a0a:4580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9f:77:96:34:b9:50:fd:cf:55:a2:c8:39:17:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:7a:9f:1d:a0:11:12:7e:eb:e8:a0:a8:db: 91:3b:fc:4e:31:5f:7d:67:bb:25:10:03:08:a2:5b: 80:c7:a4:a0:e1:09:76:f4:74:9d:b3:7c:26:7f:71: c9:2c:79:28:d2:1f:43:d4:43:84:e2:f1:b4:5b:7b: 62:f2:92:f5:e8:a3:5e:a1:59:a9:ea:8e:c2:a8:f0: 7d:b7:a3:8a:9a:c0:9c:bd:1e:b3:4a:88:b0:e1:ff: 45:ff:8c:59:36:62:cb:54:da:90:4e:27:17:01:cd: 94:03:e4:c6:58:37:10:04:a2:9a:d3:23:9c:60:bb: d5:35:e5:80:a8:ea:bb:a0:38:06:55:67:40:ac:00: 90:18:d9:b1:b1:a2:75:e8:d1:14:2b:b7:9b:7f:88: e7:32:28:4b:9d:70:4d:bb:b4:69:73:89:3c:dd:80: 6a:1d:44:9f:d7:f0:07:9b:c4:3b:69:6a:79:fb:81: 81:0f:73:06:d3:3a:a1:3b:3f:0f:97:4b:a4:ba:55: 05:4c:3f:31:79:86:d8:a9:52:75:02:5c:34:f1:54: 96:48:68:2d:92:79:27:25:a2:36:99:f9:80:2d:94: 0c:c3:4c:31:0d:25:24:75:8d:e4:64:04:12:b0:42: f1:5f:87:d7:97:dc:22:2c:3c:6f:12:57:ba:0f:4e: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.74.0/24 185.177.204.0/22 192.109.21.0/24 192.109.42.0/24 192.109.82.0/24 193.29.188.0/24 217.197.80.0/20 IPv6: 2001:67c:1400::/45 2001:7f8:a5::/48 2a0a:4580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29670 44339 57555 Signature Algorithm: sha256WithRSAEncryption 79:37:6b:8d:90:3e:e6:f8:ea:6f:83:3b:12:a9:18:af:77:89: e4:14:41:7b:c2:08:de:1d:7f:3b:a0:35:bf:3a:a0:6f:ad:5f: 98:8f:14:6b:ed:8c:63:80:ff:54:4c:be:55:9c:ed:36:c5:1c: b2:2f:a3:c3:96:89:98:01:64:0f:31:6e:02:1b:c7:35:37:03: 7e:16:64:a8:f3:de:04:04:64:01:95:96:cb:51:23:68:eb:a9: 43:15:81:da:c7:f1:bf:d1:4e:26:f0:de:cf:31:12:4d:b3:2a: 1a:61:bc:50:ed:3b:2f:25:08:92:6c:d5:3b:6b:86:54:5c:7c: bf:e1:b3:a5:e1:ec:9f:4d:94:c1:85:1c:58:9d:a9:10:06:64: c4:d0:00:6f:20:b3:23:1a:de:42:64:34:e3:5b:15:d8:32:65: a4:50:0c:22:90:c3:3e:e8:cb:a0:32:1f:28:ff:24:f8:0e:2a: a1:d0:58:5d:b3:f6:64:ee:f3:8c:5e:74:0e:61:f9:65:4a:9c: 2f:57:8e:8a:bf:84:83:a9:2c:e8:2d:26:9c:cd:d8:4a:ed:14: c1:89:77:e1:03:8a:d4:31:31:ed:dc:b8:e7:7e:b7:e1:1a:74: 38:8d:42:e2:09:04:18:af:10:f5:80:88:45:6a:a0:95:95:91: a1:35:52:7c -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt6W593ljS5UP3PVaLIORckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGE5NjY2NjRlYzk2ZWRiZDEyZThlODJlOTQwYmZiOWZhZWMxMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr896nx2gERJ+6+igqNuRO/xOMV99 Z7slEAMIoluAx6Sg4Ql29HSds3wmf3HJLHko0h9D1EOE4vG0W3ti8pL16KNeoVmp 6o7CqPB9t6OKmsCcvR6zSoiw4f9F/4xZNmLLVNqQTicXAc2UA+TGWDcQBKKa0yOc YLvVNeWAqOq7oDgGVWdArACQGNmxsaJ16NEUK7ebf4jnMihLnXBNu7Rpc4k83YBq HUSf1/AHm8Q7aWp5+4GBD3MG0zqhOz8Pl0ukulUFTD8xeYbYqVJ1Alw08VSWSGgt knknJaI2mfmALZQMw0wxDSUkdY3kZAQSsELxX4fXl9wiLDxvEle6D04GDwIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFPipZmZOyW7b0S6OgulAv7n67BBeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzY0YWI5 OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJmZjEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5 LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZD NlVDX3VmcnNFRjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBggrBgEF BQcBBwEB/wRVMFMwMAQCAAEwKgMEALkBSgMEArmxzAMEAMBtFQMEAMBtKgMEAMBt UgMEAMEdvAMEBNnFUDAfBAIAAjAZAwcDIAEGfBQAAwcAIAEH+AClAwUDKgpFgDAj BggrBgEFBQcBCAEB/wQUMBKgEDAOAgJz5gIDAK0zAgMA4NMwDQYJKoZIhvcNAQEL BQADggEBAHk3a42QPub46m+DOxKpGK93ieQUQXvCCN4dfzugNb86oG+tX5iPFGvt jGOA/1RMvlWc7TbFHLIvo8OWiZgBZA8xbgIbxzU3A34WZKjz3gQEZAGVlstRI2jr qUMVgdrH8b/RTibw3s8xEk2zKhphvFDtOy8lCJJs1TtrhlRcfL/hs6Xh7J9NlMGF HFidqRAGZMTQAG8gsyMa3kJkNONbFdgyZaRQDCKQwz7oy6AyHyj/JPgOKqHQWF2z 9mTu84xedA5h+WVKnC9Xjoq/hIOpLOgtJpzN2ErtFMGJd+EDitQxMe3cuOd+t+Ea dDiNQuIJBBivEPWAiEVqoJWVkaE1Unw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:56 2026 by rpki-client