This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer File: 2KPKzfjzNRS-Or3FLFDshkZ16VU.cer (raw, json) Hash identifier: sSIf0DoM9axkPp68SY6TuPHoArOE9SzeKBMYIdxwdvI= Subject key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2893DB44018DB8022488FE48B76E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15380 IP: 193.0.231.0/24 IP: 2001:678:a20::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:28:93:db:44:01:8d:b8:02:24:88:fe:48:b7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:c2:a3:4f:ba:82:3b:4f:d2:72:6c:08:d2: 31:c2:73:0b:04:51:50:4b:dc:d1:16:44:17:30:e2: f9:d0:69:77:10:86:3d:68:29:b8:7f:6b:8a:34:13: b8:03:4b:b0:2d:71:3f:8b:31:7d:0b:8a:34:39:6d: b4:5c:fc:9c:cb:30:e4:26:e6:ad:3c:f1:5e:0e:9d: 8a:d6:a2:25:37:8e:57:84:a3:59:2a:b1:56:24:ea: ed:a5:25:15:34:e4:f6:9c:2e:34:05:80:d3:92:c4: 00:13:f1:eb:45:39:4f:ff:92:f1:7b:10:ec:60:88: c9:67:87:fb:5c:ad:a1:9e:dc:61:10:ac:a0:fd:fd: ce:15:96:8d:10:cf:91:09:28:d8:5e:1b:f7:2d:b6: 0e:8e:98:30:9e:27:e4:af:10:6a:6f:99:79:a2:ea: 62:6b:29:37:ad:ba:07:04:e6:8d:ed:f0:a5:1e:40: 25:2f:0b:e3:b1:9d:bf:48:15:32:35:6a:01:87:7d: 77:f9:35:bd:e8:41:e5:c3:99:95:8f:3f:5c:bd:87: ec:0a:fe:2a:76:de:e1:b6:ca:61:7a:c2:1b:6d:71: 49:3b:1b:6a:20:73:59:0b:b5:9f:ca:8e:d7:62:48: 02:48:f5:5f:a4:58:b4:e0:91:08:d8:4a:2c:41:5e: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.231.0/24 IPv6: 2001:678:a20::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15380 Signature Algorithm: sha256WithRSAEncryption 93:b3:9d:39:6d:e2:81:c4:09:64:8e:ec:33:5a:04:8e:74:0e: 60:9d:0e:01:62:ec:3d:53:42:20:ae:3c:59:82:40:f1:07:65: e8:24:c6:ce:e2:f1:64:24:7e:84:da:18:df:99:03:f9:2c:82: ea:da:1f:81:28:d2:4f:65:a2:c6:a5:55:b6:da:4c:7f:87:88: 41:9c:64:8c:45:ba:0e:28:5a:e0:4e:66:be:58:5d:47:03:c0: fb:1f:ed:60:5e:53:4c:d5:02:14:ee:90:24:91:d6:83:16:11: fd:d4:03:4b:2e:80:c6:94:7b:b7:dc:fa:27:01:fe:86:77:fd: 04:7d:f9:9d:7f:1b:ce:c0:7d:48:73:9c:19:f7:71:15:b7:1e: 18:fb:40:94:4d:90:eb:73:8f:1d:6e:09:3e:23:18:d9:26:ff: fa:96:f8:59:08:f4:c3:9b:b5:84:81:36:69:bb:46:05:b0:2d: 94:12:3e:6a:d4:8a:5c:1e:63:a3:dc:67:6d:ff:cf:e5:d3:09: f7:1d:b4:7b:6a:38:a5:cc:3b:c3:7f:20:d9:9e:83:25:88:b9: d9:a6:45:db:9d:7d:09:0f:4c:a1:d4:7b:4b:80:46:8c:0d:04: 82:f1:0b:4e:54:f5:0c:0f:7c:8b:95:c7:e0:1b:be:e3:77:c6: 1b:13:11:de -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt5fyiT20QBjbgCJIj+SLduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGEzY2FjZGY4ZjMzNTE0YmUzYWJkYzUyYzUwZWM4NjQ2NzVlOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DjCo0+6gjtP0nJsCNIxwnMLBFFQ S9zRFkQXMOL50Gl3EIY9aCm4f2uKNBO4A0uwLXE/izF9C4o0OW20XPycyzDkJuat PPFeDp2K1qIlN45XhKNZKrFWJOrtpSUVNOT2nC40BYDTksQAE/HrRTlP/5LxexDs YIjJZ4f7XK2hntxhEKyg/f3OFZaNEM+RCSjYXhv3LbYOjpgwnifkrxBqb5l5oupi ayk3rboHBOaN7fClHkAlLwvjsZ2/SBUyNWoBh313+TW96EHlw5mVjz9cvYfsCv4q dt7htsphesIbbXFJOxtqIHNZC7Wfyo7XYkgCSPVfpFi04JEI2EosQV6ZnwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFNijys348zUUvjq9xSxQ7IZGdelVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzMzM2Mx YS1lNGE1LTQ5NmQtOWE4MS1iNzkxYjk4OWFmMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMzMzYzFh LWU0YTUtNDk2ZC05YTgxLWI3OTFiOTg5YWYyOS8xLzJLUEt6Zmp6TlJTLU9yM0ZM RkRzaGtaMTZWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwQDnMA8EAgACMAkDBwAgAQZ4CiAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICPBQwDQYJKoZIhvcNAQELBQADggEBAJOznTlt4oHE CWSO7DNaBI50DmCdDgFi7D1TQiCuPFmCQPEHZegkxs7i8WQkfoTaGN+ZA/ksgura H4Eo0k9losalVbbaTH+HiEGcZIxFug4oWuBOZr5YXUcDwPsf7WBeU0zVAhTukCSR 1oMWEf3UA0sugMaUe7fc+icB/oZ3/QR9+Z1/G87AfUhznBn3cRW3Hhj7QJRNkOtz jx1uCT4jGNkm//qW+FkI9MObtYSBNmm7RgWwLZQSPmrUilweY6PcZ23/z+XTCfcd tHtqOKXMO8N/INmegyWIudmmRdudfQkPTKHUe0uARowNBILxC05U9QwPfIuVx+Ab vuN3xhsTEd4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:42 2026 by rpki-client