This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer File: CKkhe9gwYnyz5lfAuQY8giNN28s.cer (raw, json) Hash identifier: G9dDfiGUHojA+IQQ1198XO3G69cLTU9R1QWZK+qFkc8= Subject key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7A8C0B435940687CEA6E078C9816A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.74.112.0/21 IP: 109.69.248.0/21 IP: 185.111.144.0/22 IP: 2a02:54c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a8:c0:b4:35:94:06:87:ce:a6:e0:78:c9:81:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:01:94:63:7b:b0:87:d8:e6:69:cb:2e:c6: 8c:36:32:45:5d:ff:43:e8:d0:ff:97:1d:5c:7f:d8: 3a:a6:e5:fc:27:e5:9c:b7:27:4f:3e:fd:e2:81:b6: 88:b7:a0:c6:42:5b:e3:55:18:0f:07:cc:97:9f:dd: 93:4f:75:a8:9a:dc:53:7b:b7:aa:f2:7b:1a:ae:5c: 6a:54:f1:e6:94:6e:c7:90:e3:fc:f6:bf:ef:6f:1e: 88:8e:5c:0f:eb:36:39:a8:4f:8b:be:d5:ef:00:c1: 28:2e:58:cf:52:1a:51:07:6c:79:ad:0b:fd:72:4a: 95:c7:1d:e8:ba:7a:eb:5d:3b:a3:ae:8e:0f:9f:4e: b2:64:a0:ce:b3:62:9d:68:f6:99:c3:51:b6:45:95: 84:33:83:6f:b5:1d:39:4f:30:1b:1c:dd:06:c6:ce: 12:50:b3:f8:06:1c:17:ad:77:db:aa:55:2d:a9:7c: a3:52:f8:37:76:84:8b:c5:58:7d:92:ec:ee:37:98: 2c:83:fb:a6:9a:06:28:2d:90:a1:d4:96:42:8d:2a: 51:ef:d5:37:95:f9:af:75:05:d3:ce:aa:2e:96:a4: 12:9e:1e:77:5a:07:c7:35:7f:e0:71:db:6a:45:3c: cd:0e:ba:fb:7b:12:f2:e4:ac:ff:d5:28:69:37:e4: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.112.0/21 109.69.248.0/21 185.111.144.0/22 IPv6: 2a02:54c0::/29 Signature Algorithm: sha256WithRSAEncryption 32:d0:fd:90:91:50:cc:7f:24:de:d6:46:2a:39:d2:b9:bf:3c: e7:89:bb:59:01:a3:8e:ab:a2:da:b8:6f:9f:57:21:29:d2:20: 69:76:44:d1:72:13:c2:46:9e:02:1a:cf:94:81:ed:6d:7f:79: 31:ca:7e:c5:4a:45:01:71:c7:56:fc:ed:71:43:cb:51:cd:b1: 6a:d4:36:e0:6b:39:62:d3:41:17:da:bb:f6:ea:9c:c7:7e:67: 00:6e:58:0b:03:dc:f3:50:89:f1:a4:9f:c2:2e:5f:fe:53:8b: 79:d5:fa:92:3a:c2:98:1a:63:9f:28:ed:ae:c4:11:18:63:b9: a8:47:86:9b:d6:57:3a:34:10:3d:a8:d6:db:b0:92:79:5e:d3: 27:f2:68:08:b6:7d:21:da:04:32:e0:9f:60:8e:4f:7c:b8:81: 4c:06:7f:bf:b9:87:10:0b:5f:0b:75:ff:38:5c:65:df:74:98: 7a:98:bf:2e:b3:d7:2b:6b:33:3c:0f:b8:33:c4:87:0b:28:43: c7:74:e9:6b:0e:91:47:49:67:f6:4b:6f:68:fd:a6:96:e6:90: d4:32:c2:bb:df:f6:12:36:0d:c0:7e:81:1d:f0:f8:dd:e5:df: 3a:84:41:d5:04:a6:1b:67:ec:db:86:be:24:f7:3c:52:e2:e0: 1b:56:46:c7 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6x6jAtDWUBofOpuB4yYFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGE5MjE3YmQ4MzA2MjdjYjNlNjU3YzBiOTA2M2M4MjIzNGRkYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ8BlGN7sIfY5mnLLsaMNjJFXf9D 6ND/lx1cf9g6puX8J+WctydPPv3igbaIt6DGQlvjVRgPB8yXn92TT3WomtxTe7eq 8nsarlxqVPHmlG7HkOP89r/vbx6IjlwP6zY5qE+LvtXvAMEoLljPUhpRB2x5rQv9 ckqVxx3ounrrXTujro4Pn06yZKDOs2KdaPaZw1G2RZWEM4NvtR05TzAbHN0Gxs4S ULP4BhwXrXfbqlUtqXyjUvg3doSLxVh9kuzuN5gsg/ummgYoLZCh1JZCjSpR79U3 lfmvdQXTzqoulqQSnh53WgfHNX/gcdtqRTzNDrr7exLy5Kz/1ShpN+QCFQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFAipIXvYMGJ8s+ZXwLkGPIIjTdvLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzdkZGU0 NC1kN2I1LTQ4ZGEtYmM2OC0yYzViYWMzNWMzNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvN2RkZTQ0 LWQ3YjUtNDhkYS1iYzY4LTJjNWJhYzM1YzM0NC8xL0NLa2hlOWd3WW55ejVsZkF1 UVk4Z2lOTjI4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDTUpwAwQDbUX4AwQCuW+QMA0EAgACMAcDBQMq AlTAMA0GCSqGSIb3DQEBCwUAA4IBAQAy0P2QkVDMfyTe1kYqOdK5vzznibtZAaOO q6LauG+fVyEp0iBpdkTRchPCRp4CGs+Uge1tf3kxyn7FSkUBccdW/O1xQ8tRzbFq 1Dbgazli00EX2rv26pzHfmcAblgLA9zzUInxpJ/CLl/+U4t51fqSOsKYGmOfKO2u xBEYY7moR4ab1lc6NBA9qNbbsJJ5XtMn8mgItn0h2gQy4J9gjk98uIFMBn+/uYcQ C18Ldf84XGXfdJh6mL8us9crazM8D7gzxIcLKEPHdOlrDpFHSWf2S29o/aaW5pDU MsK73/YSNg3AfoEd8Pjd5d86hEHVBKYbZ+zbhr4k9zxS4uAbVkbH -----END CERTIFICATE-----Generated at Mon Jan 26 13:04:29 2026 by rpki-client