This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer (raw, json) Hash identifier: bRrtIwyfXGJi58QAK650mu29mWbMqrZ4JG6fNxb7YeM= Subject key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783438019F537DFA8CC2F03D67D19C91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12601 AS: 14489 IP: 64.126.192.0/18 IP: 80.94.176.0/20 IP: 185.113.40.0/22 IP: 185.194.80.0/22 IP: 185.211.140.0/22 IP: 194.5.133.0 -- 194.5.134.255 IP: 194.126.236.0/24 IP: 213.159.9.0/24 IP: 2a00:1220::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:38:01:9f:53:7d:fa:8c:c2:f0:3d:67:d1:9c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:9e:be:b2:f6:58:3e:6f:5f:ad:c3:70:1b: f1:cb:26:c2:4e:ce:6c:09:41:e2:4c:34:bd:a8:a5: cc:cc:a9:c8:f6:d5:09:6f:aa:a9:8e:f0:8f:30:1e: c3:a1:54:9e:0b:01:34:be:78:2b:ec:d4:36:56:13: 83:62:98:62:af:c8:70:1a:9b:84:58:e7:f6:42:14: 47:be:84:05:f9:48:76:79:a4:4c:48:7d:de:ea:27: 9b:32:5e:2f:3c:02:9e:26:69:67:35:b5:40:7b:6d: f8:e5:5e:c2:fd:ee:eb:cb:d2:0a:32:52:93:47:94: 57:37:1e:78:a0:a6:d0:f0:17:9e:65:f6:1a:18:9e: 60:ee:23:86:68:de:0b:65:76:ad:cd:d2:2b:2e:c1: 77:39:b9:97:a7:be:63:20:ee:c4:f0:36:87:7f:bf: ce:83:30:56:8e:5a:c7:88:b0:c5:6d:e9:d9:6c:9b: 49:bb:46:10:ae:d1:e1:b0:42:d0:45:07:28:cc:1d: 02:eb:cc:f7:67:3e:52:b4:2e:e6:fc:3a:2f:3e:8f: 40:69:85:42:76:dc:a9:70:10:58:fc:90:c0:4d:37: 3c:ff:39:3d:13:3d:62:15:b4:d5:d3:4e:43:71:4d: 95:bb:cb:e8:55:83:76:5b:80:4b:6a:80:9a:82:19: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.126.192.0/18 80.94.176.0/20 185.113.40.0/22 185.194.80.0/22 185.211.140.0/22 194.5.133.0-194.5.134.255 194.126.236.0/24 213.159.9.0/24 IPv6: 2a00:1220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12601 14489 Signature Algorithm: sha256WithRSAEncryption 69:e9:23:84:fc:44:29:0a:77:e4:9d:85:2a:e6:76:a5:07:2b: 51:73:63:26:60:95:f7:d6:86:28:6e:1d:62:13:56:41:1c:46: fd:f7:9d:ef:96:be:9d:48:ba:65:93:e6:f6:f6:65:ac:c9:5e: 3e:de:80:0b:24:66:4f:1d:27:cc:9f:06:b6:ed:e6:f9:6f:5a: 96:8d:12:4f:25:5e:cd:18:17:71:b8:9c:a7:74:01:25:bc:93: b1:09:29:bd:c5:7f:50:f5:6a:73:95:4f:82:58:30:8d:89:6f: 7d:94:a4:52:89:a2:08:56:9f:44:2c:ce:b0:3b:e8:b5:df:59: 8d:df:95:62:a2:28:b3:06:b9:e9:34:6c:2c:02:f3:23:01:af: 88:18:2b:2e:90:42:e1:e5:a8:e3:0c:08:1b:e3:28:29:23:be: 7a:d3:95:f6:6a:ca:f9:83:32:ad:a1:83:e1:7d:34:e9:6f:31: bf:91:cb:ba:29:2e:49:90:ff:b2:83:f5:47:df:ee:c2:bb:c7: 7e:7c:4b:0a:b1:f4:b4:13:eb:e0:42:b2:3a:3a:cf:f7:b2:91: 31:7f:a3:d7:da:4e:b8:cd:a3:9f:c1:5f:d2:17:9f:cd:82:b9: 32:60:46:f2:54:6a:1c:f8:5e:76:70:fe:57:b1:15:ac:25:a3: b7:61:7f:38 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt4NDgBn1N9+ozC8D1n0ZyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTQxYTkyNWY4ZDY2ODRjODYxMDdkMjc1NmI0YWE5Mzg4MWYwMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAGevrL2WD5vX63DcBvxyybCTs5s CUHiTDS9qKXMzKnI9tUJb6qpjvCPMB7DoVSeCwE0vngr7NQ2VhODYphir8hwGpuE WOf2QhRHvoQF+Uh2eaRMSH3e6iebMl4vPAKeJmlnNbVAe2345V7C/e7ry9IKMlKT R5RXNx54oKbQ8BeeZfYaGJ5g7iOGaN4LZXatzdIrLsF3ObmXp75jIO7E8DaHf7/O gzBWjlrHiLDFbenZbJtJu0YQrtHhsELQRQcozB0C68z3Zz5StC7m/DovPo9AaYVC dtypcBBY/JDATTc8/zk9Ez1iFbTV005DcU2Vu8voVYN2W4BLaoCaghmxgwIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFApBqSX41mhMhhB9J1a0qpOIHwKuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2UzN2Qx ZC1kNGZiLTQ5NmMtYWY0OS0zNDIwNjg0YzdlNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvZTM3ZDFk LWQ0ZmItNDk2Yy1hZjQ5LTM0MjA2ODRjN2U0MS8xL0NrR3BKZmpXYUV5R0VIMG5W clNxazRnZkFxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzA+BAIAATA4AwQGQH7AAwQEUF6wAwQCuXEoAwQCucJQAwQCudOM MAwDBADCBYUDBADCBYYDBADCfuwDBADVnwkwDQQCAAIwBwMFACoAEiAwHQYIKwYB BQUHAQgBAf8EDjAMoAowCAICMTkCAjiZMA0GCSqGSIb3DQEBCwUAA4IBAQBp6SOE /EQpCnfknYUq5nalBytRc2MmYJX31oYobh1iE1ZBHEb9953vlr6dSLplk+b29mWs yV4+3oALJGZPHSfMnwa27eb5b1qWjRJPJV7NGBdxuJyndAElvJOxCSm9xX9Q9Wpz lU+CWDCNiW99lKRSiaIIVp9ELM6wO+i131mN35VioiizBrnpNGwsAvMjAa+IGCsu kELh5ajjDAgb4ygpI75605X2asr5gzKtoYPhfTTpbzG/kcu6KS5JkP+yg/VH3+7C u8d+fEsKsfS0E+vgQrI6Os/3spExf6PX2k64zaOfwV/SF5/NgrkyYEbyVGoc+F52 cP5XsRWsJaO3YX84 -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:18 2026 by rpki-client