This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer File: K-U9NAqL9Hwb800yVeEC77GBrRk.cer (raw, json) Hash identifier: 62m9RXQHLRwsZgzIT7TFo5Zp3BkDYeaiwl9UjYmg184= Subject key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355184B3A80936C3667436161EB373 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.236.0.0/18 IP: 81.29.64.0/19 IP: 89.151.64.0/18 IP: 178.236.144.0/20 IP: 185.68.112.0/22 IP: 2a02:16f8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:51:84:b3:a8:09:36:c3:66:74:36:16:1e:b3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:c0:93:7f:c2:76:3e:4a:ad:f6:a4:22:52: a8:44:d6:6d:45:62:2b:03:7a:11:d8:3a:50:3b:65: 01:7e:b7:0e:ef:11:5a:c4:86:df:07:4c:99:64:d1: 50:5d:29:ea:38:94:40:d1:70:81:c3:e5:11:bb:1c: b8:a9:8e:b8:e7:32:98:12:dc:43:a1:6a:ba:31:48: fd:28:53:f0:95:63:bf:97:4b:41:3a:e6:a3:a2:90: 8c:3c:d7:0b:cf:5e:4f:90:dd:f9:2c:bf:29:7b:c1: b3:38:40:c1:15:81:f3:e8:13:69:e0:bc:71:3c:6a: 4b:9a:1f:66:16:a7:c4:b6:c2:88:f1:2c:d7:ad:a4: a6:19:1c:a5:21:fd:75:55:6b:5e:77:aa:09:37:69: 5d:7b:2d:4b:cd:0d:e5:3b:b3:a2:17:00:06:bc:fd: 75:11:d0:03:17:a3:df:46:a1:d2:ee:b6:95:31:0d: 99:de:d8:6d:77:d7:6c:96:ec:97:d7:e3:50:3b:88: 2c:c7:7d:73:61:44:92:61:c9:45:c6:0c:01:bb:71: c7:88:01:37:4a:9f:89:30:61:98:4a:a8:9c:31:55: c1:6f:cf:e0:7c:31:e6:65:7e:bc:9d:8f:a1:89:73: 70:d2:f8:a0:e9:bb:96:c2:77:34:09:da:98:70:7b: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.0.0/18 81.29.64.0/19 89.151.64.0/18 178.236.144.0/20 185.68.112.0/22 IPv6: 2a02:16f8::/32 Signature Algorithm: sha256WithRSAEncryption 9e:9f:a3:51:be:1e:9c:ba:bc:0a:f6:5a:d1:4e:39:9d:2d:8f: f0:42:76:2c:87:52:d7:46:f9:a8:77:53:1b:36:86:3d:88:a0: 43:ee:9c:2c:b1:24:80:d9:8f:cc:4f:a2:13:7a:22:03:ec:5e: 91:0d:c7:9c:51:09:5b:f3:7a:71:a8:6d:80:a9:7e:7d:0d:c3: 75:af:34:6f:00:dd:bd:2e:34:52:1c:36:f4:a1:63:95:61:e3: 40:56:93:5a:f1:7a:e5:7e:c0:22:98:7c:71:e2:7a:67:39:86: d3:d2:75:6e:7b:83:0e:80:df:72:6a:92:5d:86:c1:29:99:bc: f4:14:27:52:1b:64:4c:eb:d6:b8:31:17:64:6f:6f:5b:37:ba: 78:38:bc:31:0a:0a:c9:92:91:8f:54:58:3d:f7:dc:31:94:15: 77:62:92:40:69:18:e3:5c:d0:c7:6c:3c:1e:e1:0c:3a:61:b1: 70:2f:7e:c4:5a:29:09:dc:52:97:0d:74:66:db:ce:f9:e3:70: b5:15:86:ee:81:bd:f1:10:fa:16:a1:1f:73:78:bc:41:79:9e: 63:2d:ac:ec:4c:2d:b5:5c:fc:2a:cb:fa:61:66:47:24:2e:4f: f2:a9:71:92:6c:0e:8b:22:a1:3c:e4:06:51:8e:73:a9:b9:47: 4f:46:a1:a2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt4NVGEs6gJNsNmdDYWHrNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmU1M2QzNDBhOGJmNDdjMWJmMzRkMzI1NWUxMDJlZmIxODFhZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7fAk3/Cdj5KrfakIlKoRNZtRWIr A3oR2DpQO2UBfrcO7xFaxIbfB0yZZNFQXSnqOJRA0XCBw+URuxy4qY645zKYEtxD oWq6MUj9KFPwlWO/l0tBOuajopCMPNcLz15PkN35LL8pe8GzOEDBFYHz6BNp4Lxx PGpLmh9mFqfEtsKI8SzXraSmGRylIf11VWted6oJN2ldey1LzQ3lO7OiFwAGvP11 EdADF6PfRqHS7raVMQ2Z3thtd9dsluyX1+NQO4gsx31zYUSSYclFxgwBu3HHiAE3 Sp+JMGGYSqicMVXBb8/gfDHmZX68nY+hiXNw0vig6buWwnc0CdqYcHtinQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFCvlPTQKi/R8G/NNMlXhAu+xga0ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2Y3MjU2 Mi00NWY1LTQwMTktODNhMS03NGYwYzNlNjYzY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvZjcyNTYy LTQ1ZjUtNDAxOS04M2ExLTc0ZjBjM2U2NjNjYi8xL0stVTlOQXFMOUh3YjgwMHlW ZUVDNzdHQnJSay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQGLuwAAwQFUR1AAwQGWZdAAwQEsuyQAwQCuURw MA0EAgACMAcDBQAqAhb4MA0GCSqGSIb3DQEBCwUAA4IBAQCen6NRvh6curwK9lrR TjmdLY/wQnYsh1LXRvmod1MbNoY9iKBD7pwssSSA2Y/MT6ITeiID7F6RDcecUQlb 83pxqG2AqX59DcN1rzRvAN29LjRSHDb0oWOVYeNAVpNa8XrlfsAimHxx4npnOYbT 0nVue4MOgN9yapJdhsEpmbz0FCdSG2RM69a4MRdkb29bN7p4OLwxCgrJkpGPVFg9 99wxlBV3YpJAaRjjXNDHbDwe4Qw6YbFwL37EWikJ3FKXDXRm287543C1FYbugb3x EPoWoR9zeLxBeZ5jLazsTC21XPwqy/phZkckLk/yqXGSbA6LIqE85AZRjnOpuUdP RqGi -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:40 2026 by rpki-client