This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer File: K1iJW-74e1UDAHkRLUqxfZPJiiA.cer (raw, json) Hash identifier: DG0ih+K7CAs+W7oUk6pY+e9OtRWcBqfDjW/RNHAdzlA= Subject key identifier: 2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA0C58602C579B6A8E06B3FC67559C414 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 10:18:10 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203595 IP: 74.122.238.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:c5:86:02:c5:79:b6:a8:e0:6b:3f:c6:75:59:c4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 10:18:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2b58895beef87b55030079112d4ab17d93c98a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:41:c2:7d:17:47:85:68:96:f3:6b:85:0a:9b: cd:7c:55:b0:d2:bf:90:9d:8e:32:ba:3d:a6:64:f9: 99:46:dc:1e:29:4d:bb:3a:8e:d1:48:a9:55:e1:a2: 3e:44:31:64:23:86:90:73:ae:17:f0:9f:44:4f:30: e7:ff:87:f5:5e:cb:3a:c6:25:6f:14:c7:e4:ed:e2: f9:1d:b9:9a:f6:fb:86:cd:c2:3b:b7:ed:61:d1:8d: c4:85:77:28:41:7a:46:11:fc:ed:61:02:c8:45:ce: a0:83:7e:91:ce:06:06:a4:e0:ff:f1:4b:1c:f3:54: 38:b1:82:5a:10:99:1c:28:d8:95:c1:14:0b:b6:a0: a7:69:96:57:8e:ac:6d:bc:79:93:f9:02:03:b0:b2: 6f:ed:af:d7:d5:c7:e0:0f:06:c4:c4:71:72:6b:ba: 8e:59:65:45:39:b5:83:89:ad:47:12:74:a6:44:e4: 58:af:96:5f:b0:20:41:bb:2c:f4:ee:72:cf:9b:1d: 8f:d0:3f:19:04:50:7c:9d:a9:38:17:d7:29:48:e5: 0d:7f:ee:5e:b0:e2:f1:62:29:6b:8f:45:f1:59:04: 86:27:84:93:2f:fd:df:74:0a:05:b1:95:77:2a:48: 2e:21:e0:1c:0c:74:2c:90:ed:49:c6:5d:0f:be:81: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.122.238.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203595 Signature Algorithm: sha256WithRSAEncryption 19:ca:35:94:20:72:8f:48:6e:3d:44:6b:b8:ee:1c:06:98:1b: 1b:5a:cb:11:94:65:6e:94:53:d8:93:e9:a6:36:95:a2:31:db: d0:70:57:78:30:71:86:13:87:11:1d:f0:bc:af:bf:cf:17:32: 78:57:5a:61:4e:1f:ed:83:5b:59:4d:db:6f:4a:d5:5a:e3:a0: b8:e4:23:02:c0:a8:8a:a7:01:08:dc:0f:ee:ac:5a:d2:1d:2e: 5f:1b:ff:f8:ed:52:58:96:5c:2f:07:fa:4f:7d:9d:09:81:87: d1:11:e5:04:be:d6:95:9c:5b:42:98:6c:ef:a0:df:e9:99:69: de:4a:99:e0:3c:20:d2:45:62:e2:dd:92:d5:de:cf:85:7b:d7: cf:cb:9c:7b:2d:04:f8:1b:ab:40:e9:d9:51:75:f2:e5:80:8f: 0e:63:7c:2b:72:15:26:4c:ae:cf:3f:ee:1f:fe:c5:f4:43:89: 97:20:a4:0b:27:28:4f:de:1d:32:a7:17:22:78:f5:70:aa:8a: 5b:50:26:3e:44:be:34:02:96:a8:cc:1c:7c:56:2a:60:78:59: ff:fc:c6:e3:fd:49:d1:55:24:7a:b0:0d:eb:52:9b:6a:ce:72: aa:0f:5d:9d:2e:f6:b2:0f:31:ee:bb:c3:21:ab:cd:27:30:b0: 45:11:04:08 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZqgxYYCxXm2qOBrP8Z1WcQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTAxODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjU4ODk1YmVlZjg3YjU1MDMwMDc5MTEyZDRhYjE3ZDkzYzk4YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkHCfRdHhWiW82uFCpvNfFWw0r+Q nY4yuj2mZPmZRtweKU27Oo7RSKlV4aI+RDFkI4aQc64X8J9ETzDn/4f1Xss6xiVv FMfk7eL5Hbma9vuGzcI7t+1h0Y3EhXcoQXpGEfztYQLIRc6gg36RzgYGpOD/8Usc 81Q4sYJaEJkcKNiVwRQLtqCnaZZXjqxtvHmT+QIDsLJv7a/X1cfgDwbExHFya7qO WWVFObWDia1HEnSmRORYr5ZfsCBBuyz07nLPmx2P0D8ZBFB8nak4F9cpSOUNf+5e sOLxYilrj0XxWQSGJ4STL/3fdAoFsZV3KkguIeAcDHQskO1Jxl0PvoHP9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCtYiVvu+HtVAwB5ES1KsX2TyYogMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2I2MmE5 NS1iNDNkLTRmMWYtOGVmNC05YTMyMWZmYzJlZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvYjYyYTk1 LWI0M2QtNGYxZi04ZWY0LTlhMzIxZmZjMmVlZi8xL0sxaUpXLTc0ZTFVREFIa1JM VXF4ZlpQSmlpQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQASnruMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMbSzANBgkqhkiG9w0BAQsFAAOCAQEAGco1lCByj0huPURruO4cBpgbG1rLEZRl bpRT2JPppjaVojHb0HBXeDBxhhOHER3wvK+/zxcyeFdaYU4f7YNbWU3bb0rVWuOg uOQjAsCoiqcBCNwP7qxa0h0uXxv/+O1SWJZcLwf6T32dCYGH0RHlBL7WlZxbQphs 76Df6Zlp3kqZ4Dwg0kVi4t2S1d7PhXvXz8ucey0E+BurQOnZUXXy5YCPDmN8K3IV Jkyuzz/uH/7F9EOJlyCkCycoT94dMqcXInj1cKqKW1AmPkS+NAKWqMwcfFYqYHhZ //zG4/1J0VUkerAN61Kbas5yqg9dnS72sg8x7rvDIavNJzCwRREECA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:22 2025 by rpki-client