This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer (raw, json) Hash identifier: Vw+9qlmcvYFBNhoE7rhP1t7M+mh4ZIiPjvqJKvUncNA= Subject key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA52ADBC9FD0BC6ACDE97964E621704 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48214 IP: 80.244.11.0/24 IP: 2a13:6fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2a:db:c9:fd:0b:c6:ac:de:97:96:4e:62:17:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:65:86:b0:d2:0e:3f:dd:d6:80:97:1b:bc:5e: d7:36:1d:22:6c:a1:9e:8b:3e:aa:ea:f1:05:4a:18: b9:56:d7:4b:5c:72:b5:bc:5c:f7:a8:6d:43:16:ce: ac:17:78:69:37:f5:6c:1b:3d:12:f5:1d:ef:89:69: 6d:35:c6:e8:b6:ab:17:d7:cc:eb:a5:5e:38:e2:21: 61:05:dc:18:c6:bf:cc:4b:e9:6a:fc:41:f7:bc:49: 2f:a7:5c:d7:50:17:65:28:16:e9:a3:4d:1c:f9:26: 32:b4:31:3d:c4:b7:69:83:0e:a2:d8:8a:47:26:f2: 32:ba:89:16:98:66:aa:6c:b0:82:bd:09:8f:20:90: 95:7b:ca:78:71:c1:e2:a0:fb:e2:99:a7:a2:1f:5a: 7e:76:de:95:d3:be:ef:f7:62:57:38:a6:09:a9:4c: 29:dc:85:be:e4:52:07:95:c1:db:8b:78:11:3c:16: ff:ef:93:b1:39:34:6b:8a:42:f7:6b:a4:f3:bb:79: 82:a1:be:c1:78:10:1b:f0:ab:10:ae:10:c8:96:c1: d2:6a:47:9f:49:85:e0:4c:e9:95:ab:52:ee:28:27: 1a:97:02:31:a1:53:10:3d:9d:65:9f:3f:cb:10:35: 24:32:93:21:fe:4d:94:de:e5:38:46:2b:19:cc:e1: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.11.0/24 IPv6: 2a13:6fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48214 Signature Algorithm: sha256WithRSAEncryption 84:00:ed:f6:3c:fe:44:2b:2f:5b:7c:9e:8e:ce:56:29:6f:46: 25:c4:cb:e4:0b:b6:d5:b6:37:28:13:70:67:43:d3:41:b3:29: cf:2f:33:cb:c1:d1:d0:c6:3e:a1:3f:ee:7b:cd:fc:eb:b3:e4: fd:0e:6c:a6:02:cb:9e:0e:e2:3a:ba:93:33:70:da:cb:f4:e2: 3f:b3:7e:db:1d:f0:ed:12:c0:e1:67:cc:14:68:c4:5f:da:e2: 6c:24:ea:d6:9e:21:2a:7b:2c:b1:d6:28:2e:db:1a:47:b4:f7: 5a:e9:f9:22:9e:1c:29:19:b0:3f:8f:c7:5f:59:7d:97:fa:e0: 9e:f4:1c:37:90:ea:72:a5:5c:02:da:5f:aa:50:6e:c4:d6:03: 2a:ab:b1:68:e7:78:da:17:a6:08:b3:9e:0d:97:13:46:a0:18: 45:33:29:31:e3:a4:b2:ec:41:f1:29:e3:e3:90:92:35:ac:0e: cf:47:13:ec:75:94:88:ab:40:18:bb:0b:b9:e4:77:0c:ed:89: f1:09:80:87:8a:7b:1e:f5:0a:7b:a3:e3:72:56:06:8e:0c:8f: b9:29:2a:1f:ad:d0:07:4c:b8:f9:3e:84:25:b1:42:09:54:65: 23:49:66:cb:af:b1:52:3f:37:83:f1:11:83:73:ae:49:5a:eb: 06:30:12:9f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pSrbyf0Lxqzel5ZOYhcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjZkMTQyYjViNmE1Mjk4ZDZiOGZhNTg0NWYyOTg3OGNmZWJiYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGWGsNIOP93WgJcbvF7XNh0ibKGe iz6q6vEFShi5VtdLXHK1vFz3qG1DFs6sF3hpN/VsGz0S9R3viWltNcbotqsX18zr pV444iFhBdwYxr/MS+lq/EH3vEkvp1zXUBdlKBbpo00c+SYytDE9xLdpgw6i2IpH JvIyuokWmGaqbLCCvQmPIJCVe8p4ccHioPvimaeiH1p+dt6V077v92JXOKYJqUwp 3IW+5FIHlcHbi3gRPBb/75OxOTRrikL3a6Tzu3mCob7BeBAb8KsQrhDIlsHSakef SYXgTOmVq1LuKCcalwIxoVMQPZ1lnz/LEDUkMpMh/k2U3uU4RisZzOEK9QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCttFCtbalKY1rj6WEXymHjP67xUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzFlM2Mx Mi0zMjA3LTQzMjUtODZmNS04YmVmZWU0OWVkNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMWUzYzEy LTMyMDctNDMyNS04NmY1LThiZWZlZTQ5ZWQ0ZC8xL0syMFVLMXRxVXBqV3VQcFlS ZktZZU1fcnZGUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAUPQLMA0EAgACMAcDBQMqE2/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8VjANBgkqhkiG9w0BAQsFAAOCAQEAhADt9jz+RCsv W3yejs5WKW9GJcTL5Au21bY3KBNwZ0PTQbMpzy8zy8HR0MY+oT/ue83867Pk/Q5s pgLLng7iOrqTM3Day/TiP7N+2x3w7RLA4WfMFGjEX9ribCTq1p4hKnsssdYoLtsa R7T3Wun5Ip4cKRmwP4/HX1l9l/rgnvQcN5DqcqVcAtpfqlBuxNYDKquxaOd42hem CLOeDZcTRqAYRTMpMeOksuxB8Snj45CSNawOz0cT7HWUiKtAGLsLueR3DO2J8QmA h4p7HvUKe6PjclYGjgyPuSkqH63QB0y4+T6EJbFCCVRlI0lmy6+xUj83g/ERg3Ou SVrrBjASnw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:00 2026 by rpki-client