This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer File: K577WHjTs2NNwcy5CsSOC4nRyHk.cer (raw, json) Hash identifier: plaClGbbxAw4cryGkufiDTG3PnWVbPf2CWKqsVcsJ4M= Subject key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF68278DC5FF229FB7E6D86341B9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202090 AS: 211973 IP: 81.91.190.0/23 IP: 178.159.44.0/22 IP: 178.159.240.0/21 IP: 185.47.152.0/23 IP: 185.65.136.0/23 IP: 185.99.142.0/23 IP: 193.176.180.0/22 IP: 2a0c:b1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f6:82:78:dc:5f:f2:29:fb:7e:6d:86:34:1b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:29:d0:42:54:aa:7e:c2:dd:25:b3:17:14:eb: 68:25:09:b1:77:7f:60:2e:79:b9:9c:1f:d7:19:61: eb:02:d4:28:4a:af:35:75:4f:af:64:29:a3:47:cc: 5d:3b:43:b3:72:60:3d:08:3d:56:de:06:83:1c:9e: 61:7b:41:2f:94:03:3a:ae:a7:8b:e5:4f:b1:5b:25: d5:8d:85:90:8a:43:da:4d:0e:31:16:05:51:17:92: 19:b8:ba:22:64:b0:f5:e2:16:a2:f3:5a:97:23:af: c5:66:1a:85:e8:eb:af:53:f1:3e:fd:eb:c3:19:54: 77:88:5d:aa:64:32:65:d8:a5:ef:64:56:57:c2:2c: fa:b2:35:16:9a:eb:f7:0a:d5:92:f9:1e:40:93:06: 5b:45:51:c0:cc:cf:13:2c:d0:98:ce:55:c4:89:11: 1f:f2:10:80:ef:31:d2:01:80:31:d4:2a:e9:b3:47: c4:97:ad:59:5d:c5:c1:03:37:1b:2c:c8:58:1b:73: ef:16:6c:c9:df:5e:49:26:60:20:b6:33:a9:4f:70: c7:ab:af:0c:c5:45:2d:7f:1e:74:1d:fb:d3:b3:db: 32:f5:72:6f:30:86:2b:60:42:ce:30:9e:a8:ef:a0: 5d:27:bf:89:bf:71:14:0a:f8:29:d4:e3:7b:fe:9f: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.91.190.0/23 178.159.44.0/22 178.159.240.0/21 185.47.152.0/23 185.65.136.0/23 185.99.142.0/23 193.176.180.0/22 IPv6: 2a0c:b1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202090 211973 Signature Algorithm: sha256WithRSAEncryption 96:32:9f:f6:14:a4:23:c3:83:bb:a3:60:c6:75:d4:cf:13:25: e9:0c:f6:8a:46:12:89:87:5a:e9:9f:d1:fb:8a:83:53:dd:55: b3:b4:12:af:4e:c5:cd:46:ba:81:4a:2b:61:f5:7c:d2:66:11: ee:33:49:28:35:f3:13:51:33:f0:8c:6d:c8:da:fb:1d:74:92: d8:ca:94:ec:a2:11:ae:2c:22:89:32:84:4e:a9:af:a8:7d:00: 29:30:10:a2:fb:49:93:fd:30:71:89:6d:85:34:b1:0c:7c:b9: ec:a8:e6:f8:a1:99:f0:08:ec:6c:30:87:c5:86:2a:09:91:77: 9a:ff:3c:6d:fd:0f:ec:72:32:83:11:5d:c6:bf:4f:7e:e8:43: 14:27:27:86:96:e2:7b:cd:e4:c6:6d:f5:2a:ef:f5:df:f5:d7: af:90:bd:09:12:d9:f5:da:21:ea:27:2c:2c:a2:3f:a5:40:c9: 51:5b:f6:42:90:29:18:ec:39:b5:06:c6:fd:50:19:38:9d:6a: 6a:8e:12:4d:3e:41:a1:2b:06:24:26:c1:d3:9c:cb:e8:8b:5a: 2d:b0:9a:0d:eb:b6:43:57:95:47:5d:95:db:e2:43:68:f1:26: cd:33:c7:f1:11:4f:79:aa:ee:28:21:bd:a9:fe:38:ae:92:8a: 1f:5f:8d:c2 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt5fvaCeNxf8in7fm2GNBudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjllZmI1ODc4ZDNiMzYzNGRjMWNjYjkwYWM0OGUwYjg5ZDFjODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5inQQlSqfsLdJbMXFOtoJQmxd39g Lnm5nB/XGWHrAtQoSq81dU+vZCmjR8xdO0OzcmA9CD1W3gaDHJ5he0EvlAM6rqeL 5U+xWyXVjYWQikPaTQ4xFgVRF5IZuLoiZLD14hai81qXI6/FZhqF6OuvU/E+/evD GVR3iF2qZDJl2KXvZFZXwiz6sjUWmuv3CtWS+R5AkwZbRVHAzM8TLNCYzlXEiREf 8hCA7zHSAYAx1Crps0fEl61ZXcXBAzcbLMhYG3PvFmzJ315JJmAgtjOpT3DHq68M xUUtfx50HfvTs9sy9XJvMIYrYELOMJ6o76BdJ7+Jv3EUCvgp1ON7/p8WfwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFCue+1h407NjTcHMuQrEjguJ0ch5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmL2QwMzYw OC0zYzY3LTQyM2QtYjE4ZC00YmNkM2Q1ODQ2M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvZDAzNjA4 LTNjNjctNDIzZC1iMThkLTRiY2QzZDU4NDYzYS8xL0s1NzdXSGpUczJOTndjeTVD c1NPQzRuUnlIay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQBUVu+AwQCsp8sAwQDsp/wAwQBuS+YAwQBuUGI AwQBuWOOAwQCwbC0MA0EAgACMAcDBQMqDLHAMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwMVagIDAzwFMA0GCSqGSIb3DQEBCwUAA4IBAQCWMp/2FKQjw4O7o2DGddTP EyXpDPaKRhKJh1rpn9H7ioNT3VWztBKvTsXNRrqBSith9XzSZhHuM0koNfMTUTPw jG3I2vsddJLYypTsohGuLCKJMoROqa+ofQApMBCi+0mT/TBxiW2FNLEMfLnsqOb4 oZnwCOxsMIfFhioJkXea/zxt/Q/scjKDEV3Gv09+6EMUJyeGluJ7zeTGbfUq7/Xf 9devkL0JEtn12iHqJywsoj+lQMlRW/ZCkCkY7Dm1Bsb9UBk4nWpqjhJNPkGhKwYk JsHTnMvoi1otsJoN67ZDV5VHXZXb4kNo8SbNM8fxEU95qu4oIb2p/jiukoofX43C -----END CERTIFICATE-----Generated at Mon Jan 26 01:18:06 2026 by rpki-client