This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer (raw, json) Hash identifier: Xk6BDtfC1UQBIv1R5uVDEXuI4H9hPWBTHjHE/zGXobw= Subject key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6BCFB0E1D6FD2AFC4609E492B8339 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.169.79.0/24 IP: 2a14:8f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bc:fb:0e:1d:6f:d2:af:c4:60:9e:49:2b:83:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bc7b51dbf35aa4239abdad55f966945659401cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:73:a0:3d:a0:ab:23:d6:5d:c4:d7:65:15: 64:74:7f:dc:d7:10:3e:a6:36:48:f3:2a:1f:7e:9b: 75:f2:d9:ea:fd:5c:e9:06:1b:4a:31:b3:87:e5:51: 48:42:6c:d6:15:12:ef:77:39:8f:3e:f9:d9:46:cd: 98:77:6c:51:88:eb:d8:87:16:bb:22:82:98:2f:63: f1:31:3e:dd:3f:dc:be:97:a6:60:2e:8e:84:a9:f6: 92:1f:76:4c:81:0b:94:87:a7:41:6c:f7:97:a5:a2: 92:4f:92:2b:9d:e2:d8:44:7f:52:42:41:e5:87:18: ea:a7:b9:df:37:c3:5d:e0:23:26:d4:d4:a9:3c:87: e4:17:b6:b8:5c:4c:31:81:61:4a:73:67:4f:5a:a8: 77:ea:b2:85:0c:40:bd:52:60:56:24:55:81:46:60: 30:d1:75:83:56:9c:04:74:f0:d8:55:fb:c4:27:4f: ce:61:33:6e:79:8a:c6:f1:97:9b:6f:32:c8:16:ab: ed:5a:1f:bb:3d:5f:2b:2a:6f:30:a3:5e:18:fc:32: 27:95:a6:77:28:cb:c8:de:a9:3f:94:0c:4e:66:4c: 31:31:3c:64:58:18:cf:4d:4d:21:09:5a:3d:17:52: aa:a8:18:2d:4f:8d:0b:66:c9:9d:30:02:37:c0:51: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.79.0/24 IPv6: 2a14:8f00::/29 Signature Algorithm: sha256WithRSAEncryption 82:b0:c6:8b:62:eb:b3:14:69:de:aa:86:bd:17:38:80:c1:03: a8:ad:ff:35:d1:bc:b2:e5:52:7c:0c:8d:73:30:69:aa:49:bc: 81:52:51:5c:52:29:71:39:79:70:92:6a:dd:d7:84:72:50:fd: ec:07:f6:27:82:48:fb:bc:59:33:76:f3:c1:7f:8d:8f:ae:d0: f0:cb:46:de:ce:3a:81:f0:51:cd:cb:4e:b2:e8:3e:5a:b7:c9: 48:3d:5f:58:d1:7b:bd:6e:58:f5:11:14:7a:fc:87:af:25:ed: f0:a6:b7:90:50:bb:c9:55:ef:bc:8a:e8:cd:ac:8c:c6:47:3c: 9c:33:50:d5:1c:63:05:fc:9d:f0:ff:5e:14:d0:d2:c1:e9:7b: 71:0d:86:71:4f:35:53:9c:7c:27:2f:b9:c6:a3:3e:8c:0c:85: 6c:01:ce:94:82:9d:77:e4:82:fe:49:53:0c:3e:c2:2b:05:12: 80:dd:47:3b:31:d4:f5:96:4b:e0:c5:3c:85:32:a6:4f:40:e8: dd:72:81:d3:6b:06:05:11:83:5d:7c:b1:1a:f9:98:4c:79:8c: 79:b9:53:86:03:f0:6f:78:89:ba:b9:39:ff:7b:7a:af:e8:1e: c4:94:f9:7c:d0:85:9b:31:9d:4b:51:dd:31:0a:5e:74:d8:67: 88:e9:51:44 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xrz7Dh1v0q/EYJ5JK4M5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmM3YjUxZGJmMzVhYTQyMzlhYmRhZDU1Zjk2Njk0NTY1OTQwMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5RzoD2gqyPWXcTXZRVkdH/c1xA+ pjZI8yoffpt18tnq/VzpBhtKMbOH5VFIQmzWFRLvdzmPPvnZRs2Yd2xRiOvYhxa7 IoKYL2PxMT7dP9y+l6ZgLo6EqfaSH3ZMgQuUh6dBbPeXpaKST5IrneLYRH9SQkHl hxjqp7nfN8Nd4CMm1NSpPIfkF7a4XEwxgWFKc2dPWqh36rKFDEC9UmBWJFWBRmAw 0XWDVpwEdPDYVfvEJ0/OYTNueYrG8ZebbzLIFqvtWh+7PV8rKm8wo14Y/DInlaZ3 KMvI3qk/lAxOZkwxMTxkWBjPTU0hCVo9F1KqqBgtT40LZsmdMAI3wFH05wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCvHtR2/NapCOava1V+WaUVllAHPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2IxYjkx Yy1iNTJiLTRiZGYtYmEwZC0yYTM4MTI0YmFkOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvYjFiOTFj LWI1MmItNGJkZi1iYTBkLTJhMzgxMjRiYWQ4Yy8xL0s4ZTFIYjgxcWtJNXE5clZY NVpwUldXVUFjOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAualPMA0EAgACMAcDBQMqFI8AMA0GCSqGSIb3 DQEBCwUAA4IBAQCCsMaLYuuzFGneqoa9FziAwQOorf810byy5VJ8DI1zMGmqSbyB UlFcUilxOXlwkmrd14RyUP3sB/Yngkj7vFkzdvPBf42PrtDwy0bezjqB8FHNy06y 6D5at8lIPV9Y0Xu9blj1ERR6/IevJe3wpreQULvJVe+8iujNrIzGRzycM1DVHGMF /J3w/14U0NLB6XtxDYZxTzVTnHwnL7nGoz6MDIVsAc6Ugp135IL+SVMMPsIrBRKA 3Uc7MdT1lkvgxTyFMqZPQOjdcoHTawYFEYNdfLEa+ZhMeYx5uVOGA/BveIm6uTn/ e3qv6B7ElPl80IWbMZ1LUd0xCl502GeI6VFE -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:45 2026 by rpki-client