This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer File: K8hpV3Lw5k87mhYhczzAJQb3RwI.cer (raw, json) Hash identifier: ZsS/ewqmrZHkwTU0CFKqI9cynls1NMak2SchA1zfo1Q= Subject key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791146B437F1D35C65F7DC414B100F37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35732 IP: 91.188.208.0/22 IP: 2a0f:b1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:b4:37:f1:d3:5c:65:f7:dc:41:4b:10:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bc8695772f0e64f3b9a1621733cc02506f74702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:52:85:b7:7e:5d:1c:ce:a3:3b:37:5d:56: 45:0f:e0:0c:84:f4:7d:4c:8a:19:14:a5:79:00:09: 4d:9a:ab:b0:17:aa:6b:62:58:05:ad:c9:7e:ec:99: 26:a5:16:54:73:45:66:8e:8e:e5:75:8e:dc:40:53: e9:8c:94:c6:ea:86:1d:16:fe:cf:71:bf:00:25:6f: 3b:8f:58:32:02:56:eb:ef:5a:5b:63:f6:98:96:7b: d6:e7:1a:d8:70:95:bb:91:cb:19:25:11:50:e3:10: b4:d2:2c:b0:eb:0e:a4:c9:22:03:0d:46:8f:3a:c2: a7:57:6a:1e:00:07:4e:8f:9a:f0:3e:84:aa:e4:bd: be:ba:9e:d8:ae:61:7d:05:f6:ef:7b:d6:09:0d:7b: 8b:3b:6c:96:e1:99:49:e3:1c:30:d0:5b:c2:65:f4: d1:ad:30:50:25:37:71:5c:bf:a2:40:ec:c1:3e:c7: e7:01:af:84:1a:11:4b:6d:46:bd:e1:2f:90:68:d2: e6:02:c8:44:ad:c6:36:9e:2d:a8:8e:8f:ae:8e:16: 49:e7:70:71:ad:d5:cc:bc:c6:2b:6f:fb:52:92:20: 64:47:5e:e8:f1:e2:4b:5d:4d:b9:ea:ae:12:f6:c8: 0f:fe:7c:53:f6:da:22:b6:38:99:04:49:56:e8:14: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.208.0/22 IPv6: 2a0f:b1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35732 Signature Algorithm: sha256WithRSAEncryption 2e:9a:64:8f:ad:0e:72:e2:0c:b8:44:c2:70:eb:d1:6b:2e:0c: 67:0d:70:4c:8c:b5:45:95:2b:a6:4d:58:5e:de:9e:b5:dc:33: 76:32:e9:e6:64:ba:09:fa:6d:25:62:bb:ca:61:db:29:c1:4a: ee:ab:a3:cd:e7:91:94:8f:34:7b:7e:a9:ab:41:74:56:7c:96: 6f:22:7f:95:43:1d:aa:25:a2:aa:55:a0:99:43:eb:aa:43:2a: 02:b9:9a:74:8d:bd:76:65:98:64:99:a0:68:2b:fb:d4:cf:e4: 38:10:87:ce:88:81:60:ec:e6:e8:23:06:ba:29:d9:9e:b2:2a: 2e:2e:bf:15:b3:aa:3a:a1:24:50:ce:a2:8a:c3:31:01:a4:66: de:c9:c5:99:2a:e8:54:04:1c:f7:aa:12:0f:9b:1c:18:8b:e1: 99:aa:97:41:35:8e:19:3d:5e:0c:de:2d:21:dd:e1:a9:42:67: 17:6c:7c:5f:1d:2e:2b:01:29:bd:4a:ca:39:b2:fe:75:3c:1e: 20:78:59:99:0f:67:07:f8:a1:60:3b:3e:26:2d:c6:15:a3:9f: 67:b5:dd:8e:13:e6:eb:c8:15:ea:23:fe:eb:8b:ff:5c:22:4e: fc:85:79:37:ed:9d:32:ba:b6:57:87:c0:2a:8f:16:46:5f:cf: 30:89:ac:36 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EUa0N/HTXGX33EFLEA83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmM4Njk1NzcyZjBlNjRmM2I5YTE2MjE3MzNjYzAyNTA2Zjc0NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTFShbd+XRzOozs3XVZFD+AMhPR9 TIoZFKV5AAlNmquwF6prYlgFrcl+7JkmpRZUc0Vmjo7ldY7cQFPpjJTG6oYdFv7P cb8AJW87j1gyAlbr71pbY/aYlnvW5xrYcJW7kcsZJRFQ4xC00iyw6w6kySIDDUaP OsKnV2oeAAdOj5rwPoSq5L2+up7YrmF9Bfbve9YJDXuLO2yW4ZlJ4xww0FvCZfTR rTBQJTdxXL+iQOzBPsfnAa+EGhFLbUa94S+QaNLmAshErcY2ni2ojo+ujhZJ53Bx rdXMvMYrb/tSkiBkR17o8eJLXU256q4S9sgP/nxT9toitjiZBElW6BQmmQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCvIaVdy8OZPO5oWIXM8wCUG90cCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5L2NiZmE5 Yi0wMjkxLTQ4ZTMtODA1Yy00M2Q2NmEwMzMxZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvY2JmYTli LTAyOTEtNDhlMy04MDVjLTQzZDY2YTAzMzFlYy8xL0s4aHBWM0x3NWs4N21oWWhj enpBSlFiM1J3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW7zQMA0EAgACMAcDBQMqD7HAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCLlDANBgkqhkiG9w0BAQsFAAOCAQEALppkj60OcuIM uETCcOvRay4MZw1wTIy1RZUrpk1YXt6etdwzdjLp5mS6CfptJWK7ymHbKcFK7quj zeeRlI80e36pq0F0VnyWbyJ/lUMdqiWiqlWgmUPrqkMqArmadI29dmWYZJmgaCv7 1M/kOBCHzoiBYOzm6CMGuinZnrIqLi6/FbOqOqEkUM6iisMxAaRm3snFmSroVAQc 96oSD5scGIvhmaqXQTWOGT1eDN4tId3hqUJnF2x8Xx0uKwEpvUrKObL+dTweIHhZ mQ9nB/ihYDs+Ji3GFaOfZ7XdjhPm68gV6iP+64v/XCJO/IV5N+2dMrq2V4fAKo8W Rl/PMImsNg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:53 2026 by rpki-client