This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer File: K_L644DF1MHigYEKNNuYg8nZ_y8.cer (raw, json) Hash identifier: 8gxOkqFoPW7YHKfjb6akNW0iP7G7Uu70my9OT0W3RJ4= Subject key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC78277807F7FA95049D58BBC3051FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.223.187.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:82:77:80:7f:7f:a9:50:49:d5:8b:bc:30:51:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:31:92:51:70:e3:7a:22:38:75:42:f4:bc: e6:a3:9f:3f:85:6f:cf:76:f1:f8:c2:87:fc:44:9e: 7b:aa:76:b4:b7:ed:9a:1c:82:62:44:18:26:fb:8a: f6:c5:d9:c1:7b:4e:60:9f:7a:6d:92:df:25:e0:f7: e0:0f:f2:2e:77:12:4d:cb:3f:ea:51:e5:d1:88:f6: 33:a6:e2:b6:c4:0a:29:e4:f3:1f:ef:ce:a2:a2:6c: 54:5a:b2:85:e1:ec:f2:e4:79:62:3e:3a:e7:9d:52: ab:db:69:0f:a1:62:f7:22:4b:b4:42:fd:37:6f:2f: 62:5b:4d:2e:ac:47:fb:6c:92:99:89:7d:74:0f:fb: 7f:94:48:1b:9e:02:aa:6e:f2:6f:fa:ec:79:7b:b3: 26:55:c7:99:3e:1a:6a:c7:7c:1b:48:bc:74:2d:f7: 70:25:f9:95:c7:6e:bd:aa:aa:47:ff:45:7d:5f:2a: 90:a9:19:a4:58:3d:5d:34:df:b0:4f:05:03:f0:84: 21:82:c7:2e:75:8b:1d:3b:aa:5d:a1:3a:be:19:50: 09:75:04:8f:b7:55:55:de:0f:37:39:e0:d5:f7:ed: 67:5c:d8:76:9f:9a:09:ce:e4:11:76:08:c8:c5:8e: f0:09:3a:f1:db:ca:d6:53:4c:2c:2a:9e:24:35:11: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.187.0/24 Signature Algorithm: sha256WithRSAEncryption 45:90:8a:b2:24:ca:15:da:54:c8:56:8a:12:50:6e:c4:25:9e: cf:32:f4:28:93:4d:75:53:ce:20:71:ea:d5:fd:3b:29:90:39: d8:70:4c:b6:84:79:16:53:bd:f5:13:18:1d:74:aa:b7:27:05: 60:15:07:d3:76:99:d8:c7:ff:f9:0e:99:54:da:a0:18:98:10: f7:b8:8d:e9:75:6a:c8:9a:a7:8f:b8:d9:32:91:55:bb:57:0e: be:cc:cd:85:7f:b2:23:02:4d:17:c0:93:f3:b5:f5:fe:f9:21: 4e:42:5c:f5:22:51:c7:7a:ca:ec:e4:4b:87:39:54:8b:22:f4: 83:2c:85:cf:a4:cc:2d:3c:01:ba:46:01:b6:cf:7c:ab:ca:c9: 9e:17:33:14:b0:be:36:0e:3f:54:7d:ec:e0:87:02:d3:57:53: 2d:0a:e7:f2:d9:5c:8e:42:ad:5d:c0:b9:b0:71:6e:7f:28:86: b1:66:28:6f:a2:d7:ad:88:fb:db:84:cc:cb:08:be:5c:be:42: 62:9d:21:ba:ff:66:fe:1a:98:79:cc:70:64:d2:80:3c:a6:b6: c9:f5:20:be:42:28:e0:cb:60:34:84:f2:33:6b:be:f9:9a:be: ca:77:31:14:e7:3e:97:35:5e:77:38:5e:07:1e:12:60:dd:cf: 19:e8:90:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6x4J3gH9/qVBJ1Yu8MFH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmYyZmFlMzgwYzVkNGMxZTI4MTgxMGEzNGRiOTg4M2M5ZDlmZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvMxklFw43oiOHVC9Lzmo58/hW/P dvH4wof8RJ57qna0t+2aHIJiRBgm+4r2xdnBe05gn3ptkt8l4PfgD/IudxJNyz/q UeXRiPYzpuK2xAop5PMf786iomxUWrKF4ezy5HliPjrnnVKr22kPoWL3Iku0Qv03 by9iW00urEf7bJKZiX10D/t/lEgbngKqbvJv+ux5e7MmVceZPhpqx3wbSLx0Lfdw JfmVx269qqpH/0V9XyqQqRmkWD1dNN+wTwUD8IQhgscudYsdO6pdoTq+GVAJdQSP t1VV3g83OeDV9+1nXNh2n5oJzuQRdgjIxY7wCTrx28rWU0wsKp4kNRFExQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzEzZTFm Zi1hNWQzLTQ0Y2QtYjFiZS1mYmYwZWQzZjkxNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvMTNlMWZm LWE1ZDMtNDRjZC1iMWJlLWZiZjBlZDNmOTE1Ny8xL0tfTDY0NERGMU1IaWdZRUtO TnVZZzhuWl95OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9+7MA0GCSqGSIb3DQEBCwUAA4IBAQBFkIqy JMoV2lTIVooSUG7EJZ7PMvQok011U84gcerV/TspkDnYcEy2hHkWU731ExgddKq3 JwVgFQfTdpnYx//5DplU2qAYmBD3uI3pdWrImqePuNkykVW7Vw6+zM2Ff7IjAk0X wJPztfX++SFOQlz1IlHHesrs5EuHOVSLIvSDLIXPpMwtPAG6RgG2z3yrysmeFzMU sL42Dj9UfezghwLTV1MtCufy2VyOQq1dwLmwcW5/KIaxZihvotetiPvbhMzLCL5c vkJinSG6/2b+Gph5zHBk0oA8prbJ9SC+Qijgy2A0hPIza775mr7KdzEU5z6XNV53 OF4HHhJg3c8Z6JBk -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:26 2026 by rpki-client