This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer File: Ka2L_getXSzLQ7DR26axkstR2-o.cer (raw, json) Hash identifier: icWi5LWBl4KMFHOD5/xbUTAJiR0yPMa4BavssIrqtlw= Subject key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED23720030F8692F857B3E2B11E108 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48337 IP: 80.85.84.0/22 IP: 85.90.244.0/22 IP: 85.159.208.0/21 IP: 88.80.184.0/21 IP: 109.74.192.0/20 IP: 109.237.24.0/22 IP: 151.236.216.0/21 IP: 176.58.96.0/19 IP: 178.79.128.0/18 IP: 185.3.92.0/22 IP: 192.46.208.0 -- 192.46.239.255 IP: 192.53.112.0/20 IP: 192.53.160.0/20 IP: 194.195.112.0/20 IP: 194.195.208.0/20 IP: 194.195.240.0/20 IP: 194.233.160.0/19 IP: 212.71.232.0/21 IP: 212.71.244.0 -- 212.71.255.255 IP: 212.111.40.0/22 IP: 213.52.128.0/22 IP: 213.168.248.0/22 IP: 213.219.36.0/22 IP: 2001:678:34c::/48 IP: 2a01:7e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:23:72:00:30:f8:69:2f:85:7b:3e:2b:11:e1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:af:06:76:20:ab:bd:f8:9e:b0:47:38:60:18: 9a:25:b6:8d:f5:3e:e0:e6:c6:b5:20:4b:aa:18:da: 8b:ea:42:e3:9d:d9:54:d3:01:ff:94:ac:c3:a9:08: 75:1c:b6:0d:e0:a1:87:7a:c7:24:f3:22:39:94:0d: 92:9e:aa:89:2c:d5:db:a4:10:15:4a:b6:8f:ab:cc: ab:91:96:bb:21:38:95:b9:52:6c:41:3b:8b:8f:ed: dc:b3:2d:f7:09:9a:88:53:ab:ac:ed:59:c1:21:df: bc:89:3d:5a:c2:50:25:ca:2a:77:4c:2a:e0:3c:7b: 30:fe:6f:65:c6:67:bf:3c:cd:8f:95:3c:7e:49:6c: 8d:f3:26:88:47:e2:56:67:00:2f:e9:d6:a8:6c:eb: 7d:d5:ca:cd:52:d4:0c:8a:e7:41:8b:03:a2:21:70: 4c:ed:fe:ca:35:32:53:73:06:8a:06:ab:3c:a2:3f: c7:89:c3:ca:cf:03:cc:42:fc:a6:1b:7c:85:cb:62: eb:ff:83:7e:a1:a1:45:40:be:c7:bb:62:3f:20:8b: dc:6a:eb:06:4b:f7:89:c6:9f:3e:e7:cf:37:7c:4f: 38:d1:29:58:cf:9a:f4:d2:26:2f:82:f0:cd:14:88: df:15:c7:77:6e:65:a1:16:ff:34:41:93:90:2d:11: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.84.0/22 85.90.244.0/22 85.159.208.0/21 88.80.184.0/21 109.74.192.0/20 109.237.24.0/22 151.236.216.0/21 176.58.96.0/19 178.79.128.0/18 185.3.92.0/22 192.46.208.0-192.46.239.255 192.53.112.0/20 192.53.160.0/20 194.195.112.0/20 194.195.208.0/20 194.195.240.0/20 194.233.160.0/19 212.71.232.0/21 212.71.244.0-212.71.255.255 212.111.40.0/22 213.52.128.0/22 213.168.248.0/22 213.219.36.0/22 IPv6: 2001:678:34c::/48 2a01:7e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48337 Signature Algorithm: sha256WithRSAEncryption 86:af:1a:5b:39:c2:75:90:77:87:19:24:dd:a3:70:65:aa:8f: 89:64:be:20:93:c1:fa:e4:f2:37:34:c1:d0:eb:61:b5:b2:86: 30:ac:bb:2e:e6:8e:af:82:52:37:a5:a8:d5:ce:db:93:a0:83: 6c:d2:f0:d5:fe:42:3f:70:dc:1b:5a:e7:97:e8:a5:f3:6e:f1: 4b:52:dd:33:7d:d6:62:3a:e3:cd:58:5c:f3:c1:15:20:2e:6e: da:52:ee:01:0b:58:28:e6:b7:6d:3c:35:1d:60:df:77:67:68: 0b:96:a1:30:b2:42:f1:69:90:10:36:0d:da:da:44:f5:0c:16: fd:56:f2:45:ec:4a:8f:4b:1f:02:63:ae:d9:a9:68:5c:a7:88: f9:11:2f:ac:c1:1f:02:00:cc:5b:d1:f6:99:a8:35:c8:42:86: 7b:a4:6a:56:b8:00:7b:bd:2a:e5:6f:54:f0:69:d7:af:25:f8: 5d:84:b9:a2:d9:72:ca:15:53:d0:51:c9:09:45:af:a1:ec:f3: 3b:4d:85:d4:69:7d:d3:0a:09:d8:8d:36:1d:06:18:e1:08:1b: cd:c1:7a:f3:f3:a7:94:b9:8f:ed:6e:5a:90:40:3b:9c:2c:5e: 60:71:fd:8c:bf:6b:af:ad:c7:e3:28:70:dc:93:c0:13:2b:c1: 4a:da:82:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgISAZt87SNyADD4aS+Fez4rEeEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWFkOGJmZTA3YWQ1ZDJjY2I0M2IwZDFkYmE2YjE5MmNiNTFkYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK8GdiCrvfiesEc4YBiaJbaN9T7g 5sa1IEuqGNqL6kLjndlU0wH/lKzDqQh1HLYN4KGHesck8yI5lA2SnqqJLNXbpBAV SraPq8yrkZa7ITiVuVJsQTuLj+3csy33CZqIU6us7VnBId+8iT1awlAlyip3TCrg PHsw/m9lxme/PM2PlTx+SWyN8yaIR+JWZwAv6daobOt91crNUtQMiudBiwOiIXBM 7f7KNTJTcwaKBqs8oj/HicPKzwPMQvymG3yFy2Lr/4N+oaFFQL7Hu2I/IIvcausG S/eJxp8+5883fE840SlYz5r00iYvgvDNFIjfFcd3bmWhFv80QZOQLRHFcwIDAQAB o4IDUDCCA0wwHQYDVR0OBBYEFCmti/4HrV0sy0Ow0dumsZLLUdvqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzIzNWQy Ni03MDk0LTRmZWItOWNhOS0zNzg0OTkzOThmMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvMjM1ZDI2 LTcwOTQtNGZlYi05Y2E5LTM3ODQ5OTM5OGYxOC8xL0thMkxfZ2V0WFN6TFE3RFIy NmF4a3N0UjItby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHOBggrBgEF BQcBBwEB/wSBvjCBuzCBoAQCAAEwgZkDBAJQVVQDBAJVWvQDBANVn9ADBANYULgD BARtSsADBAJt7RgDBAOX7NgDBAWwOmADBAayT4ADBAK5A1wwDAMEBMAu0AMEBMAu 4AMEBMA1cAMEBMA1oAMEBMLDcAMEBMLD0AMEBMLD8AMEBcLpoAMEA9RH6DALAwQC 1Ef0AwMD1EADBALUbygDBALVNIADBALVqPgDBALV2yQwFgQCAAIwEAMHACABBngD TAMFAyoBfgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALzRMA0GCSqGSIb3DQEB CwUAA4IBAQCGrxpbOcJ1kHeHGSTdo3Blqo+JZL4gk8H65PI3NMHQ62G1soYwrLsu 5o6vglI3pajVztuToINs0vDV/kI/cNwbWueX6KXzbvFLUt0zfdZiOuPNWFzzwRUg Lm7aUu4BC1go5rdtPDUdYN93Z2gLlqEwskLxaZAQNg3a2kT1DBb9VvJF7EqPSx8C Y67ZqWhcp4j5ES+swR8CAMxb0faZqDXIQoZ7pGpWuAB7vSrlb1TwadevJfhdhLmi 2XLKFVPQUckJRa+h7PM7TYXUaX3TCgnYjTYdBhjhCBvNwXrz86eUuY/tblqQQDuc LF5gcf2Mv2uvrcfjKHDck8ATK8FK2oJ2 -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:16 2026 by rpki-client