This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer File: RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer (raw, json) Hash identifier: sU8DDKTsosybWz3L+ceYiOXmdZgf8JkSM8yNe736mV4= Subject key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910420B224E8EED182399A2E1AACB68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2865 AS: 25473 AS: 34950 AS: 49969 AS: 50764 IP: 82.196.160.0/19 IP: 185.222.176.0/22 IP: 193.8.32.0/22 IP: 193.41.168.0/23 IP: 193.192.54.0/23 IP: 195.138.221.0/24 IP: 195.189.188.0/23 IP: 195.211.132.0/22 IP: 2a01:e8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:42:0b:22:4e:8e:ed:18:23:99:a2:e1:aa:cb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:45:1e:59:d4:f1:b6:1f:9b:38:a7:c8:ab:d7: 70:dc:77:82:f7:bd:3d:37:ce:d7:02:8d:42:bd:b3: 94:58:a6:16:59:43:1d:db:47:ea:e6:ba:ba:e8:7c: e0:92:7b:87:b3:9f:5f:7a:70:ed:67:fb:e7:9a:f5: ea:c7:9a:dd:e0:90:c2:01:9a:92:e2:01:a1:80:be: 8b:32:56:4c:b7:8d:1d:d5:64:52:cf:01:24:69:98: 50:4d:fa:4e:f9:3f:f0:44:18:31:c7:5e:85:4b:02: df:a4:b7:05:1c:c0:73:4c:64:95:db:a8:9a:42:02: 31:f3:99:14:e6:f7:1c:2d:9c:65:b1:d1:5f:fd:34: d7:c9:39:20:a0:9a:1c:8c:4f:bf:a1:66:3a:93:95: 7a:d9:23:cf:f8:94:e2:b2:d2:28:7a:fe:de:5d:88: d3:6a:70:1b:35:61:19:95:e7:32:13:72:71:e5:81: ae:c7:38:45:eb:45:95:25:51:a9:8c:a3:41:56:cc: ca:b7:6e:bf:a9:db:97:2b:3f:0a:04:5c:7a:38:01: cf:c7:28:8b:46:b9:cc:b4:24:ef:cf:23:20:1e:21: 45:16:d3:ac:12:0f:6d:d1:c8:ba:5b:86:6e:0a:5d: 5c:d6:cc:57:3c:c8:5d:a9:a9:95:fd:80:95:70:6b: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.196.160.0/19 185.222.176.0/22 193.8.32.0/22 193.41.168.0/23 193.192.54.0/23 195.138.221.0/24 195.189.188.0/23 195.211.132.0/22 IPv6: 2a01:e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2865 25473 34950 49969 50764 Signature Algorithm: sha256WithRSAEncryption 95:13:6b:1f:53:36:e0:52:04:e0:b5:c2:63:ae:bb:93:0f:16: 50:df:fe:e6:49:0c:e9:e1:a3:c3:8d:ff:a1:6e:7e:7e:06:3f: bc:a3:15:76:49:28:ca:85:b7:12:e1:97:db:61:da:4a:c9:a8: 00:68:02:23:b2:85:eb:ef:fa:f8:c8:f9:54:0c:73:9b:97:9b: 8f:31:e0:a9:39:75:84:60:21:a7:48:b3:2e:92:04:68:de:c7: 49:f9:d0:e2:91:95:f0:41:12:76:66:66:ff:fe:08:84:5b:cc: 37:f8:09:9e:7a:0a:02:37:da:ae:bc:98:55:99:5e:90:f8:c1: f4:11:c0:e5:91:c1:57:7a:c7:78:e0:72:67:78:8f:cc:90:72: 51:2d:2b:07:36:7e:e9:ea:4f:88:b4:cb:45:8f:e7:f9:07:7e: 95:2d:64:b2:64:3b:49:d9:96:a9:71:2a:1b:77:3d:7f:69:4b: d2:55:01:dd:3c:84:d7:59:37:96:a0:7e:37:2f:a2:80:2e:36: 34:c9:d7:37:98:10:c1:b6:8b:ea:59:ac:3e:90:97:16:18:41: ee:10:49:33:4f:d0:29:f1:89:ba:52:31:4a:bd:58:3b:6c:ee: 96:63:31:7d:d9:c7:be:33:92:d5:b1:a5:0c:c7:1c:bb:e5:8a: df:84:42:00 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt5EEILIk6O7RgjmaLhqstoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGE3ZTVhMzNkOWM1YTk2NWQ5ZmJmZGVlY2RjODcxYWYwYTVkNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EUeWdTxth+bOKfIq9dw3HeC9709 N87XAo1CvbOUWKYWWUMd20fq5rq66HzgknuHs59fenDtZ/vnmvXqx5rd4JDCAZqS 4gGhgL6LMlZMt40d1WRSzwEkaZhQTfpO+T/wRBgxx16FSwLfpLcFHMBzTGSV26ia QgIx85kU5vccLZxlsdFf/TTXyTkgoJocjE+/oWY6k5V62SPP+JTistIoev7eXYjT anAbNWEZlecyE3Jx5YGuxzhF60WVJVGpjKNBVszKt26/qduXKz8KBFx6OAHPxyiL RrnMtCTvzyMgHiFFFtOsEg9t0ci6W4ZuCl1c1sxXPMhdqamV/YCVcGsQlQIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFESn5aM9nFqWXZ+/3uzchxrwpdT4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzBkODA4 OC1lYTkzLTRhYmItODk5Ni0yMWNmNTZjYmNlMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMGQ4MDg4 LWVhOTMtNGFiYi04OTk2LTIxY2Y1NmNiY2UxMi8xL1JLZmxvejJjV3BaZG43X2U3 TnlIR3ZDbDFQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQFUsSgAwQCud6wAwQCwQggAwQBwSmoAwQBwcA2 AwQAw4rdAwQBw728AwQCw9OEMA0EAgACMAcDBQAqAQDoMCwGCCsGAQUFBwEIAQH/ BB0wG6AZMBcCAgsxAgJjgQIDAIiGAgMAwzECAwDGTDANBgkqhkiG9w0BAQsFAAOC AQEAlRNrH1M24FIE4LXCY667kw8WUN/+5kkM6eGjw43/oW5+fgY/vKMVdkkoyoW3 EuGX22HaSsmoAGgCI7KF6+/6+Mj5VAxzm5ebjzHgqTl1hGAhp0izLpIEaN7HSfnQ 4pGV8EESdmZm//4IhFvMN/gJnnoKAjfarryYVZlekPjB9BHA5ZHBV3rHeOByZ3iP zJByUS0rBzZ+6epPiLTLRY/n+Qd+lS1ksmQ7SdmWqXEqG3c9f2lL0lUB3TyE11k3 lqB+Ny+igC42NMnXN5gQwbaL6lmsPpCXFhhB7hBJM0/QKfGJulIxSr1YO2zulmMx fdnHvjOS1bGlDMccu+WK34RCAA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:14 2026 by rpki-client