This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer File: RklSvBZUQexuLiAQyTPcgw82FzE.cer (raw, json) Hash identifier: 48yP3wiJwJu20nxc6QxXfD2P8//nJPqBjmK7zsKXgLk= Subject key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C135A01767FABE18ACC0F3BBE4CA9B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29473 AS: 48457 AS: 210696 IP: 89.34.3.0/24 IP: 89.35.0.0/23 IP: 89.37.139.0/24 IP: 89.37.141.0/24 IP: 89.39.88.0/24 IP: 89.40.42.0/24 IP: 89.42.30.0/24 IP: 89.45.66.0/24 IP: 93.113.128.0/24 IP: 93.113.205.0/24 IP: 185.118.4.0/22 IP: 185.206.55.0/24 IP: 188.212.5.0/24 IP: 188.213.1.0/24 IP: 188.213.35.0/24 IP: 188.213.50.0/24 IP: 188.213.213.0/24 IP: 188.214.150.0/24 IP: 188.214.227.0/24 IP: 194.26.128.0/24 IP: 217.19.6.0/24 IP: 2a06:90c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5a:01:76:7f:ab:e1:8a:cc:0f:3b:be:4c:a9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464952bc165441ec6e2e2010c933dc830f361731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:29:3c:5d:1e:76:52:b3:11:f9:13:32:eb: 33:91:e9:5a:af:ae:40:21:be:c7:bb:92:f3:f1:48: cf:8a:ba:1d:1d:15:71:d2:9a:7f:6a:32:a9:1e:16: f8:9f:4d:39:0f:6f:b1:61:20:3c:3e:dc:40:d2:ad: 13:2c:59:10:d3:e4:78:29:3f:48:7c:19:a8:31:0e: 4a:a3:37:70:25:f4:a7:bf:a6:8e:26:fa:56:b6:18: 04:9d:5e:8f:db:4b:8e:f8:05:4d:5d:0b:d0:76:35: ff:5d:6a:46:8a:fe:d8:2a:ee:d2:99:ad:d7:30:25: c9:fc:26:23:aa:22:ef:bf:69:e6:7f:83:f0:82:40: 1e:8d:14:e2:0a:d8:17:ca:28:25:ff:6b:21:ee:f5: ba:90:60:c4:a5:ee:ff:40:c3:b7:30:14:19:ca:ab: 16:ce:b4:4a:f7:60:35:b1:42:d6:25:f9:90:44:a3: ed:70:82:f6:38:a5:e6:fd:9d:1f:54:40:41:89:a9: 18:0c:bf:fe:a3:ab:bd:32:25:d7:2b:83:26:23:e2: da:a4:c2:ff:6b:f6:b7:12:63:d2:e6:31:26:81:cf: 46:8d:a9:76:94:7f:73:c5:3c:1a:37:70:bc:84:37: d6:df:aa:5f:5f:a3:c8:ad:fa:f2:de:9e:57:98:a9: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.3.0/24 89.35.0.0/23 89.37.139.0/24 89.37.141.0/24 89.39.88.0/24 89.40.42.0/24 89.42.30.0/24 89.45.66.0/24 93.113.128.0/24 93.113.205.0/24 185.118.4.0/22 185.206.55.0/24 188.212.5.0/24 188.213.1.0/24 188.213.35.0/24 188.213.50.0/24 188.213.213.0/24 188.214.150.0/24 188.214.227.0/24 194.26.128.0/24 217.19.6.0/24 IPv6: 2a06:90c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29473 48457 210696 Signature Algorithm: sha256WithRSAEncryption 25:4e:61:8b:e6:5e:7e:2d:3c:7a:90:46:ed:6f:49:78:bc:49: 1f:30:12:22:2f:27:87:e9:5c:11:8a:8e:19:9b:40:14:d5:c8: e8:09:37:c9:96:04:57:ea:41:4b:9a:34:b7:6e:bd:6a:b3:93: 9b:40:45:9a:85:d7:68:62:b9:c1:63:dd:cf:cc:60:aa:5b:f1: 4b:1d:8e:c9:c3:1c:6b:09:39:7d:a8:75:14:f4:38:d3:b1:36: 2e:d6:71:5b:c5:eb:da:f6:39:f4:cf:02:1d:ad:d0:1a:82:49: 1e:d1:66:69:ea:9e:38:18:09:bb:10:38:ad:d5:be:dd:dc:36: a1:b0:d1:de:9f:95:95:25:de:ae:af:15:e9:de:5b:bd:26:bb: ac:9d:0e:16:0d:01:72:66:98:e5:0e:12:72:a6:e7:65:1a:ef: 67:24:0d:0a:d9:38:3a:f3:44:2d:5a:8b:47:8b:a7:c9:cd:eb: d5:45:6c:95:e8:18:02:8b:c0:29:ba:3a:02:6e:40:c3:9e:2c: b6:28:60:23:5b:a6:c3:dc:f9:0e:be:81:33:5c:70:cd:53:7e: 27:59:3c:59:fe:fc:f7:8c:23:c9:24:8e:92:f5:f1:44:ef:07: 7e:6e:57:4c:64:70:a9:95:e1:7f:6c:1c:fc:5d:92:31:41:70: 41:d9:0c:db -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgISAZt8E1oBdn+r4YrMDzu+TKmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQ5NTJiYzE2NTQ0MWVjNmUyZTIwMTBjOTMzZGM4MzBmMzYxNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UwpPF0edlKzEfkTMuszkelar65A Ib7Hu5Lz8UjPirodHRVx0pp/ajKpHhb4n005D2+xYSA8PtxA0q0TLFkQ0+R4KT9I fBmoMQ5KozdwJfSnv6aOJvpWthgEnV6P20uO+AVNXQvQdjX/XWpGiv7YKu7Sma3X MCXJ/CYjqiLvv2nmf4PwgkAejRTiCtgXyigl/2sh7vW6kGDEpe7/QMO3MBQZyqsW zrRK92A1sULWJfmQRKPtcIL2OKXm/Z0fVEBBiakYDL/+o6u9MiXXK4MmI+LapML/ a/a3EmPS5jEmgc9Gjal2lH9zxTwaN3C8hDfW36pfX6PIrfry3p5XmKl47wIDAQAB o4IDNDCCAzAwHQYDVR0OBBYEFEZJUrwWVEHsbi4gEMkz3IMPNhcxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzAxMDU4 YS00YTgyLTQ4MTgtOTcyZC04NDI4NTgxMjJiYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMDEwNThh LTRhODItNDgxOC05NzJkLTg0Mjg1ODEyMmJiYy8xL1JrbFN2QlpVUWV4dUxpQVF5 VFBjZ3c4MkZ6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGpBggrBgEF BQcBBwEB/wSBmTCBljCBhAQCAAEwfgMEAFkiAwMEAVkjAAMEAFkliwMEAFkljQME AFknWAMEAFkoKgMEAFkqHgMEAFktQgMEAF1xgAMEAF1xzQMEArl2BAMEALnONwME ALzUBQMEALzVAQMEALzVIwMEALzVMgMEALzV1QMEALzWlgMEALzW4wMEAMIagAME ANkTBjANBAIAAjAHAwUDKgaQwDAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgJzIQID AL1JAgMDNwgwDQYJKoZIhvcNAQELBQADggEBACVOYYvmXn4tPHqQRu1vSXi8SR8w EiIvJ4fpXBGKjhmbQBTVyOgJN8mWBFfqQUuaNLduvWqzk5tARZqF12hiucFj3c/M YKpb8UsdjsnDHGsJOX2odRT0ONOxNi7WcVvF69r2OfTPAh2t0BqCSR7RZmnqnjgY CbsQOK3Vvt3cNqGw0d6flZUl3q6vFeneW70mu6ydDhYNAXJmmOUOEnKm52Ua72ck DQrZODrzRC1ai0eLp8nN69VFbJXoGAKLwCm6OgJuQMOeLLYoYCNbpsPc+Q6+gTNc cM1TfidZPFn+/PeMI8kkjpL18UTvB35uV0xkcKmV4X9sHPxdkjFBcEHZDNs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:22 2026 by rpki-client