This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer File: atlkHKRH6y4wxdtRkcFrzUdyids.cer (raw, json) Hash identifier: r01apkqQH86aiBSTPHfhc1wkkvBT2/ZT24XYza60PIs= Subject key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759276EA096C8775242CCE82342D59C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.53.156.0/22 IP: 2a02:2c60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:27:6e:a0:96:c8:77:52:42:cc:e8:23:42:d5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c8:d0:b4:63:22:29:ec:40:47:39:e4:03:54: d0:99:36:dc:49:25:e6:ff:d2:b3:fe:fc:0d:e1:09: 4e:84:2e:41:d7:df:4a:71:dc:cc:81:6b:fa:31:c1: 35:56:3f:6b:9b:ce:4d:dc:6c:8d:79:c5:9c:2c:32: 7c:28:08:40:82:ff:51:78:1d:50:65:e2:ce:19:4a: 74:22:42:6b:bd:6b:9f:36:4b:53:03:59:5b:de:3d: 7e:a1:41:bd:b7:25:10:42:81:ae:5c:2b:38:23:9f: 8f:a0:ec:a5:0e:c7:1c:24:b0:db:61:be:11:b4:7e: 10:47:7e:36:ed:04:d1:15:d4:0f:71:b6:eb:22:b7: 1c:71:d3:d8:e4:ec:9e:8a:31:66:65:51:c4:89:e0: 3e:35:54:41:f4:16:1a:59:61:15:a3:99:db:f0:b6: 71:60:01:8d:29:71:5d:f8:97:54:8d:61:79:c4:21: c6:2a:3d:9f:44:fc:50:aa:99:ef:0d:1e:db:73:16: ce:ed:b5:33:f9:47:b8:2e:3c:fe:ff:63:6e:d2:aa: 8f:b1:15:a9:a6:cd:2a:12:06:43:2b:99:54:30:14: 02:38:53:20:ee:72:91:1e:8c:ef:6c:53:58:14:9e: a1:f1:6c:95:09:18:a9:bf:63:c0:8c:b1:61:ed:87: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.156.0/22 IPv6: 2a02:2c60::/32 Signature Algorithm: sha256WithRSAEncryption 32:f9:2b:a7:16:60:9d:08:d9:2c:bc:87:7b:01:ab:cf:0a:90: 19:19:75:13:2e:09:1d:56:a7:7c:35:71:25:b7:a4:c5:2d:08: 77:83:63:c2:6e:8e:58:9a:b6:9b:2f:6b:fa:34:f7:8e:78:4c: 63:6c:c0:af:33:86:9f:61:32:4c:f5:76:7c:da:90:e9:a5:80: 61:72:42:14:7a:f3:47:59:84:04:9e:94:cc:a5:67:5b:81:83: 80:03:f1:ea:bf:ac:a7:4b:3d:fd:0b:16:5b:5e:54:3a:0b:36: 1e:54:c8:73:7a:78:a0:c3:3f:e3:6a:2a:9c:95:2f:d9:8c:7d: de:22:dd:b5:d0:70:a3:fc:e8:ed:8c:84:40:f6:7b:c1:47:55: b0:b9:ad:82:63:50:39:91:fd:16:51:1b:ef:47:6f:e6:61:60: 78:05:12:10:1f:1d:98:62:a1:39:aa:83:02:3b:ac:f7:8b:ae: f0:e0:22:3a:73:8e:99:b2:52:8a:97:36:ed:bb:db:5c:b6:94: 0b:9b:9d:61:8e:b2:7d:24:de:de:69:83:5c:ad:4c:79:d7:ef: 95:db:1f:e9:c4:68:a0:de:a7:38:41:e2:cc:9b:34:48:69:f8: 0c:df:58:c2:e8:54:12:1e:59:ee:d8:4b:33:e5:23:0b:ba:49: cb:55:3b:cf -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WSduoJbId1JCzOgjQtWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWQ5NjQxY2E0NDdlYjJlMzBjNWRiNTE5MWMxNmJjZDQ3NzI4OWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cjQtGMiKexARznkA1TQmTbcSSXm /9Kz/vwN4QlOhC5B199KcdzMgWv6McE1Vj9rm85N3GyNecWcLDJ8KAhAgv9ReB1Q ZeLOGUp0IkJrvWufNktTA1lb3j1+oUG9tyUQQoGuXCs4I5+PoOylDsccJLDbYb4R tH4QR3427QTRFdQPcbbrIrcccdPY5OyeijFmZVHEieA+NVRB9BYaWWEVo5nb8LZx YAGNKXFd+JdUjWF5xCHGKj2fRPxQqpnvDR7bcxbO7bUz+Ue4Ljz+/2Nu0qqPsRWp ps0qEgZDK5lUMBQCOFMg7nKRHozvbFNYFJ6h8WyVCRipv2PAjLFh7YebRwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGrZZBykR+suMMXbUZHBa81HconbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2QxNjY0 Yi1hMzE1LTRlMmUtODBiZi0zMTFjMmU2ZWViNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZDE2NjRi LWEzMTUtNGUyZS04MGJmLTMxMWMyZTZlZWI0Ni8xL2F0bGtIS1JINnk0d3hkdFJr Y0ZyelVkeWlkcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTWcMA0EAgACMAcDBQAqAixgMA0GCSqGSIb3 DQEBCwUAA4IBAQAy+SunFmCdCNksvId7AavPCpAZGXUTLgkdVqd8NXElt6TFLQh3 g2PCbo5YmrabL2v6NPeOeExjbMCvM4afYTJM9XZ82pDppYBhckIUevNHWYQEnpTM pWdbgYOAA/Hqv6ynSz39CxZbXlQ6CzYeVMhzenigwz/jaiqclS/ZjH3eIt210HCj /OjtjIRA9nvBR1Wwua2CY1A5kf0WURvvR2/mYWB4BRIQHx2YYqE5qoMCO6z3i67w 4CI6c46ZslKKlzbtu9tctpQLm51hjrJ9JN7eaYNcrUx51++V2x/pxGig3qc4QeLM mzRIafgM31jC6FQSHlnu2Esz5SMLuknLVTvP -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:54 2026 by rpki-client