This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer (raw, json) Hash identifier: 9hx4Ml1fKFUpzoCHKukBxKxumKUES7tt/S5TY8BGxvU= Subject key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2660FB285BC530DD72CB7AC2953B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.226.221.0/24 IP: 91.227.137.0/24 IP: 91.227.168.0/24 IP: 91.227.253.0/24 IP: 2a0f:6740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:66:0f:b2:85:bc:53:0d:d7:2c:b7:ac:29:53:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:4f:3e:82:a9:59:1b:a4:4a:97:cc:38:37: 09:eb:9e:e4:07:0a:2e:97:d4:76:db:27:85:0c:80: b9:a1:2c:a0:07:3a:22:47:93:0b:48:e0:ac:10:17: e9:b2:da:dc:12:e5:ff:2c:99:ae:9e:db:f9:82:42: a6:96:40:bb:9b:26:b3:a8:5a:d1:17:0c:9c:29:4b: e8:e3:dc:f6:54:4b:11:7a:8b:f4:cb:ed:a8:aa:b2: 54:fb:34:12:6d:11:34:6f:28:54:aa:a8:25:b6:fa: 59:eb:b5:41:e4:ab:e5:9a:9c:dc:1e:6d:2b:83:2e: b5:81:1e:6f:ee:65:06:b7:e9:ef:f1:49:06:cd:9d: 47:ff:fd:ca:22:67:c3:a7:a7:79:76:65:7c:c3:4a: b9:df:0f:fd:b9:14:e3:05:79:f0:f6:fd:da:f9:ca: 96:11:07:f5:2f:e5:94:70:47:52:1b:d4:62:54:60: 63:3d:f7:ec:8c:0b:d2:50:66:cc:0e:62:51:95:8a: ad:e1:e7:15:53:32:00:35:0e:58:32:5e:a7:32:25: 47:f3:a6:66:12:10:f5:89:65:88:b7:25:10:7d:6d: 6c:a6:9a:b7:1b:68:c0:5b:55:01:7d:02:de:1c:8e: 47:00:f0:c8:39:4b:28:c6:62:a4:8a:6a:2b:97:71: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.221.0/24 91.227.137.0/24 91.227.168.0/24 91.227.253.0/24 IPv6: 2a0f:6740::/29 Signature Algorithm: sha256WithRSAEncryption 0b:02:55:ab:87:02:3a:35:9c:c9:2d:e4:75:aa:ac:d0:3b:9e: 2c:6f:49:ce:4f:14:01:32:27:5d:73:97:3e:69:63:2e:b2:c5: e3:aa:1b:e5:f1:d4:e4:82:5a:7e:e8:15:f5:48:41:04:85:27: 82:70:d7:fd:08:b6:f1:3b:65:2e:f7:f2:44:0e:0a:db:09:7b: 19:ec:48:05:7e:53:41:8d:37:d7:2d:52:20:56:b2:39:12:92: 0f:19:38:17:5b:d4:df:d0:58:ae:66:da:1a:aa:6d:21:15:bf: f0:65:65:3e:80:84:d0:80:cf:c1:5c:9d:c8:f4:56:a6:e7:7e: 41:15:9a:04:5a:0f:00:66:ef:a9:35:16:21:9c:a0:f6:07:f9: 25:51:f5:f1:bb:6e:67:3c:0a:93:f2:90:54:1c:d1:98:df:cc: 11:25:1a:93:09:6d:96:a8:93:a1:1e:17:1a:fe:42:d9:e1:fe: ce:f3:6d:5c:84:1e:7f:50:a1:53:86:2d:6b:f9:cf:99:87:58: a5:1c:58:1e:c3:15:7c:0a:34:8b:3d:6e:6d:56:1d:29:a8:ab: 8c:ba:67:d3:01:ba:a1:9d:c5:62:1a:f6:58:98:b0:19:90:38: 11:d8:81:c2:c5:fc:b4:4e:9b:d1:17:48:b9:51:aa:3f:b0:2c: da:db:22:82 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt4omYPsoW8Uw3XLLesKVO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDAxZTQyMjIyN2ZhNDRjYzVjYjk1ZDJhOWRjY2UwZmE1Yjg5YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXBPPoKpWRukSpfMODcJ657kBwou l9R22yeFDIC5oSygBzoiR5MLSOCsEBfpstrcEuX/LJmuntv5gkKmlkC7myazqFrR FwycKUvo49z2VEsReov0y+2oqrJU+zQSbRE0byhUqqgltvpZ67VB5KvlmpzcHm0r gy61gR5v7mUGt+nv8UkGzZ1H//3KImfDp6d5dmV8w0q53w/9uRTjBXnw9v3a+cqW EQf1L+WUcEdSG9RiVGBjPffsjAvSUGbMDmJRlYqt4ecVUzIANQ5YMl6nMiVH86Zm EhD1iWWItyUQfW1sppq3G2jAW1UBfQLeHI5HAPDIOUsoxmKkimorl3EokQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFHAB5CIif6RMxcuV0qnczg+luJwHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzk5MmQw My04ODNiLTQwNGQtODg3ZS1mMjQzNWQ1Y2YzN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvOTkyZDAz LTg4M2ItNDA0ZC04ODdlLWYyNDM1ZDVjZjM3Yi8xL2NBSGtJaUpfcEV6Rnk1WFNx ZHpPRDZXNG5BYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAW+LdAwQAW+OJAwQAW+OoAwQAW+P9MA0EAgAC MAcDBQMqD2dAMA0GCSqGSIb3DQEBCwUAA4IBAQALAlWrhwI6NZzJLeR1qqzQO54s b0nOTxQBMiddc5c+aWMussXjqhvl8dTkglp+6BX1SEEEhSeCcNf9CLbxO2Uu9/JE DgrbCXsZ7EgFflNBjTfXLVIgVrI5EpIPGTgXW9Tf0FiuZtoaqm0hFb/wZWU+gITQ gM/BXJ3I9Fam535BFZoEWg8AZu+pNRYhnKD2B/klUfXxu25nPAqT8pBUHNGY38wR JRqTCW2WqJOhHhca/kLZ4f7O821chB5/UKFThi1r+c+Zh1ilHFgewxV8CjSLPW5t Vh0pqKuMumfTAbqhncViGvZYmLAZkDgR2IHCxfy0TpvRF0i5Uao/sCza2yKC -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:57 2026 by rpki-client