This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer File: cke6Q-JwyYvcZCqePCGMpSTrD1M.cer (raw, json) Hash identifier: oGnShlApwzopQplIz1XP88G/825n2+wzM/GL7RMOzIc= Subject key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E392CDD06B727E430FE491C43C77B9C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16080 AS: 34913 IP: 80.70.208.0/20 IP: 80.89.112.0/20 IP: 185.227.232.0/22 IP: 194.88.156.0/23 IP: 195.170.162.0/24 IP: 2a02:d48::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2c:dd:06:b7:27:e4:30:fe:49:1c:43:c7:7b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:54:81:a7:ad:51:db:55:33:d4:33:c6:5d:3e: ab:1f:40:04:bb:f9:5d:1f:87:ee:ed:7c:f2:4b:2e: 75:44:71:f4:88:3c:38:f8:17:62:fc:f5:49:08:89: 05:60:45:50:b2:dc:8f:18:53:07:7d:48:96:75:0f: e4:a5:4f:3b:91:c3:ba:86:fe:81:68:3b:52:99:88: c2:d0:b9:6d:a7:fe:0c:c1:e1:f7:24:d7:45:d8:6c: 58:0a:5a:fb:92:c3:e6:ec:d4:e5:fa:c9:f8:91:8f: e5:4a:f5:69:f7:79:50:36:80:68:99:29:db:68:f2: 31:91:3d:ee:6e:7c:18:c9:7a:44:48:07:63:3f:b8: fd:80:67:ce:aa:ac:f9:fc:01:08:d7:7a:34:50:42: 86:cd:0a:79:95:2a:06:5d:b7:69:d2:d1:b5:1d:f4: a4:c1:9c:3f:9f:90:f3:96:a2:be:06:ad:a8:18:38: 11:70:e7:5b:1a:22:e7:84:a8:b1:b8:43:70:64:bb: f6:19:4d:34:cf:7a:6b:57:3a:ff:d5:1a:86:ef:58: 8d:99:e7:69:59:58:db:3f:27:33:42:a0:3d:02:9e: bb:d0:7c:04:c3:9c:52:78:3b:3a:e4:56:93:f7:ef: ca:4c:8f:ae:50:a9:0b:8e:19:cd:59:f4:22:90:04: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.70.208.0/20 80.89.112.0/20 185.227.232.0/22 194.88.156.0/23 195.170.162.0/24 IPv6: 2a02:d48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16080 34913 Signature Algorithm: sha256WithRSAEncryption 41:a6:a3:a1:bd:ac:b1:62:96:4a:52:c5:a5:90:c3:7b:69:5b: da:0b:75:e0:43:1b:31:a8:5e:66:6f:18:1d:67:c0:72:5c:e4: e3:bd:42:a5:d0:cb:36:72:06:11:f0:b9:21:56:bd:55:e2:6f: 3c:85:ad:ce:8b:95:d2:6c:62:2e:ba:84:a4:a4:bb:2a:8c:03: 3a:69:42:65:c7:af:21:36:5a:0c:75:60:f5:e3:f0:7d:ad:a9: cf:a3:d9:c0:7a:e8:49:a2:72:63:00:c4:61:01:21:f7:45:b0: de:bc:94:ec:c2:4e:2f:3c:64:86:9f:e4:ad:00:2e:e3:6a:81: 7a:c0:cb:ef:86:11:b5:6b:ae:ee:4d:a8:69:87:1c:7e:6f:61: 5a:72:b0:c9:65:7d:58:30:e6:98:a8:26:4e:01:15:45:13:e3: dc:ad:fb:e9:13:88:54:40:79:25:61:3f:76:93:6c:d3:04:9d: 3e:7f:29:0b:ca:bc:38:9c:e8:e1:47:02:eb:f8:cd:dc:95:87: b4:a8:44:a8:46:7c:98:59:f9:82:40:e6:2e:4d:9e:93:1e:15: 18:07:18:c6:ad:68:e9:3a:29:8f:d9:8c:0b:1a:38:ba:14:52: 70:4c:b2:f8:12:df:16:25:4a:98:d0:41:e7:6c:00:c6:cd:ca: ff:76:b4:49 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt+OSzdBrcn5DD+SRxDx3ucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjQ3YmE0M2UyNzBjOThiZGM2NDJhOWUzYzIxOGNhNTI0ZWIwZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FSBp61R21Uz1DPGXT6rH0AEu/ld H4fu7XzySy51RHH0iDw4+Bdi/PVJCIkFYEVQstyPGFMHfUiWdQ/kpU87kcO6hv6B aDtSmYjC0Lltp/4MweH3JNdF2GxYClr7ksPm7NTl+sn4kY/lSvVp93lQNoBomSnb aPIxkT3ubnwYyXpESAdjP7j9gGfOqqz5/AEI13o0UEKGzQp5lSoGXbdp0tG1HfSk wZw/n5DzlqK+Bq2oGDgRcOdbGiLnhKixuENwZLv2GU00z3prVzr/1RqG71iNmedp WVjbPyczQqA9Ap670HwEw5xSeDs65FaT9+/KTI+uUKkLjhnNWfQikAQqrQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFHJHukPicMmL3GQqnjwhjKUk6w9TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzM0MTA2 OC0yOGY2LTRmODEtOTkzZi0yNzkyMDNiMWQ5MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMzQxMDY4 LTI4ZjYtNGY4MS05OTNmLTI3OTIwM2IxZDkyYy8xL2NrZTZRLUp3eVl2Y1pDcWVQ Q0dNcFNUckQxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQEUEbQAwQEUFlwAwQCuePoAwQBwlicAwQAw6qi MA0EAgACMAcDBQAqAg1IMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAj7QAgMAiGEw DQYJKoZIhvcNAQELBQADggEBAEGmo6G9rLFilkpSxaWQw3tpW9oLdeBDGzGoXmZv GB1nwHJc5OO9QqXQyzZyBhHwuSFWvVXibzyFrc6LldJsYi66hKSkuyqMAzppQmXH ryE2Wgx1YPXj8H2tqc+j2cB66EmicmMAxGEBIfdFsN68lOzCTi88ZIaf5K0ALuNq gXrAy++GEbVrru5NqGmHHH5vYVpysMllfVgw5pioJk4BFUUT49yt++kTiFRAeSVh P3aTbNMEnT5/KQvKvDic6OFHAuv4zdyVh7SoRKhGfJhZ+YJA5i5NnpMeFRgHGMat aOk6KY/ZjAsaOLoUUnBMsvgS3xYlSpjQQedsAMbNyv92tEk= -----END CERTIFICATE-----Generated at Sun Jan 25 11:05:30 2026 by rpki-client