This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer File: k-zM3oXECxVPkZuvZO8DLscNdR4.cer (raw, json) Hash identifier: H6iBm9Ox9nOvJZ0HSYaoFg0L2DjcuvFNyr7QwKpBkXI= Subject key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE22A51027CE6961496EF551524134 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:138::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:22:a5:10:27:ce:69:61:49:6e:f5:51:52:41:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93ecccde85c40b154f919baf64ef032ec70d751e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:bd:f8:2b:cf:b6:90:1c:89:ce:84:c6:d8: 0e:4c:65:df:03:71:26:7d:9c:a9:23:9d:85:39:70: 59:b3:15:19:6c:38:02:e2:d4:33:ef:2d:24:eb:c6: 73:af:07:fc:ce:d5:56:f6:e6:bb:db:03:ec:28:54: c1:e1:20:19:f5:47:43:70:fb:2e:2d:43:52:46:ac: 7b:45:ff:a2:e7:23:bd:85:cc:41:23:e9:c5:49:42: cb:04:8d:10:d7:0f:f3:f6:e3:c8:b5:65:cd:3f:ed: 02:3b:92:36:41:39:4c:f1:52:59:ed:05:32:da:d2: 17:15:58:90:94:f7:64:34:37:f1:96:91:96:62:d1: 31:48:e3:21:74:87:fa:c8:ec:f7:37:99:52:88:ba: 5a:96:65:30:04:06:ee:08:90:c9:f2:b2:3b:ea:b8: 78:aa:80:39:21:bb:a7:a7:eb:a4:06:1d:32:1a:d8: 9a:97:45:76:22:1c:24:ce:49:d5:e6:fd:dd:d4:f1: 48:e4:f9:fc:8f:3a:35:00:58:f4:e0:22:39:89:32: 00:92:40:c0:3c:14:c4:57:c1:83:70:69:06:bc:c1: 2f:a7:5d:09:ad:f7:55:b0:7d:a1:09:0f:36:55:4a: 79:8f:4a:ae:1c:d9:1c:47:aa:64:3d:6e:5b:72:66: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:138::/48 Signature Algorithm: sha256WithRSAEncryption a5:d3:9d:39:53:3c:17:90:dd:ca:d4:92:d9:38:3b:91:1a:89: 9d:11:34:b0:2a:08:e8:69:9c:40:0c:49:98:f8:a5:e2:6e:93: ca:c9:06:02:70:dd:33:3f:c5:6f:ea:82:6a:91:cc:09:8f:d5: 5f:26:6d:db:31:fb:1e:df:b6:c3:4e:9a:bb:3c:b2:9f:b0:fe: 49:9c:a9:0e:6c:d9:b0:16:0e:1b:23:19:41:de:64:87:99:7c: c8:30:df:40:8b:c3:d0:56:3b:8c:b0:13:55:c1:0d:3d:9a:5f: 52:38:2c:f6:0e:e5:03:9f:77:25:19:52:fd:2e:0c:a8:77:6f: 4e:37:2d:a0:24:e7:69:a2:14:b7:dc:02:8a:0b:c1:61:8e:dd: ae:46:df:07:bb:33:b0:9f:a6:ae:37:df:2d:82:66:7f:97:21: 51:78:c6:e7:6d:db:87:c6:e2:be:91:71:9e:d0:fb:c6:52:32: 31:7a:1d:27:c5:cc:e3:a3:a0:1d:6d:ee:aa:d6:8d:3c:10:69: cf:8f:aa:41:25:5d:6a:08:80:70:f4:ef:94:8e:af:a8:95:c1: b7:a5:4d:5b:f0:75:07:38:57:d4:03:b8:2c:6c:ff:61:58:0a: 99:17:d1:41:5b:8e:cc:25:18:30:89:11:c6:ff:47:3b:a9:f5: b6:a6:ad:87 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt87iKlECfOaWFJbvVRUkE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2VjY2NkZTg1YzQwYjE1NGY5MTliYWY2NGVmMDMyZWM3MGQ3NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D29+CvPtpAcic6ExtgOTGXfA3Em fZypI52FOXBZsxUZbDgC4tQz7y0k68Zzrwf8ztVW9ua72wPsKFTB4SAZ9UdDcPsu LUNSRqx7Rf+i5yO9hcxBI+nFSULLBI0Q1w/z9uPItWXNP+0CO5I2QTlM8VJZ7QUy 2tIXFViQlPdkNDfxlpGWYtExSOMhdIf6yOz3N5lSiLpalmUwBAbuCJDJ8rI76rh4 qoA5Ibunp+ukBh0yGtial0V2IhwkzknV5v3d1PFI5Pn8jzo1AFj04CI5iTIAkkDA PBTEV8GDcGkGvMEvp10JrfdVsH2hCQ82VUp5j0quHNkcR6pkPW5bcmYbywIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFJPszN6FxAsVT5Gbr2TvAy7HDXUeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0Lzk2NTU4 MC04NzM2LTQxNzMtYmRlMy0yYzMwMjhmY2VjZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvOTY1NTgw LTg3MzYtNDE3My1iZGUzLTJjMzAyOGZjZWNlOS8xL2stek0zb1hFQ3hWUGtadXZa TzhETHNjTmRSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAE4MA0GCSqGSIb3DQEBCwUAA4IBAQCl 0505UzwXkN3K1JLZODuRGomdETSwKgjoaZxADEmY+KXibpPKyQYCcN0zP8Vv6oJq kcwJj9VfJm3bMfse37bDTpq7PLKfsP5JnKkObNmwFg4bIxlB3mSHmXzIMN9Ai8PQ VjuMsBNVwQ09ml9SOCz2DuUDn3clGVL9Lgyod29ONy2gJOdpohS33AKKC8Fhjt2u Rt8HuzOwn6auN98tgmZ/lyFReMbnbduHxuK+kXGe0PvGUjIxeh0nxczjo6Adbe6q 1o08EGnPj6pBJV1qCIBw9O+Ujq+olcG3pU1b8HUHOFfUA7gsbP9hWAqZF9FBW47M JRgwiRHG/0c7qfW2pq2H -----END CERTIFICATE-----Generated at Mon Jan 26 20:29:20 2026 by rpki-client