This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer (raw, json) Hash identifier: hnVZETyRFq/zX8BfOsvhWEre959bkH4AlT1faCFYzIc= Subject key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C16D0927C3968F3C76DF5C4CAF5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215193 IP: 193.41.206.0/24 IP: 2a09:a6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:6d:09:27:c3:96:8f:3c:76:df:5c:4c:af:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93501077db80d52b16d49f863a61ea41a124bc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:2b:b5:57:ed:59:51:ce:2f:23:d7:e8:54: 60:64:7c:43:e0:f7:93:2b:b9:04:7d:43:c6:23:24: 56:5f:fc:93:9d:18:fd:a0:5e:38:ab:19:2a:1c:1b: 52:70:e8:68:fc:bd:2d:f6:48:5c:0a:4e:9a:25:06: 2e:6f:c9:67:0a:0d:df:25:99:3e:b3:ce:04:8c:ca: 4d:00:df:3a:46:cb:da:20:14:ab:ec:9c:8a:92:62: 30:52:5e:fe:ce:76:49:65:20:13:28:d6:03:63:03: e2:b7:95:79:96:55:c3:93:c9:48:d6:d7:95:05:66: e8:7b:05:04:b8:85:bb:d6:2c:87:5f:2f:96:f8:45: 02:f8:c7:7f:b4:b8:ee:2f:1a:62:49:a1:af:1a:42: 38:a8:1e:69:ec:02:10:12:e1:42:53:5a:84:61:c4: 50:39:50:07:33:41:97:9a:bf:ea:50:18:9f:8f:9b: 89:8e:f5:3a:68:21:01:82:ba:a8:6e:c9:27:5e:4d: dc:e2:6c:c3:29:f3:43:73:12:76:fb:8a:ee:65:84: 18:a7:cf:9f:a1:11:5b:59:3d:94:a0:7b:e2:56:aa: fa:e1:03:66:92:06:77:eb:e5:4c:8d:36:a3:bb:1a: 06:b2:c5:86:f4:2e:1c:aa:ab:87:f0:ae:75:68:cb: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.206.0/24 IPv6: 2a09:a6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215193 Signature Algorithm: sha256WithRSAEncryption 20:d0:b6:c0:f9:e7:1f:21:4b:3b:93:6a:19:00:98:70:39:09: bb:4b:92:b0:0e:85:aa:77:51:0a:c6:05:bd:c3:2a:62:6f:2b: a8:53:1c:55:6f:27:ca:5f:27:5d:e3:fc:81:4a:12:12:68:c4: f8:07:a1:ad:3b:18:fc:95:2b:d0:76:34:ce:2f:0d:e1:13:06: 00:7d:8b:53:f6:4a:46:42:e4:37:4b:5c:96:0b:eb:d7:cb:14: 18:96:fd:bc:19:d0:d3:69:f3:d4:1d:72:64:9e:49:91:44:87: c9:34:a1:04:dc:49:53:22:cd:6d:e3:f2:73:d1:d5:c6:d8:27: ea:c3:96:5a:28:c6:75:91:50:b7:1e:b0:d5:ce:3b:f9:75:cf: e0:24:b8:f9:a4:99:6b:22:3b:0c:1e:84:a7:4e:e7:ac:b8:6b: 0c:b3:27:11:00:13:bf:95:ba:ae:64:15:f8:67:e6:27:74:4e: e7:1b:46:34:d8:68:00:af:7e:26:5b:0d:a9:c6:4c:ca:6a:3a: 5d:e7:8a:f7:be:0d:db:f4:29:10:5b:f4:5b:ef:d9:68:25:3e: e8:6f:24:75:d8:77:46:d5:2a:db:f7:3e:cc:1e:62:32:fe:6d: 41:a2:98:99:ef:c4:40:59:75:a4:c9:59:88:75:32:9d:d3:1e: 2e:c0:95:da -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NcFtCSfDlo88dt9cTK9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzUwMTA3N2RiODBkNTJiMTZkNDlmODYzYTYxZWE0MWExMjRiYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquQrtVftWVHOLyPX6FRgZHxD4PeT K7kEfUPGIyRWX/yTnRj9oF44qxkqHBtScOho/L0t9khcCk6aJQYub8lnCg3fJZk+ s84EjMpNAN86RsvaIBSr7JyKkmIwUl7+znZJZSATKNYDYwPit5V5llXDk8lI1teV BWboewUEuIW71iyHXy+W+EUC+Md/tLjuLxpiSaGvGkI4qB5p7AIQEuFCU1qEYcRQ OVAHM0GXmr/qUBifj5uJjvU6aCEBgrqobsknXk3c4mzDKfNDcxJ2+4ruZYQYp8+f oRFbWT2UoHviVqr64QNmkgZ36+VMjTajuxoGssWG9C4cqquH8K51aMtNbQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJNQEHfbgNUrFtSfhjph6kGhJLxZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2QwYmNm My00YjIxLTQxNjEtYjgyZS03OWQxYTI3Y2Q5OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZDBiY2Yz LTRiMjEtNDE2MS1iODJlLTc5ZDFhMjdjZDk5My8xL2sxQVFkOXVBMVNzVzFKLUdP bUhxUWFFa3ZGay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSnOMA0EAgACMAcDBQMqCabAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNImTANBgkqhkiG9w0BAQsFAAOCAQEAINC2wPnnHyFL O5NqGQCYcDkJu0uSsA6FqndRCsYFvcMqYm8rqFMcVW8nyl8nXeP8gUoSEmjE+Aeh rTsY/JUr0HY0zi8N4RMGAH2LU/ZKRkLkN0tclgvr18sUGJb9vBnQ02nz1B1yZJ5J kUSHyTShBNxJUyLNbePyc9HVxtgn6sOWWijGdZFQtx6w1c47+XXP4CS4+aSZayI7 DB6Ep07nrLhrDLMnEQATv5W6rmQV+GfmJ3RO5xtGNNhoAK9+JlsNqcZMymo6XeeK 974N2/QpEFv0W+/ZaCU+6G8kddh3RtUq2/c+zB5iMv5tQaKYme/EQFl1pMlZiHUy ndMeLsCV2g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:07:58 2026 by rpki-client