This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer (raw, json) Hash identifier: NZSumHu6PfnMdJ7I/6n2pSqAbEpNatBfQAru3A0ilK4= Subject key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB57F1306770DB548D19A9112C786F9FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 10:53:15 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 44612 AS: 208247 IP: 45.151.86.0/23 IP: 185.214.24.0/22 IP: 2a0b:9440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:7f:13:06:77:0d:b5:48:d1:9a:91:12:c7:86:f9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 10:53:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=935c42857e302feb14017301e43c39fe45e7f629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:35:ec:7a:fe:7a:9e:a4:89:75:f3:48:2c: a7:da:fc:54:3c:31:c4:ae:62:48:4c:b5:f5:30:af: 28:43:d6:72:7b:56:04:5b:fa:cf:f4:85:6f:90:d3: 83:7b:ba:64:c1:20:1f:35:4e:99:07:85:9e:9b:10: e2:40:fb:2c:27:32:6e:b5:b1:22:89:f1:7e:0a:86: ac:c2:44:96:97:14:84:8d:83:54:71:a0:5b:5d:af: 23:15:59:bb:60:55:ce:f5:e5:e6:90:11:7b:98:1b: 3b:9f:01:5c:59:1e:8f:8e:01:b4:12:3d:c4:12:83: 0b:b7:ac:22:37:89:6d:a3:e4:9f:3a:f8:d7:03:8b: 9b:89:0a:1a:49:d5:3b:1e:2e:b7:cf:c2:b9:e0:8a: b4:9a:54:4b:f4:37:41:44:78:83:70:3f:56:03:ad: 31:6b:98:45:8f:cd:91:bb:92:d3:8c:d0:d7:67:0d: 69:b3:a9:45:45:b8:dd:92:d1:23:7e:65:cb:ba:39: 8e:aa:31:8b:48:ce:77:79:a6:0a:ca:ea:7d:68:8a: f4:e4:b9:b3:34:04:c0:ad:80:ab:19:31:af:67:40: 4c:f9:ed:92:bc:a9:be:a2:f0:ef:6a:69:6a:e7:2d: de:ef:9a:44:6f:01:21:3b:ed:81:86:69:c9:11:13: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.86.0/23 185.214.24.0/22 IPv6: 2a0b:9440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44612 208247 Signature Algorithm: sha256WithRSAEncryption 2b:05:ae:80:3a:5f:f7:29:97:7b:3a:89:06:ca:f2:ab:5d:dd: 05:87:29:28:b9:0c:e2:76:18:b1:94:f2:ad:3a:0d:7f:38:c2: 1d:c2:a9:d3:cd:48:60:04:83:12:bb:ed:11:64:60:5e:c4:8f: 74:25:31:03:cf:e4:84:cf:7f:a7:d8:67:78:a4:13:2f:0d:a1: 90:f6:a3:61:c1:b6:b8:09:43:ed:c2:be:f5:73:38:24:46:60: 61:b9:ca:5a:80:a6:7c:a1:40:a5:1a:ec:8a:c8:a3:89:e3:c0: bb:0c:ad:83:2d:36:41:56:fb:85:77:84:82:8b:1c:d3:db:c0: 72:21:45:a2:00:aa:85:81:1f:20:03:71:32:cb:6d:67:70:d5: 07:56:16:ad:2c:05:f5:21:b4:e9:92:5d:89:ca:6a:6b:3f:10: 37:69:24:78:df:08:88:68:18:9f:8b:c3:19:23:88:18:c8:c2: 3d:50:20:71:22:4e:fe:1e:9e:6e:81:9b:95:59:35:72:56:42: 81:a0:90:eb:a2:a6:b8:14:39:d0:3e:97:61:b4:2d:e8:19:5a: e3:02:af:2a:0d:bb:51:ee:54:29:5b:ef:d6:0a:c1:36:1e:ac: 8b:d8:57:13:90:4f:4f:24:dc:12:b8:a5:9f:d4:6c:ef:f9:b4: 87:b5:91:82 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZq1fxMGdw21SNGakRLHhvn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTA1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzVjNDI4NTdlMzAyZmViMTQwMTczMDFlNDNjMzlmZTQ1ZTdmNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcg17Hr+ep6kiXXzSCyn2vxUPDHE rmJITLX1MK8oQ9Zye1YEW/rP9IVvkNODe7pkwSAfNU6ZB4WemxDiQPssJzJutbEi ifF+CoaswkSWlxSEjYNUcaBbXa8jFVm7YFXO9eXmkBF7mBs7nwFcWR6PjgG0Ej3E EoMLt6wiN4lto+SfOvjXA4ubiQoaSdU7Hi63z8K54Iq0mlRL9DdBRHiDcD9WA60x a5hFj82Ru5LTjNDXZw1ps6lFRbjdktEjfmXLujmOqjGLSM53eaYKyup9aIr05Lmz NATArYCrGTGvZ0BM+e2SvKm+ovDvamlq5y3e75pEbwEhO+2BhmnJERMe3wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzU1ZTUy OS1iODM5LTQ0NGYtODcyZC0xYmZkMTBhODg0NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNTVlNTI5 LWI4MzktNDQ0Zi04NzJkLTFiZmQxMGE4ODQ1YS8xL2sxeENoWDR3TC1zVUFYTUI1 RHc1X2tYbjlpay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBLZdWAwQCudYYMA0EAgACMAcDBQMqC5RAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCuRAIDAy13MA0GCSqGSIb3DQEBCwUAA4IB AQArBa6AOl/3KZd7OokGyvKrXd0FhykouQzidhixlPKtOg1/OMIdwqnTzUhgBIMS u+0RZGBexI90JTEDz+SEz3+n2Gd4pBMvDaGQ9qNhwba4CUPtwr71czgkRmBhucpa gKZ8oUClGuyKyKOJ48C7DK2DLTZBVvuFd4SCixzT28ByIUWiAKqFgR8gA3Eyy21n cNUHVhatLAX1IbTpkl2JymprPxA3aSR43wiIaBifi8MZI4gYyMI9UCBxIk7+Hp5u gZuVWTVyVkKBoJDroqa4FDnQPpdhtC3oGVrjAq8qDbtR7lQpW+/WCsE2HqyL2FcT kE9PJNwSuKWf1Gzv+bSHtZGC -----END CERTIFICATE-----Generated at Sat Dec 6 15:06:57 2025 by rpki-client