This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer File: k2eWXig08Yk8-oYxpIQHHmotRbc.cer (raw, json) Hash identifier: 5bqNOHmHL8ZMYwCDoeuvohZJz3BdZBQG66DEreKsj1w= Subject key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1852991F2B986ED72A3F93057E654 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28709 AS: 47541 -- 47542 AS: 62243 AS: 207581 IP: 79.137.132.0/24 IP: 79.137.139.0/24 IP: 79.137.164.0/24 IP: 79.137.167.0/24 IP: 79.137.180.0/24 IP: 87.240.128.0/18 IP: 93.186.224.0/20 IP: 95.142.192.0/20 IP: 95.213.0.0/17 IP: 185.29.128.0/22 IP: 185.32.248.0/22 IP: 2a00:bdc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:85:29:91:f2:b9:86:ed:72:a3:f9:30:57:e6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c9:d3:2b:a6:5b:b6:d7:ef:52:a2:63:04:8d: dc:51:32:27:14:43:c9:20:bd:ee:84:c0:1b:ae:12: 50:68:2d:57:95:73:1b:95:5c:10:52:df:49:69:9e: 10:0d:04:45:9f:82:a6:46:e7:0b:53:da:63:44:39: d0:f7:49:37:c1:6e:0c:1c:e9:e1:a3:8d:e9:2f:f1: 4c:07:8c:e1:4c:c0:76:c3:62:ad:28:34:5b:94:c8: 9f:ec:59:da:a7:f5:bf:1f:ec:f4:7e:c2:19:07:d7: 6d:a3:23:dc:81:7a:99:88:98:6a:8b:ee:d5:d4:bf: 46:27:4d:42:a5:4d:a6:63:bf:ed:11:0a:aa:05:16: f3:6a:b5:04:8e:aa:37:bd:f9:d2:3f:03:d4:cc:14: 12:8b:39:b5:7f:7e:91:ab:24:10:5f:b5:2b:89:be: 42:a6:ab:36:6e:11:fb:06:10:6a:07:37:2a:97:67: 8d:37:55:25:d0:9a:04:b3:b5:63:32:e6:a1:67:36: 3a:16:54:96:e1:a7:3e:57:42:88:78:da:de:0d:d0: 48:c1:eb:f8:e5:75:df:6e:a8:8e:e3:8c:dd:f1:31: 07:08:9a:7d:87:b6:25:ad:73:36:7d:75:46:ee:37: ef:3b:b8:78:c7:c8:01:99:44:16:c2:29:36:7c:70: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.137.132.0/24 79.137.139.0/24 79.137.164.0/24 79.137.167.0/24 79.137.180.0/24 87.240.128.0/18 93.186.224.0/20 95.142.192.0/20 95.213.0.0/17 185.29.128.0/22 185.32.248.0/22 IPv6: 2a00:bdc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28709 47541-47542 62243 207581 Signature Algorithm: sha256WithRSAEncryption 35:15:9f:0a:09:f4:ee:d0:3f:15:91:8f:18:d7:35:c8:fa:b2: f8:b8:65:16:92:2d:54:ed:d7:7b:59:4c:41:e7:a4:7a:75:c3: 72:eb:04:d2:2d:94:e2:a8:57:94:da:6c:95:de:cc:ae:19:a9: 90:2c:18:c5:b5:56:8f:19:fd:dc:27:2d:b2:0b:40:cd:76:ff: 1a:c8:c6:43:9f:73:e2:84:dd:4e:89:33:e6:77:c1:06:18:24: 53:64:a5:ca:67:90:31:5d:56:7b:aa:4d:e5:64:99:f9:9e:5c: e2:28:21:a9:c2:49:c2:6d:59:d6:d5:ed:81:c2:74:cf:6a:2c: dc:ce:76:dd:50:58:e2:ae:e7:7a:42:8e:6b:39:25:9a:dc:c9: 03:d0:b6:2e:55:a7:7f:a1:da:e7:47:18:79:4e:33:7c:63:26: ca:23:42:06:56:a4:8e:60:a2:88:32:de:9d:17:52:e7:98:6a: ca:6b:ce:4f:da:c9:13:45:c5:bd:27:9c:b5:a6:c6:03:8b:34: 81:0a:e0:12:4c:9e:c9:97:c0:2d:8d:26:8e:4e:bd:6a:d6:62: 60:9b:a4:c8:b0:5f:19:6a:c7:b0:7f:f3:7d:43:85:8d:34:e9: 65:20:02:01:10:ed:3d:73:4b:f7:37:65:15:a8:35:ef:a3:0e: 05:5f:db:4b -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgISAZt/8YUpkfK5hu1yo/kwV+ZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzY3OTY1ZTI4MzRmMTg5M2NmYTg2MzFhNDg0MDcxZTZhMmQ0NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MnTK6ZbttfvUqJjBI3cUTInFEPJ IL3uhMAbrhJQaC1XlXMblVwQUt9JaZ4QDQRFn4KmRucLU9pjRDnQ90k3wW4MHOnh o43pL/FMB4zhTMB2w2KtKDRblMif7Fnap/W/H+z0fsIZB9dtoyPcgXqZiJhqi+7V 1L9GJ01CpU2mY7/tEQqqBRbzarUEjqo3vfnSPwPUzBQSizm1f36RqyQQX7Urib5C pqs2bhH7BhBqBzcql2eNN1Ul0JoEs7VjMuahZzY6FlSW4ac+V0KIeNreDdBIwev4 5XXfbqiO44zd8TEHCJp9h7YlrXM2fXVG7jfvO7h4x8gBmUQWwik2fHC0AwIDAQAB o4IDADCCAvwwHQYDVR0OBBYEFJNnll4oNPGJPPqGMaSEBx5qLUW3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzE4MTNi YS01MDZlLTQ0NGUtOWNhNC1mMDkzZTE3YjI3ZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMTgxM2Jh LTUwNmUtNDQ0ZS05Y2E0LWYwOTNlMTdiMjdlZi8xL2syZVdYaWcwOFlrOC1vWXhw SVFISG1vdFJiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQAT4mEAwQAT4mLAwQAT4mkAwQAT4mnAwQAT4m0 AwQGV/CAAwQEXbrgAwQEX47AAwQHX9UAAwQCuR2AAwQCuSD4MA0EAgACMAcDBQMq AL3AMC8GCCsGAQUFBwEIAQH/BCAwHqAcMBoCAnAlMAoCAwC5tQIDALm2AgMA8yMC AwMq3TANBgkqhkiG9w0BAQsFAAOCAQEANRWfCgn07tA/FZGPGNc1yPqy+LhlFpIt VO3Xe1lMQeekenXDcusE0i2U4qhXlNpsld7MrhmpkCwYxbVWjxn93CctsgtAzXb/ GsjGQ59z4oTdTokz5nfBBhgkU2SlymeQMV1We6pN5WSZ+Z5c4ighqcJJwm1Z1tXt gcJ0z2os3M523VBY4q7nekKOazklmtzJA9C2LlWnf6Ha50cYeU4zfGMmyiNCBlak jmCiiDLenRdS55hqymvOT9rJE0XFvSectabGA4s0gQrgEkyeyZfALY0mjk69atZi YJukyLBfGWrHsH/zfUOFjTTpZSACARDtPXNL9zdlFag176MOBV/bSw== -----END CERTIFICATE-----Generated at Mon Jan 26 17:00:26 2026 by rpki-client