This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer (raw, json) Hash identifier: 7ap9Uu5cldLdw3HazEbAEp7jJsfjgC4dUwbCO94I3aw= Subject key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE43A8431262FF21AF7467D46E9701 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.128.198.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:43:a8:43:12:62:ff:21:af:74:67:d4:6e:97:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:a4:c4:70:ee:4f:d3:9f:d7:d2:d5:fb:df: df:d4:4f:05:b0:4a:6e:8e:68:6d:0a:5f:3a:6a:00: fd:c8:a1:14:ae:1a:f9:13:c4:98:bf:b1:a5:8c:38: bf:85:6c:a6:d9:30:16:f4:d7:e2:fe:e2:f0:6e:d1: 5a:46:9c:b9:a1:f8:70:38:22:62:b8:3a:20:90:23: ae:62:29:79:53:9a:84:2b:7c:01:18:ab:5a:95:79: 69:51:1f:2d:08:c7:26:71:f2:c5:12:79:56:8c:41: 99:b1:21:57:42:78:27:26:c8:09:15:5f:d6:e4:b2: fb:a9:de:bf:47:f2:5d:c3:43:73:e3:9b:34:04:22: 53:5d:05:11:10:ca:ea:70:b8:3e:3b:13:e5:00:6e: 69:d1:ca:6a:08:e1:80:62:d5:7b:dd:4b:25:23:62: 73:4d:08:b5:12:74:49:bc:f7:1e:60:4d:1f:1b:ec: 1f:54:85:c2:23:6b:78:68:4b:2f:b1:6d:14:f2:0a: cd:d4:ff:5a:53:ac:26:b3:90:4b:99:fc:fd:56:c0: ee:b2:4e:5c:a7:1a:74:24:bd:2c:b6:61:c3:9e:25: 75:13:93:ea:10:c7:55:f8:a6:5e:99:80:b5:2a:d8: d0:be:00:e9:f8:be:41:63:55:8e:bc:33:14:f1:81: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.198.0/24 Signature Algorithm: sha256WithRSAEncryption 78:00:fe:79:b5:2d:15:35:e1:db:cb:36:4b:dd:16:2a:fc:98: 8f:b0:c3:ae:87:f2:b7:f5:ef:b3:6f:0d:45:a8:f9:7a:d8:8d: db:5d:61:f7:d8:ca:5c:3d:bf:af:93:24:31:1f:fd:f8:81:e3: d4:9e:5c:4d:7f:0e:52:74:30:29:5a:7f:46:ef:5d:37:2d:2c: 01:60:f9:8a:55:75:3d:0d:13:80:4f:b6:3d:18:9c:c7:83:07: 79:d5:1c:e3:93:89:b3:f6:a1:30:04:45:ed:5a:8e:33:de:2e: 0e:bc:06:d3:4d:6b:32:0b:1c:23:6b:3d:06:78:c2:7b:3d:3c: 68:91:f8:b3:44:e1:56:a6:49:42:6a:86:7c:00:71:ba:85:97: 95:89:e1:f9:5f:78:40:d4:41:8e:b1:ed:bb:a1:37:b8:a6:53: 1b:e6:8f:00:fa:0f:b3:d4:3a:83:2e:ce:f1:ea:03:1e:a2:d2: d0:29:10:20:e1:89:50:77:bf:63:f3:c1:f4:62:22:a4:9d:d3: 3c:d8:30:d1:3d:bf:e2:6f:4c:c9:60:25:26:1f:01:19:f9:8e: 9e:36:6c:e8:74:6e:6b:e2:30:bf:33:d4:04:13:a8:93:05:34: c2:2f:b1:6b:ce:eb:53:e7:cd:41:96:86:93:58:7d:8c:05:52: 71:db:41:be -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87kOoQxJi/yGvdGfUbpcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzc0Yjg1M2RmZDk5NzNmMmNkOTk0YjJlM2I3NTQ2MWQ5YTNmYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMKkxHDuT9Of19LV+9/f1E8FsEpu jmhtCl86agD9yKEUrhr5E8SYv7GljDi/hWym2TAW9Nfi/uLwbtFaRpy5ofhwOCJi uDogkCOuYil5U5qEK3wBGKtalXlpUR8tCMcmcfLFEnlWjEGZsSFXQngnJsgJFV/W 5LL7qd6/R/Jdw0Nz45s0BCJTXQUREMrqcLg+OxPlAG5p0cpqCOGAYtV73UslI2Jz TQi1EnRJvPceYE0fG+wfVIXCI2t4aEsvsW0U8grN1P9aU6wms5BLmfz9VsDusk5c pxp0JL0stmHDniV1E5PqEMdV+KZemYC1KtjQvgDp+L5BY1WOvDMU8YGuowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2JhN2Iz My01Y2Q4LTQwNGYtYmZmZC02NWJjYzhjZWZkZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvYmE3YjMz LTVjZDgtNDA0Zi1iZmZkLTY1YmNjOGNlZmRkMi8xL2szUzRVOV9abHo4czJaU3k0 N2RVWWRtal9FUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAX4DGMA0GCSqGSIb3DQEBCwUAA4IBAQB4AP55 tS0VNeHbyzZL3RYq/JiPsMOuh/K39e+zbw1FqPl62I3bXWH32MpcPb+vkyQxH/34 gePUnlxNfw5SdDApWn9G7103LSwBYPmKVXU9DROAT7Y9GJzHgwd51Rzjk4mz9qEw BEXtWo4z3i4OvAbTTWsyCxwjaz0GeMJ7PTxokfizROFWpklCaoZ8AHG6hZeVieH5 X3hA1EGOse27oTe4plMb5o8A+g+z1DqDLs7x6gMeotLQKRAg4YlQd79j88H0YiKk ndM82DDRPb/ib0zJYCUmHwEZ+Y6eNmzodG5r4jC/M9QEE6iTBTTCL7FrzutT581B loaTWH2MBVJx20G+ -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:30 2026 by rpki-client