This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer File: k8XxCvi8tfxuNKRztKbK560C2QI.cer (raw, json) Hash identifier: yBKRxd8zhuK+Vh4HztT/OlnwEp0w8FQB1WsZsU5C3BE= Subject key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C134CE931C6D5753AD9F1C3229863BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204954 IP: 91.244.126.0/24 IP: 2a13:4f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4c:e9:31:c6:d5:75:3a:d9:f1:c3:22:98:63:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:c6:4a:f1:37:01:e4:b3:04:97:9f:1f:60: 23:1a:6a:df:1b:bc:d0:49:99:7d:5b:b3:50:2c:42: 8d:4f:51:95:eb:e6:77:9e:65:a2:08:5d:6d:dc:c6: 19:6e:c3:19:60:ed:12:66:e7:f0:24:c2:c5:74:13: 14:46:e5:c1:e4:7c:fa:2b:e1:b2:99:8b:c8:07:d8: c7:af:a2:d4:7d:96:13:92:d2:f3:0a:eb:0c:77:92: 90:93:f0:41:f1:00:01:ba:48:7c:9b:ef:58:5e:68: e9:18:d4:f5:0c:f6:4d:c0:df:78:86:b4:87:53:9a: 35:60:6e:df:b4:64:e3:b3:fe:1d:55:5e:bc:22:83: 96:be:f8:ef:0e:99:7e:7c:19:11:06:88:38:d3:1b: d6:a4:3d:d3:fb:05:16:52:53:26:0a:9e:aa:ea:ae: 58:65:ae:39:7b:8f:ca:03:f9:3d:f3:4c:c0:dc:df: 1f:96:bb:5e:ee:af:23:d5:e3:53:79:63:78:0c:15: 91:94:a3:91:ba:44:7e:30:14:9a:82:14:d3:1a:be: e7:24:66:a0:bd:a5:95:3f:b3:1b:3b:9c:d3:b7:1b: 95:dd:95:ed:c4:aa:1b:72:01:99:56:14:d6:de:f2: 0f:b6:e3:af:1f:61:50:b3:1b:ab:fd:db:45:4a:92: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.126.0/24 IPv6: 2a13:4f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204954 Signature Algorithm: sha256WithRSAEncryption 67:e1:57:8b:37:f9:09:14:fa:2c:db:9e:38:c3:c6:5d:96:7b: 5e:c9:bc:0b:e0:da:61:55:da:9f:f9:9c:0a:6f:fa:ea:d5:95: 39:9f:1b:42:0f:bf:26:6f:9d:a1:62:93:22:35:97:95:2e:78: df:4e:ee:43:4e:b8:3d:95:e2:a0:ec:be:2d:9a:46:87:25:f4: 9c:a6:98:60:2a:b4:26:f8:97:e0:f0:2f:77:6e:41:7d:2e:d6: 0f:1b:f4:8c:2d:f4:c2:29:a6:85:6a:01:a3:ca:a7:c9:b7:ab: d5:a1:c8:c9:f9:f3:94:04:a2:e3:ae:f5:78:21:e7:c2:55:f3: da:ca:ee:02:4a:76:cf:c5:0e:ce:f0:76:0e:2f:7e:cd:54:7f: 89:b4:42:67:94:e8:b9:01:73:5f:8c:ee:01:3b:5c:a1:d3:ba: 29:b8:c6:47:58:31:e1:0e:a5:76:24:78:48:ac:0d:35:51:95: 11:cb:d1:c3:32:ff:82:e0:76:6d:51:ff:94:d1:5a:58:50:b9: f2:4d:bd:d3:a7:e7:28:f0:a1:b1:ae:c0:00:f8:0c:51:1f:28: 1b:97:dc:85:59:ab:cd:aa:2c:c0:cc:67:0d:91:95:7f:2d:a0: c1:2b:2f:47:91:f2:66:fd:02:62:4b:f3:0c:9b:44:67:9f:3e: 65:de:09:fd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8E0zpMcbVdTrZ8cMimGO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2M1ZjEwYWY4YmNiNWZjNmUzNGE0NzNiNGE2Y2FlN2FkMDJkOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf3GSvE3AeSzBJefH2AjGmrfG7zQ SZl9W7NQLEKNT1GV6+Z3nmWiCF1t3MYZbsMZYO0SZufwJMLFdBMURuXB5Hz6K+Gy mYvIB9jHr6LUfZYTktLzCusMd5KQk/BB8QABukh8m+9YXmjpGNT1DPZNwN94hrSH U5o1YG7ftGTjs/4dVV68IoOWvvjvDpl+fBkRBog40xvWpD3T+wUWUlMmCp6q6q5Y Za45e4/KA/k980zA3N8flrte7q8j1eNTeWN4DBWRlKORukR+MBSaghTTGr7nJGag vaWVP7MbO5zTtxuV3ZXtxKobcgGZVhTW3vIPtuOvH2FQsxur/dtFSpLLxwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJPF8Qr4vLX8bjSkc7SmyuetAtkCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2ZhMDJj Yi1iMzc4LTRmYTctODgwMy04ZWFhZDBiMDQ5YTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvZmEwMmNi LWIzNzgtNGZhNy04ODAzLThlYWFkMGIwNDlhNy8xL2s4WHhDdmk4dGZ4dU5LUnp0 S2JLNTYwQzJRSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW/R+MA0EAgACMAcDBQMqE0+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgmjANBgkqhkiG9w0BAQsFAAOCAQEAZ+FXizf5CRT6 LNueOMPGXZZ7Xsm8C+DaYVXan/mcCm/66tWVOZ8bQg+/Jm+doWKTIjWXlS54307u Q064PZXioOy+LZpGhyX0nKaYYCq0JviX4PAvd25BfS7WDxv0jC30wimmhWoBo8qn yber1aHIyfnzlASi4671eCHnwlXz2sruAkp2z8UOzvB2Di9+zVR/ibRCZ5TouQFz X4zuATtcodO6KbjGR1gx4Q6ldiR4SKwNNVGVEcvRwzL/guB2bVH/lNFaWFC58k29 06fnKPChsa7AAPgMUR8oG5fchVmrzaoswMxnDZGVfy2gwSsvR5HyZv0CYkvzDJtE Z58+Zd4J/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:58 2026 by rpki-client