This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer File: mK9kDIIO61-8kigcYRRPEae9cH4.cer (raw, json) Hash identifier: cxRsEf4hauMNZE4E6zkaE2QB5Wrt8pAP+eirJ2bLIRg= Subject key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA3E10CA609472232E7988307CA758 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:6bc::/48 IP: 2001:678:ef0::/48 IP: 2001:678:ef4::/48 IP: 2001:678:ef8::/48 IP: 2001:67c:270::/48 IP: 2001:67c:28a0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3e:10:ca:60:94:72:23:2e:79:88:30:7c:a7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98af640c820eeb5fbc92281c61144f11a7bd707e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:7c:e0:b4:b7:ac:ad:98:d7:8e:f8:73:e2: d5:0b:7c:96:b2:62:e1:87:73:c1:0d:65:e5:7b:21: 7c:0d:31:a1:be:0d:46:0b:15:2b:08:24:e4:90:59: d0:c6:de:fc:3d:98:44:a7:60:0a:b0:31:e6:7a:dc: 79:7b:be:28:6f:3e:70:16:79:48:1d:36:4f:85:40: 83:07:35:1e:c9:15:7c:f9:88:76:9a:d9:20:da:e5: 02:d5:7d:53:96:d6:7e:9f:fd:ff:84:aa:a5:e5:ef: 33:73:5c:91:fe:19:8b:f6:dd:cb:22:d0:cc:c9:0c: 73:63:be:1b:0e:5b:3e:54:a7:55:a2:8d:3c:e0:93: e9:84:a0:ef:52:5d:21:58:35:72:9b:93:6a:23:8e: 54:ad:f9:a9:91:9f:6c:3f:b6:a5:6d:0b:58:44:b2: 67:45:35:bc:86:d4:fd:f6:8d:21:33:35:25:2d:34: 09:f4:a4:b0:a0:57:d9:76:8a:5f:1b:c5:df:25:30: 93:82:44:fa:23:79:4e:4d:5a:ed:65:dc:90:4f:86: 9c:0a:af:1e:9a:57:93:92:41:8c:7e:76:ca:cb:76: c5:4c:59:db:8f:f6:ab:9d:f6:5a:b9:9c:91:46:e0: e6:60:97:ab:fe:ce:6f:0c:cd:73:fe:62:8d:73:8f: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:6bc::/48 2001:678:ef0::/48 2001:678:ef4::/48 2001:678:ef8::/48 2001:67c:270::/48 2001:67c:28a0::/48 Signature Algorithm: sha256WithRSAEncryption 10:3f:da:bb:95:8f:61:9c:ae:ee:9f:f8:cd:35:cb:5d:d9:ed: e4:39:43:06:57:7c:ac:b7:cf:6a:cf:56:a8:2f:5c:8e:18:55: 1b:f9:43:5f:86:b4:23:46:30:ad:1d:a0:e9:8e:5f:52:22:af: 68:db:14:2b:10:ed:1f:ea:46:83:52:fa:33:7e:56:f1:44:d0: c9:0b:f6:f8:ab:fe:20:41:63:40:4f:f0:7d:c7:60:9e:87:70: 08:c0:ae:55:bf:ca:d7:36:d4:06:c7:26:68:20:f9:66:80:a5: cd:36:fd:c4:75:c4:6e:b0:dc:fb:48:01:02:c5:7d:77:dc:51: 85:1a:ec:0a:99:94:eb:80:a4:56:3a:78:53:c7:15:28:d7:44: a9:1f:ac:b8:d3:42:d5:c3:92:91:3d:9f:5b:30:74:b9:36:00: e5:b1:83:8d:8e:4e:a0:79:58:b6:a2:25:67:a9:be:ec:12:cf: 62:36:5d:4f:0d:cb:ea:84:14:56:87:2b:dd:3e:04:c8:25:41: a5:37:07:76:98:ae:8d:6c:9a:02:77:db:de:86:c5:f5:e1:09: 8e:e6:bb:00:b0:4f:d2:7e:b1:d5:02:44:9a:84:c2:ca:60:8c: 07:cf:05:08:c1:42:5d:92:57:5f:f2:c1:c4:68:a6:10:45:c5: 5a:5d:69:8d -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9yj4QymCUciMueYgwfKdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGFmNjQwYzgyMGVlYjVmYmM5MjI4MWM2MTE0NGYxMWE3YmQ3MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L984LS3rK2Y1474c+LVC3yWsmLh h3PBDWXleyF8DTGhvg1GCxUrCCTkkFnQxt78PZhEp2AKsDHmetx5e74obz5wFnlI HTZPhUCDBzUeyRV8+Yh2mtkg2uUC1X1TltZ+n/3/hKql5e8zc1yR/hmL9t3LItDM yQxzY74bDls+VKdVoo084JPphKDvUl0hWDVym5NqI45UrfmpkZ9sP7albQtYRLJn RTW8htT99o0hMzUlLTQJ9KSwoFfZdopfG8XfJTCTgkT6I3lOTVrtZdyQT4acCq8e mleTkkGMfnbKy3bFTFnbj/arnfZauZyRRuDmYJer/s5vDM1z/mKNc48TlwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFJivZAyCDutfvJIoHGEUTxGnvXB+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzEyMmZm NC1jNGE3LTQ2OTgtODc5Zi1lY2FiNzBlZjMyZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvMTIyZmY0 LWM0YTctNDY5OC04NzlmLWVjYWI3MGVmMzJkYS8xL21LOWtESUlPNjEtOGtpZ2NZ UlJQRWFlOWNINC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEGeAa8AwcAIAEGeA7wAwcAIAEGeA70AwcA IAEGeA74AwcAIAEGfAJwAwcAIAEGfCigMA0GCSqGSIb3DQEBCwUAA4IBAQAQP9q7 lY9hnK7un/jNNctd2e3kOUMGV3yst89qz1aoL1yOGFUb+UNfhrQjRjCtHaDpjl9S Iq9o2xQrEO0f6kaDUvozflbxRNDJC/b4q/4gQWNAT/B9x2Ceh3AIwK5Vv8rXNtQG xyZoIPlmgKXNNv3EdcRusNz7SAECxX133FGFGuwKmZTrgKRWOnhTxxUo10SpH6y4 00LVw5KRPZ9bMHS5NgDlsYONjk6geVi2oiVnqb7sEs9iNl1PDcvqhBRWhyvdPgTI JUGlNwd2mK6NbJoCd9vehsX14QmO5rsAsE/SfrHVAkSahMLKYIwHzwUIwUJdkldf 8sHEaKYQRcVaXWmN -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:15 2026 by rpki-client