This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer File: rakwWHtP0v73KPBW7KhohCLDuXw.cer (raw, json) Hash identifier: tPC+hE4ktO/VE21HpOkHIUfjYq2N9moGxlVYdtgzJBI= Subject key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C736555152ECFA4A339D7AC95ED113 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56553 IP: 193.219.119.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:36:55:51:52:ec:fa:4a:33:9d:7a:c9:5e:d1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ada930587b4fd2fef728f056eca8688422c3b97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:dd:2f:87:f7:90:ca:55:78:29:92:64:a8: 9c:6c:6b:11:0f:1e:20:31:55:66:d6:42:2c:9a:b6: 28:37:6e:06:3e:0f:da:2e:91:9f:3b:67:c8:09:0e: a9:ac:54:b7:d4:7a:bb:56:fb:ea:b8:17:a4:8f:b9: 40:7d:93:1b:0e:2c:79:64:cf:b4:3f:75:33:b4:8f: da:aa:72:98:27:29:5a:c5:4e:d9:24:b9:a6:15:25: c2:6c:bd:54:c6:4a:bf:87:1f:d3:1a:0b:09:f6:93: 96:04:4f:ce:2d:ed:85:32:17:c5:39:19:a2:7c:aa: 8a:1b:95:d6:d3:3f:f4:0b:37:e7:b8:f5:ed:0b:1c: 2f:40:31:a8:f0:09:2e:1a:89:78:8e:41:7a:e8:50: 19:14:26:3b:f4:74:e7:80:ad:af:c3:4c:9e:3b:99: e7:77:c6:79:b3:93:2d:84:3a:b0:3d:12:c6:f7:6e: c6:22:81:12:af:f8:72:29:22:36:10:11:10:35:de: aa:37:bb:4a:f0:af:36:6f:fd:eb:ff:bc:d5:e2:b4: 79:f5:af:a9:4b:d5:66:a8:fb:6c:49:64:c8:89:93: a7:d7:64:a5:9d:b4:1c:48:af:79:a3:ad:54:22:37: 0f:1e:a2:4f:1f:bd:ca:dd:09:24:9a:6d:49:8c:2f: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.219.119.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56553 Signature Algorithm: sha256WithRSAEncryption 9a:1b:2a:b3:81:f2:1f:65:bc:37:34:f8:25:d4:73:4e:4c:87: 46:5a:ee:b7:02:a2:72:7f:f9:60:3c:81:36:f8:83:40:90:7a: 0b:30:27:68:e3:5b:00:da:df:eb:5a:1d:97:8e:63:ec:8f:ac: 3c:ab:db:91:23:d3:16:74:44:ce:cf:60:07:a6:c3:cc:ba:b6: 35:e6:96:b6:c5:27:05:b5:66:f3:9a:2c:6a:bf:cc:5d:a8:76: 97:3b:6e:9b:a0:3f:fd:fb:15:d6:d6:e0:70:9a:a1:68:97:66: 53:c2:20:c2:0a:ea:26:2b:ed:ec:f1:c3:fe:34:92:83:b5:fc: 96:fb:f6:db:6a:8e:83:02:25:c1:ce:4d:63:64:d0:5c:a9:e6: d5:7d:3f:58:21:8d:2d:b5:63:53:00:b0:e7:45:1c:ba:28:a3: 5a:88:b1:91:90:25:46:ea:9a:ce:3c:d0:3b:7b:3d:ec:f8:cc: cf:f6:1c:62:f8:ac:35:a1:7b:2e:6f:7e:46:90:6f:4b:2f:e6: 01:02:ba:3b:9f:59:ca:e8:61:38:fd:9a:3b:70:8e:fa:93:a5: 26:3f:95:9f:d9:3d:78:c9:e5:90:83:ae:26:66:a4:b6:fe:a5: ad:ea:72:3d:b5:72:d9:80:99:6f:31:a9:56:60:12:b5:d3:20: ed:fb:ae:02 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xzZVUVLs+koznXrJXtETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGE5MzA1ODdiNGZkMmZlZjcyOGYwNTZlY2E4Njg4NDIyYzNiOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB7dL4f3kMpVeCmSZKicbGsRDx4g MVVm1kIsmrYoN24GPg/aLpGfO2fICQ6prFS31Hq7VvvquBekj7lAfZMbDix5ZM+0 P3UztI/aqnKYJylaxU7ZJLmmFSXCbL1Uxkq/hx/TGgsJ9pOWBE/OLe2FMhfFORmi fKqKG5XW0z/0CzfnuPXtCxwvQDGo8AkuGol4jkF66FAZFCY79HTngK2vw0yeO5nn d8Z5s5MthDqwPRLG927GIoESr/hyKSI2EBEQNd6qN7tK8K82b/3r/7zV4rR59a+p S9VmqPtsSWTIiZOn12SlnbQcSK95o61UIjcPHqJPH73K3Qkkmm1JjC+CNwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK2pMFh7T9L+9yjwVuyoaIQiw7l8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzMzYzZl YS0wYWEyLTQ1ODEtOTQxOC0zODkxZTZmZWZlYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMzNjNmVh LTBhYTItNDU4MS05NDE4LTM4OTFlNmZlZmVhNC8xL3Jha3dXSHRQMHY3M0tQQlc3 S2hvaENMRHVYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwdt3MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDc6TANBgkqhkiG9w0BAQsFAAOCAQEAmhsqs4HyH2W8NzT4JdRzTkyHRlrutwKi cn/5YDyBNviDQJB6CzAnaONbANrf61odl45j7I+sPKvbkSPTFnREzs9gB6bDzLq2 NeaWtsUnBbVm85osar/MXah2lztum6A//fsV1tbgcJqhaJdmU8IgwgrqJivt7PHD /jSSg7X8lvv222qOgwIlwc5NY2TQXKnm1X0/WCGNLbVjUwCw50UcuiijWoixkZAl RuqazjzQO3s97PjMz/YcYvisNaF7Lm9+RpBvSy/mAQK6O59ZyuhhOP2aO3CO+pOl Jj+Vn9k9eMnlkIOuJmaktv6lrepyPbVy2YCZbzGpVmAStdMg7fuuAg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:41:52 2026 by rpki-client