This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer File: rkZkQGbOrznTr7D9c1sBnOydo2Q.cer (raw, json) Hash identifier: 6fj1naYcKDajP5G572JQHDTxEbGJOTeD6K4CLuRp8Ks= Subject key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3821A558906C4FB6756D8340840684 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.246.62.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:21:a5:58:90:6c:4f:b6:75:6d:83:40:84:06:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:21:d8:b2:5d:6d:0b:25:26:4d:d8:6f:7a: 0e:90:5f:4e:93:97:01:af:d9:72:04:08:7b:99:31: f7:3b:03:64:f3:70:31:10:6e:3b:b8:1b:e0:79:b4: d8:eb:28:99:23:24:d4:8e:cb:65:0b:ee:e8:99:9b: 8f:55:8e:84:48:aa:d9:0b:3b:c1:0c:b3:d8:e1:30: 6b:58:37:78:1f:18:fa:a9:30:19:89:4d:fa:99:82: e0:59:86:9e:5f:39:49:6e:a1:fc:16:17:49:20:72: 95:a6:9f:bc:1c:0e:be:97:d7:4f:10:6a:41:f8:81: 29:bc:32:41:c6:a0:55:22:a7:5c:13:34:d2:f6:7a: 2c:52:05:21:d6:ac:9b:b2:de:38:94:f1:22:95:1d: 94:cb:5c:9d:8c:38:e5:5a:f4:3d:73:bc:2e:36:36: 58:6c:2e:fa:5d:f7:c9:06:8f:c2:a6:26:7e:c4:18: 92:ce:10:87:f8:b2:4a:c3:87:a2:5a:b5:ed:79:2f: 01:4c:57:14:f5:41:3c:6d:1c:b0:65:5b:1b:0a:bb: 34:bc:33:ff:ef:76:c4:ae:b1:61:7b:a2:23:5f:46: 81:a7:b1:b9:2c:96:48:74:0d:9d:64:af:10:22:04: 19:02:b4:d9:47:13:22:48:9a:b6:22:97:42:22:59: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.246.62.0/23 Signature Algorithm: sha256WithRSAEncryption 32:56:bb:83:f8:6a:8e:10:bf:a5:df:2c:91:79:42:f3:6e:d1: 52:cc:19:6f:d4:8f:7f:83:66:f5:e9:6d:b2:26:fc:62:0e:3a: a5:fc:a3:f0:69:75:16:f0:b3:64:61:67:80:5b:6d:08:7b:0a: 75:c8:0e:f1:d3:d0:fb:20:29:52:67:e6:a0:8f:8f:bc:29:a5: 96:24:07:a2:30:be:86:b9:37:bf:f3:73:ca:78:a5:8b:0c:43: 9c:4b:af:e3:93:b2:95:5d:8b:a5:e5:dc:0e:92:ef:e0:fd:2f: 94:1b:51:94:a5:88:48:d8:f6:c4:f8:e8:5f:b8:8e:81:cb:b3: 74:35:9f:ef:0d:55:60:64:fe:3f:1f:c7:5c:b1:54:08:e1:0a: d5:c3:8d:90:2a:fa:12:3c:ff:bd:bb:30:bf:33:96:3d:dd:71: 89:27:68:61:2c:3e:4d:93:1f:97:50:02:b0:9d:80:9f:7b:3a: 6e:84:38:ae:ea:74:c1:01:e9:8d:15:2b:8c:f1:b7:9c:05:51: 49:6a:37:c2:47:a7:fa:4f:74:57:fb:c0:a6:85:06:e8:3d:22: ea:eb:cf:bd:a7:af:9f:e9:b1:44:85:60:15:0d:59:c6:0e:b6: 51:17:6e:bb:0b:89:37:92:24:52:0c:eb:eb:83:f9:9c:02:7a: cc:5f:9c:13 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+OCGlWJBsT7Z1bYNAhAaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTQ2NjQ0MDY2Y2VhZjM5ZDNhZmIwZmQ3MzViMDE5Y2VjOWRhMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqwh2LJdbQslJk3Yb3oOkF9Ok5cB r9lyBAh7mTH3OwNk83AxEG47uBvgebTY6yiZIyTUjstlC+7omZuPVY6ESKrZCzvB DLPY4TBrWDd4Hxj6qTAZiU36mYLgWYaeXzlJbqH8FhdJIHKVpp+8HA6+l9dPEGpB +IEpvDJBxqBVIqdcEzTS9nosUgUh1qybst44lPEilR2Uy1ydjDjlWvQ9c7wuNjZY bC76XffJBo/CpiZ+xBiSzhCH+LJKw4eiWrXteS8BTFcU9UE8bRywZVsbCrs0vDP/ 73bErrFhe6IjX0aBp7G5LJZIdA2dZK8QIgQZArTZRxMiSJq2IpdCIlm9pwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFK5GZEBmzq8506+w/XNbAZzsnaNkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2JjMTc4 ZS05ZGMwLTQ2ODgtYTJlMy04ZDlmMTFmOTE2ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvYmMxNzhl LTlkYzAtNDY4OC1hMmUzLThkOWYxMWY5MTZlOS8xL3JrWmtRR2JPcnpuVHI3RDlj MXNCbk95ZG8yUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwfY+MA0GCSqGSIb3DQEBCwUAA4IBAQAyVruD +GqOEL+l3yyReULzbtFSzBlv1I9/g2b16W2yJvxiDjql/KPwaXUW8LNkYWeAW20I ewp1yA7x09D7IClSZ+agj4+8KaWWJAeiML6GuTe/83PKeKWLDEOcS6/jk7KVXYul 5dwOku/g/S+UG1GUpYhI2PbE+OhfuI6By7N0NZ/vDVVgZP4/H8dcsVQI4QrVw42Q KvoSPP+9uzC/M5Y93XGJJ2hhLD5Nkx+XUAKwnYCfezpuhDiu6nTBAemNFSuM8bec BVFJajfCR6f6T3RX+8CmhQboPSLq68+9p6+f6bFEhWAVDVnGDrZRF267C4k3kiRS DOvrg/mcAnrMX5wT -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:16 2026 by rpki-client