This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer File: tKfQVIK4TTu2BPCZvK-eftNGiJo.cer (raw, json) Hash identifier: TQ1CUybiEB1ffIslkBhHIzYVjwPKByJeVaBhcGJvnm0= Subject key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80650C2F7E1F83CF719760D7971230 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48629 IP: 185.86.160.0/22 IP: 2a05:b980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:65:0c:2f:7e:1f:83:cf:71:97:60:d7:97:12:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:dd:18:6c:2a:95:89:1f:0c:d4:48:1a:5a: 57:96:1d:4b:bc:be:c9:82:4e:7d:f2:c2:66:45:59: 9c:6c:8c:1f:fe:b4:dc:7c:b2:31:c6:bc:ec:bc:c6: 68:a4:c4:38:24:bb:c8:0d:bf:10:a9:1e:66:d7:2b: bd:7d:d2:2d:a1:1a:8f:1d:4d:cf:9d:f3:9d:b1:5a: fb:dd:e2:8e:9c:0d:b3:e5:02:53:a2:fd:15:fb:1a: 55:b4:bb:79:8c:4b:5c:ed:fe:5b:fe:fe:00:af:61: 41:25:33:dc:74:19:66:42:bd:2d:de:39:a0:40:58: 11:0b:96:a8:b1:71:35:9d:1d:d9:fc:4e:35:9b:03: e4:c3:36:f8:70:74:fd:c8:8f:4e:d3:8f:c1:c4:84: 5d:ee:bb:ea:9e:c8:4a:46:f9:51:6a:4c:93:82:7b: 06:07:e3:e6:91:c5:7f:8f:e9:2a:1e:72:0a:cf:4a: 0f:31:1d:50:df:fc:a2:4b:dc:5c:0f:62:14:7b:98: cf:b0:61:ea:a8:72:f6:b2:67:9c:0b:91:9c:00:30: cd:20:ea:8c:93:0c:b5:23:40:68:38:bc:f1:f6:2f: 18:fd:97:9f:1a:0f:26:5a:06:6b:da:d1:43:ca:fc: 06:89:56:58:46:01:d9:19:de:e1:31:97:a2:ba:9b: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.160.0/22 IPv6: 2a05:b980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48629 Signature Algorithm: sha256WithRSAEncryption 15:5c:f2:f5:b6:3e:04:2f:b4:c0:ea:3c:ef:cb:c0:c7:81:d4: 69:70:16:ca:d4:b5:bb:ff:6f:51:cc:85:53:0c:23:79:7c:83: 5b:bf:1f:46:49:3a:b8:69:58:35:7a:df:fe:ad:f4:fd:d7:ca: eb:23:64:81:ac:a1:e6:b1:97:f3:a2:c8:f0:a0:3d:73:3a:cd: 23:03:ed:b5:db:e5:08:3d:01:5e:33:8a:1f:ca:53:2e:7c:16: ba:db:a7:13:ea:2d:19:08:37:22:77:e3:1b:0a:44:42:ed:17: d1:bc:73:81:cb:d0:f5:f0:e3:12:79:81:4b:c5:41:20:a0:76: 8f:67:c9:69:c8:92:42:cc:fe:ba:0b:f1:dc:0a:92:5d:e3:5e: a6:65:46:ce:79:36:17:9f:e4:39:8f:16:7c:57:4e:5f:3c:21: 8b:ab:1b:ec:5e:23:cf:50:58:be:14:5f:ee:15:8f:b6:1d:ea: 8f:aa:e4:ca:23:d2:ca:2a:6d:3b:80:d0:15:85:44:d8:8c:da: 25:96:18:2a:64:94:5b:d8:73:35:64:21:d9:d4:93:be:ad:d4: 87:90:f1:1f:e5:3e:52:53:e8:fb:a7:24:77:de:f8:ae:ca:e5: d8:cb:80:7c:e3:47:06:f8:4f:46:0e:08:31:b1:c0:06:2a:34: aa:2f:7e:f9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gGUML34fg89xl2DXlxIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGE3ZDA1NDgyYjg0ZDNiYjYwNGYwOTliY2FmOWU3ZWQzNDY4ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCPdGGwqlYkfDNRIGlpXlh1LvL7J gk598sJmRVmcbIwf/rTcfLIxxrzsvMZopMQ4JLvIDb8QqR5m1yu9fdItoRqPHU3P nfOdsVr73eKOnA2z5QJTov0V+xpVtLt5jEtc7f5b/v4Ar2FBJTPcdBlmQr0t3jmg QFgRC5aosXE1nR3Z/E41mwPkwzb4cHT9yI9O04/BxIRd7rvqnshKRvlRakyTgnsG B+PmkcV/j+kqHnIKz0oPMR1Q3/yiS9xcD2IUe5jPsGHqqHL2smecC5GcADDNIOqM kwy1I0BoOLzx9i8Y/ZefGg8mWgZr2tFDyvwGiVZYRgHZGd7hMZeiupvlZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLSn0FSCuE07tgTwmbyvnn7TRoiaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzlkZDhh ZS00YWZjLTQ0YzEtOWJkMC1jNTMyMTk1ZWVmNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvOWRkOGFl LTRhZmMtNDRjMS05YmQwLWM1MzIxOTVlZWY0OS8xL3RLZlFWSUs0VFR1MkJQQ1p2 Sy1lZnROR2lKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVagMA0EAgACMAcDBQMqBbmAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC99TANBgkqhkiG9w0BAQsFAAOCAQEAFVzy9bY+BC+0 wOo878vAx4HUaXAWytS1u/9vUcyFUwwjeXyDW78fRkk6uGlYNXrf/q30/dfK6yNk gayh5rGX86LI8KA9czrNIwPttdvlCD0BXjOKH8pTLnwWutunE+otGQg3InfjGwpE Qu0X0bxzgcvQ9fDjEnmBS8VBIKB2j2fJaciSQsz+ugvx3AqSXeNepmVGznk2F5/k OY8WfFdOXzwhi6sb7F4jz1BYvhRf7hWPth3qj6rkyiPSyiptO4DQFYVE2IzaJZYY KmSUW9hzNWQh2dSTvq3Uh5DxH+U+UlPo+6ckd974rsrl2MuAfONHBvhPRg4IMbHA Bio0qi9++Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:34 2026 by rpki-client