This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer (raw, json) Hash identifier: wAIt9x5kw0bynoUbi0bdB228g1oDNMfjbec7WjNAsAU= Subject key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B8013CF78BB586C833B3A7DC8048 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211957 IP: 185.235.8.0/24 IP: 2a10:f480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 09:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b8:01:3c:f7:8b:b5:86:c8:33:b3:a7:dc:80:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:54:95:d2:05:cd:66:35:cd:71:b9:4e:84: 6d:4f:4e:6e:70:38:bd:6f:3b:9e:eb:70:73:6a:48: c7:45:01:19:73:a6:ed:13:6f:c4:dd:ec:b1:6d:fc: 45:fe:d8:75:dd:f9:c7:61:a4:6b:44:23:36:d1:ff: 8e:da:71:95:b3:d3:dd:f8:36:f9:46:a8:09:d9:eb: e7:cd:b4:15:f2:10:b8:97:84:67:90:b9:d4:fa:7d: 72:3a:63:eb:e8:27:2f:44:99:43:ed:38:56:b5:0b: de:ec:9f:bf:9a:cd:9d:86:d0:5b:cd:7a:dd:aa:51: b8:6c:39:54:5d:00:86:db:f2:c5:3b:08:2a:d3:f1: c6:de:71:17:ab:47:c1:27:44:5d:39:87:be:ff:89: e1:82:86:0c:26:72:e2:cc:06:f6:92:cf:47:34:a2: 0c:16:88:d0:44:c7:0c:cd:26:db:bb:94:92:c3:8b: 18:3c:8f:bb:b4:86:dc:94:4c:fb:f0:4b:4d:ab:2b: df:b0:60:06:e7:f9:b2:40:55:43:b6:ef:9e:02:86: b7:bf:32:dd:e1:00:0b:0a:32:58:fb:3c:1a:88:97: 47:e6:0f:ba:2b:5c:db:41:03:14:8e:5e:0b:1f:d2: 27:62:85:a9:29:1f:99:90:0b:2b:96:dc:ae:ec:ef: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.8.0/24 IPv6: 2a10:f480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211957 Signature Algorithm: sha256WithRSAEncryption 9e:6c:b1:6f:48:36:34:ba:f4:d8:e9:51:d1:33:2e:1e:2c:9c: 37:d8:ce:92:f0:82:65:bf:56:0b:12:b2:82:ab:cc:85:e8:19: 3a:e6:24:49:2c:ac:98:1b:1e:a8:b0:83:88:d6:c5:40:2d:75: 4d:24:4c:ca:7c:f0:86:1d:cc:71:5e:61:7a:ca:00:da:cd:9a: 9c:c6:b2:fd:6d:42:ca:da:46:c2:c0:31:c6:1a:c6:af:54:41: 1f:5a:be:13:a3:0c:7c:f9:b9:4c:68:eb:d5:50:42:f1:67:0c: 8c:f8:39:66:b7:d7:e1:45:dd:3d:61:b6:66:72:86:d1:0d:74: e2:83:ef:4f:d1:99:31:3a:36:cf:3a:c7:6e:0d:a4:33:3c:2d: 1d:9c:83:35:fd:d4:65:b6:36:87:ba:3e:cd:40:12:79:7f:56: 83:a0:0e:70:0e:e6:01:33:8b:58:5a:1c:fa:9e:65:8f:9d:e1: 2b:3e:f1:f3:56:c9:a9:e2:2b:69:aa:ba:26:0f:be:f2:fa:b0: a5:a3:9f:ac:f5:9d:b1:f5:25:ff:a8:8c:00:e5:93:f3:4c:a1: 43:0c:e5:cc:21:a8:cf:05:37:a5:c7:7a:a8:dc:e0:e0:ef:73: a9:09:9c:b7:cd:01:f5:37:a9:78:bb:e7:26:6b:fa:a0:a0:d9: 87:6b:07:06 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt5ELgBPPeLtYbIM7On3IBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGE0MTU5NGE5MmE5YWUwNWM2NWEwNGY4MDNkNDExYTRmODg0MjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJdUldIFzWY1zXG5ToRtT05ucDi9 bzue63BzakjHRQEZc6btE2/E3eyxbfxF/th13fnHYaRrRCM20f+O2nGVs9Pd+Db5 RqgJ2evnzbQV8hC4l4RnkLnU+n1yOmPr6CcvRJlD7ThWtQve7J+/ms2dhtBbzXrd qlG4bDlUXQCG2/LFOwgq0/HG3nEXq0fBJ0RdOYe+/4nhgoYMJnLizAb2ks9HNKIM FojQRMcMzSbbu5SSw4sYPI+7tIbclEz78EtNqyvfsGAG5/myQFVDtu+eAoa3vzLd 4QALCjJY+zwaiJdH5g+6K1zbQQMUjl4LH9InYoWpKR+ZkAsrltyu7O+uiQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPikFZSpKprgXGWgT4A9QRpPiEI/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzYzMDM2 Mi0yOTBmLTQ2YmMtODQ0Ni02YTdjM2JhMzE0MTAvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYy LTI5MGYtNDZiYy04NDQ2LTZhN2MzYmEzMTQxMC8xLzEtS1FWbEtrcW11QmNaYUJQ Z0QxQkdrLUlRajgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEALnrCDANBAIAAjAHAwUDKhD0gDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDO/UwDQYJKoZIhvcNAQELBQADggEBAJ5ssW9INjS6 9NjpUdEzLh4snDfYzpLwgmW/VgsSsoKrzIXoGTrmJEksrJgbHqiwg4jWxUAtdU0k TMp88IYdzHFeYXrKANrNmpzGsv1tQsraRsLAMcYaxq9UQR9avhOjDHz5uUxo69VQ QvFnDIz4OWa31+FF3T1htmZyhtENdOKD70/RmTE6Ns86x24NpDM8LR2cgzX91GW2 Noe6Ps1AEnl/VoOgDnAO5gEzi1haHPqeZY+d4Ss+8fNWyaniK2mquiYPvvL6sKWj n6z1nbH1Jf+ojADlk/NMoUMM5cwhqM8FN6XHeqjc4ODvc6kJnLfNAfU3qXi75yZr +qCg2YdrBwY= -----END CERTIFICATE-----Generated at Tue Jan 13 12:32:53 2026 by rpki-client