This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer File: k7yN24Ay4YTJK_4gbjKPLAXXjks.cer (raw, json) Hash identifier: 8x/khm4y4MIoLZulDJxjVe/YHDCv9eqWxlMvEh8DmwI= Subject key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775895D5B5D5A7833B12CB7F945E1541 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209234 IP: 2.56.92.0/22 IP: 2a09:c1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:95:d5:b5:d5:a7:83:3b:12:cb:7f:94:5e:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:c8:5a:ea:07:cf:11:d0:8c:8d:b4:fb:ee: 60:11:bf:cb:a5:3f:7b:1f:a8:a7:36:a3:2c:06:12: 62:47:a3:d6:9a:df:d4:cf:d3:88:85:b9:c5:25:e3: 27:eb:97:fc:be:3c:e9:d6:5f:95:57:e0:0f:92:13: 9e:34:fb:87:9c:15:fb:94:84:fd:a5:16:71:28:33: e9:26:43:1c:2f:67:49:73:e5:65:38:57:3a:73:ea: da:ea:36:27:e0:af:31:a0:9d:66:7e:23:c4:bd:05: 25:48:21:52:6a:f2:24:6a:37:60:c2:e7:2c:54:39: 92:1d:25:2f:4d:c7:17:10:55:35:1d:b4:e3:ce:1d: 73:93:24:9f:0a:ae:ee:de:95:b0:e0:79:28:26:e4: 12:b8:7d:53:37:f8:ad:dd:d6:98:7c:76:e6:b3:65: 79:32:a0:d3:70:1c:e7:7e:b6:76:41:29:14:db:c1: d4:84:f9:2b:b1:40:9e:cf:87:db:8c:6b:87:30:ad: a2:43:71:1f:8f:b4:4b:84:79:90:cd:a0:40:fb:f8: ff:d3:b0:6a:38:54:72:35:2a:87:83:e7:5a:e4:e6: 98:21:5c:c5:00:0c:cb:e3:a7:87:95:0d:29:47:e0: 6d:3f:a9:13:48:62:68:fc:ca:73:6f:43:7b:e0:0c: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.92.0/22 IPv6: 2a09:c1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209234 Signature Algorithm: sha256WithRSAEncryption 3a:1d:f5:ab:75:b6:98:e0:a1:08:c7:8e:24:1c:21:63:1d:75: 87:ab:6d:0f:90:0c:57:dc:27:4d:07:6c:85:cb:af:ca:61:e2: 05:02:2b:e3:88:c3:b1:ad:a0:ab:02:6d:ca:09:6d:d0:1a:c4: b0:69:6d:8b:a5:de:87:2c:b3:3e:8c:88:e5:81:28:25:eb:89: 7e:63:9c:7c:14:3b:15:ad:36:7d:ee:aa:39:00:c7:fb:bb:da: 9d:d7:f5:6a:e1:46:82:f3:93:cd:8a:9e:48:75:13:f8:e2:a8: 48:59:aa:13:d1:5b:9a:10:13:a5:56:19:29:ab:7b:d6:24:e8: b3:68:e1:40:07:b3:94:ee:94:b5:d9:ed:af:5e:5c:23:c5:2b: d6:9c:46:43:5b:2a:92:f2:39:78:e1:91:b9:78:17:d8:da:a2: b8:82:88:29:fc:b5:3b:37:c7:c2:ad:b8:d9:32:73:a1:18:4b: 2c:0c:21:22:40:1e:c7:0d:74:1a:62:fa:e7:2f:53:01:bb:c7: aa:02:c0:71:02:fa:0a:d1:c6:a9:c4:19:f1:49:79:61:80:2d: b9:7e:e6:14:35:c8:ed:b8:04:b4:57:01:64:9b:69:48:00:03: 70:6c:1d:08:e3:6f:9f:b9:92:d7:ac:43:12:98:a0:16:6f:a4: f9:6b:d0:98 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WJXVtdWngzsSy3+UXhVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2JjOGRkYjgwMzJlMTg0YzkyYmZlMjA2ZTMyOGYyYzA1ZDc4ZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlXIWuoHzxHQjI20++5gEb/LpT97 H6inNqMsBhJiR6PWmt/Uz9OIhbnFJeMn65f8vjzp1l+VV+APkhOeNPuHnBX7lIT9 pRZxKDPpJkMcL2dJc+VlOFc6c+ra6jYn4K8xoJ1mfiPEvQUlSCFSavIkajdgwucs VDmSHSUvTccXEFU1HbTjzh1zkySfCq7u3pWw4HkoJuQSuH1TN/it3daYfHbms2V5 MqDTcBznfrZ2QSkU28HUhPkrsUCez4fbjGuHMK2iQ3Efj7RLhHmQzaBA+/j/07Bq OFRyNSqHg+da5OaYIVzFAAzL46eHlQ0pR+BtP6kTSGJo/Mpzb0N74AytcwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJO8jduAMuGEySv+IG4yjywF145LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2Y4MTNj Zi0wZDZhLTQ3OTgtOThmMS1iOTE2Nzc0OGE4YTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvZjgxM2Nm LTBkNmEtNDc5OC05OGYxLWI5MTY3NzQ4YThhMy8xL2s3eU4yNEF5NFlUSktfNGdi aktQTEFYWGprcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjhcMA0EAgACMAcDBQMqCcHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxUjANBgkqhkiG9w0BAQsFAAOCAQEAOh31q3W2mOCh CMeOJBwhYx11h6ttD5AMV9wnTQdshcuvymHiBQIr44jDsa2gqwJtyglt0BrEsGlt i6XehyyzPoyI5YEoJeuJfmOcfBQ7Fa02fe6qOQDH+7vandf1auFGgvOTzYqeSHUT +OKoSFmqE9FbmhATpVYZKat71iTos2jhQAezlO6Utdntr15cI8Ur1pxGQ1sqkvI5 eOGRuXgX2NqiuIKIKfy1OzfHwq242TJzoRhLLAwhIkAexw10GmL65y9TAbvHqgLA cQL6CtHGqcQZ8Ul5YYAtuX7mFDXI7bgEtFcBZJtpSAADcGwdCONvn7mS16xDEpig Fm+k+WvQmA== -----END CERTIFICATE-----Generated at Thu Jan 1 19:51:51 2026 by rpki-client