This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer (raw, json) Hash identifier: rVy0tb2UBGZO0/DT/WwJ9IT8tuVm0sLhYco8AD04QgU= Subject key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B0A61183560FA5665EF09B5547EE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213151 IP: 2001:678:1e8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0a:61:18:35:60:fa:56:65:ef:09:b5:54:7e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:83:d1:92:89:b8:00:42:31:e5:69:1d:6d: 1d:e4:db:64:e1:77:36:79:0b:79:24:b7:59:e0:88: af:2d:de:92:5e:8b:ad:eb:6b:a6:09:5c:ec:17:9c: bc:65:4e:83:45:6b:37:fd:a4:9d:ed:19:5a:e5:56: 8b:22:e5:dd:73:f5:7d:6a:ad:d9:3f:61:f6:11:7a: 94:d9:61:32:07:85:99:ce:5a:a2:aa:ae:52:e1:22: de:37:22:21:49:3f:42:27:2b:35:ba:6c:f3:87:6e: d6:82:31:e2:c5:25:9b:00:ee:5e:c9:34:ad:11:02: d6:77:9e:31:c7:53:9b:72:3d:8c:2d:3e:e6:1b:2a: 3c:a3:e3:2d:2a:6d:6b:e1:10:9c:7f:96:e5:8e:a1: 0a:df:22:98:95:38:e5:b3:bb:ca:67:fe:f4:b1:7e: 1a:91:0c:fd:33:d9:82:0b:f2:6e:b3:3f:02:84:1d: 75:a2:d2:4a:5a:1f:5f:f8:c8:6f:96:0e:07:cd:df: 52:12:30:00:8d:56:9f:39:0b:ac:8c:3e:d5:c6:ec: 7d:31:ec:80:f4:93:36:ec:02:86:08:19:57:70:94: f4:2f:66:f7:3d:5a:d4:f0:db:1f:e8:87:73:df:82: 07:f0:f9:b6:26:bd:ae:ad:f8:da:8c:16:1d:39:5e: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1e8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213151 Signature Algorithm: sha256WithRSAEncryption 13:02:90:77:75:5c:e8:85:c8:94:0f:89:f4:56:e1:30:c7:12: ac:d6:08:2d:85:62:d2:a6:77:c1:d1:51:68:01:f3:f8:c3:36: b6:17:e8:78:35:e4:a6:2d:55:d8:a8:27:cb:c4:2e:7f:13:a8: fd:60:f8:03:c0:f3:fc:88:95:d8:eb:78:ba:ef:48:b2:c1:ec: 51:2c:a2:1c:97:68:84:8a:09:a8:04:e6:c8:be:fd:73:f4:35: f6:2f:23:b7:dd:f3:28:d1:5d:8c:42:05:33:ef:f9:33:a8:bb: 1f:00:61:f4:59:48:16:cd:5d:91:82:ac:84:ad:2b:e9:d8:a3: ea:4e:e4:a7:78:1f:2c:2e:ab:f4:d1:00:06:b2:96:36:19:b0: ee:fa:2b:0c:9b:89:31:0d:72:ae:d5:00:36:43:1d:74:85:33: de:ad:59:cc:5b:50:cd:7f:8f:fd:61:1f:25:51:08:c1:4d:04: f4:ed:59:ee:75:b0:e7:0a:f4:d6:dd:ef:24:4e:d7:c3:a3:61: 52:d9:4d:bd:d1:6e:46:fa:11:45:97:82:ac:34:85:17:fc:0a: 4e:04:9c:9a:90:5a:5c:6d:6d:e8:93:e1:8e:60:c7:6d:21:c5: af:51:16:12:d7:73:f5:0d:2e:da:9a:d0:1b:de:79:55:f1:b3: 35:bf:cc:29 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6WwphGDVg+lZl7wm1VH7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmQ4Yjc2YjIxNjQ3Njk2YzlmNGQ2MzgyYjUyNWQ4M2EwNTgwZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnKD0ZKJuABCMeVpHW0d5Ntk4Xc2 eQt5JLdZ4IivLd6SXout62umCVzsF5y8ZU6DRWs3/aSd7Rla5VaLIuXdc/V9aq3Z P2H2EXqU2WEyB4WZzlqiqq5S4SLeNyIhST9CJys1umzzh27WgjHixSWbAO5eyTSt EQLWd54xx1Obcj2MLT7mGyo8o+MtKm1r4RCcf5bljqEK3yKYlTjls7vKZ/70sX4a kQz9M9mCC/Jusz8ChB11otJKWh9f+Mhvlg4Hzd9SEjAAjVafOQusjD7Vxux9MeyA 9JM27AKGCBlXcJT0L2b3PVrU8Nsf6Idz34IH8Pm2Jr2urfjajBYdOV5BmQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJLYt2shZHaWyfTWOCtSXYOgWA9KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzZmMWYy ZC05OWJiLTQ0ZTAtYWRjNS04ZGZkNWIxNTJmNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvNmYxZjJk LTk5YmItNDRlMC1hZGM1LThkZmQ1YjE1MmY3OS8xL2t0aTNheUZrZHBiSjlOWTRL MUpkZzZCWUQwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAHoMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNAnzANBgkqhkiG9w0BAQsFAAOCAQEAEwKQd3Vc6IXIlA+J9FbhMMcSrNYI LYVi0qZ3wdFRaAHz+MM2thfoeDXkpi1V2Kgny8QufxOo/WD4A8Dz/IiV2Ot4uu9I ssHsUSyiHJdohIoJqATmyL79c/Q19i8jt93zKNFdjEIFM+/5M6i7HwBh9FlIFs1d kYKshK0r6dij6k7kp3gfLC6r9NEABrKWNhmw7vorDJuJMQ1yrtUANkMddIUz3q1Z zFtQzX+P/WEfJVEIwU0E9O1Z7nWw5wr01t3vJE7Xw6NhUtlNvdFuRvoRRZeCrDSF F/wKTgScmpBaXG1t6JPhjmDHbSHFr1EWEtdz9Q0u2prQG955VfGzNb/MKQ== -----END CERTIFICATE-----Generated at Tue Jan 13 06:22:38 2026 by rpki-client