This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KACGzY28R99NOJtyhcq7ixVieuY.cer File: KACGzY28R99NOJtyhcq7ixVieuY.cer (raw, json) Hash identifier: Jea2IBKGGrXnyfcpiMJPXsovuwDPgxxAadXMawyxApc= Subject key identifier: 28:00:86:CD:8D:BC:47:DF:4D:38:9B:72:85:CA:BB:8B:15:62:7A:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8E6125384BAFA024538A83F7C20AF865 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 13:38:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48077 IP: 91.209.6.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:61:25:38:4b:af:a0:24:53:8a:83:f7:c2:0a:f8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 13:38:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=280086cd8dbc47df4d389b7285cabb8b15627ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:a6:81:64:76:5b:79:ab:57:9c:77:02:7d: c0:d6:82:5b:c9:ae:94:94:80:2d:96:bb:9f:e0:04: c2:9f:90:5e:26:c8:9f:5f:6e:08:f7:47:7a:b5:54: a6:1d:17:9b:5e:f7:b9:1b:8c:cc:43:3b:86:47:2e: c7:0d:10:65:3f:cd:41:3e:f3:96:fd:ba:23:18:0b: 62:f3:dc:a1:03:9e:10:0f:0e:7a:bf:36:a7:00:1b: d5:e1:42:a3:95:7a:ef:58:43:92:14:9b:43:0d:7a: 65:ae:a4:48:f7:ef:d9:a1:b4:c7:69:ba:a1:1e:ac: 4e:ef:b7:27:49:4e:bc:78:1b:c5:10:66:59:6e:21: 2b:85:e9:97:80:47:8f:df:e3:1f:ac:2d:aa:17:22: bb:a7:81:47:7d:6a:14:42:a7:9c:68:65:4a:5d:fa: 8b:c0:51:6c:34:63:d3:e9:c5:b0:8f:d9:be:c8:d2: ad:ef:44:f8:53:17:9f:a7:35:0d:f1:e8:26:3a:1e: 1a:71:70:c1:bc:a2:b2:0e:93:f5:b5:02:44:df:2e: fd:67:b4:c4:99:c0:00:a4:21:9e:63:5e:bf:0c:ca: a0:2f:09:b0:df:2a:e9:66:f1:6d:ad:a9:18:ec:9c: 22:93:1c:35:60:d1:f8:63:c8:02:f3:30:6a:3a:2a: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:86:CD:8D:BC:47:DF:4D:38:9B:72:85:CA:BB:8B:15:62:7A:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.6.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48077 Signature Algorithm: sha256WithRSAEncryption 37:b4:b5:6f:88:b0:b9:8f:90:88:03:79:92:ea:14:d0:01:32: d9:d0:2a:ff:0f:60:ec:9b:7c:7e:f3:19:f6:c7:91:37:d1:f9: 1a:a5:a8:de:e8:a7:d2:7f:2a:b8:b0:69:e9:3d:6e:ab:36:12: cb:fc:ce:f7:1f:8d:63:47:ed:19:35:8c:b7:39:e6:76:f2:17: 42:e6:2c:c8:de:2c:75:e1:ed:62:8e:c3:4c:b7:08:d7:e9:e5: bc:9c:be:73:31:65:cd:da:9c:e1:d7:f6:43:1d:11:65:f5:0a: 70:e9:52:6e:b2:fe:28:94:1b:85:c0:c9:50:ad:ef:ae:0f:a4: 1c:e7:89:fd:10:17:e2:fc:ac:da:68:78:cb:f7:b4:c6:dd:16: 5b:2c:f0:d2:de:b2:c3:69:0d:5d:45:1c:b1:08:c8:e5:8d:7d: 06:ed:69:98:9b:c7:dd:de:1d:2b:cc:29:3d:7e:45:b9:2b:7f: 7b:ee:06:a0:dd:a0:6c:46:d8:88:67:b4:6c:96:73:d6:b1:9a: 0a:d5:b0:84:96:91:96:e3:8b:8c:1e:13:87:12:d3:fd:c5:28: ec:1e:86:d3:09:d7:84:2d:7f:da:e8:44:60:9d:fe:78:9e:dd: fc:b1:89:db:46:93:c6:d9:e3:f4:79:57:34:5a:b4:80:c7:98: e1:3c:9c:95 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZuOYSU4S6+gJFOKg/fCCvhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MTMzODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODAwODZjZDhkYmM0N2RmNGQzODliNzI4NWNhYmI4YjE1NjI3YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpumgWR2W3mrV5x3An3A1oJbya6U lIAtlruf4ATCn5BeJsifX24I90d6tVSmHRebXve5G4zMQzuGRy7HDRBlP81BPvOW /bojGAti89yhA54QDw56vzanABvV4UKjlXrvWEOSFJtDDXplrqRI9+/ZobTHabqh HqxO77cnSU68eBvFEGZZbiErhemXgEeP3+MfrC2qFyK7p4FHfWoUQqecaGVKXfqL wFFsNGPT6cWwj9m+yNKt70T4UxefpzUN8egmOh4acXDBvKKyDpP1tQJE3y79Z7TE mcAApCGeY16/DMqgLwmw3yrpZvFtrakY7Jwikxw1YNH4Y8gC8zBqOir72wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCgAhs2NvEffTTibcoXKu4sVYnrmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzQ1NTRh ZS05OTlhLTQ3MDMtYmZlNC1jZTYwYjY1MzRlMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvNDU1NGFl LTk5OWEtNDcwMy1iZmU0LWNlNjBiNjUzNGUzNy8xL0tBQ0d6WTI4Ujk5Tk9KdHlo Y3E3aXhWaWV1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9EGMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC7zTANBgkqhkiG9w0BAQsFAAOCAQEAN7S1b4iwuY+QiAN5kuoU0AEy2dAq/w9g 7Jt8fvMZ9seRN9H5GqWo3uin0n8quLBp6T1uqzYSy/zO9x+NY0ftGTWMtznmdvIX QuYsyN4sdeHtYo7DTLcI1+nlvJy+czFlzdqc4df2Qx0RZfUKcOlSbrL+KJQbhcDJ UK3vrg+kHOeJ/RAX4vys2mh4y/e0xt0WWyzw0t6yw2kNXUUcsQjI5Y19Bu1pmJvH 3d4dK8wpPX5FuSt/e+4GoN2gbEbYiGe0bJZz1rGaCtWwhJaRluOLjB4ThxLT/cUo 7B6G0wnXhC1/2uhEYJ3+eJ7d/LGJ20aTxtnj9HlXNFq0gMeY4TyclQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:33 2026 by rpki-client