This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer File: KBZKV1f91XJaYIRPKufvc7EHpMA.cer (raw, json) Hash identifier: qUBHJhpRSt1g63XnblEOuG7uKINs8z/sQzHCbtZBYjA= Subject key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C731A1CAB016A67444EB181CF783E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206377 IP: 185.178.180.0/22 IP: 2a0a:6780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:31:a1:ca:b0:16:a6:74:44:eb:18:1c:f7:83:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:14:52:cf:ec:f8:4d:7e:02:b8:d9:f4:6f: 2e:3d:75:38:8f:1f:c1:72:f6:ca:b4:2b:cc:1d:ef: 5c:cb:07:04:50:5e:6e:90:c6:93:22:ce:7a:4a:53: 53:a3:19:5e:22:3e:45:1a:0a:e5:49:dd:69:1c:25: 68:d6:c2:34:cd:21:7e:19:6b:3a:58:e2:da:d5:9f: a1:8d:0b:cb:d7:3a:f8:fc:f4:51:73:54:0e:ff:0d: 81:b2:a4:15:a9:4b:37:52:2c:bd:2a:64:1c:2e:03: 30:30:32:25:48:e7:24:cf:48:3e:5b:bc:4c:46:58: 5e:aa:55:fc:1a:69:2e:dc:5b:65:cc:77:49:af:76: ad:99:e6:08:6b:28:91:66:8f:94:53:6a:f7:da:af: a9:7d:d7:f0:b9:f5:2e:5d:8d:f9:d3:4c:bf:63:e0: 12:44:c6:2a:44:a3:ea:9c:a1:6e:1f:31:68:94:d1: 1c:9c:63:40:71:7f:51:0a:ae:27:30:45:49:b7:2f: 44:24:6e:40:e8:7d:a1:90:a0:44:b7:52:8c:19:ef: 37:1c:2d:c4:6a:d0:0a:c3:cb:ad:f6:e2:4e:74:db: ce:8f:f0:0d:e3:ba:58:60:71:a4:cb:f0:81:20:da: 66:68:0c:f4:65:c4:bd:35:f9:1a:75:34:84:b6:22: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.180.0/22 IPv6: 2a0a:6780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206377 Signature Algorithm: sha256WithRSAEncryption 16:64:02:fd:3f:43:12:6d:59:a7:ff:ab:b9:01:18:e2:5e:d3: 54:00:fd:b2:7a:48:06:58:66:70:07:4a:26:93:f7:66:22:fe: 4f:c3:09:76:f5:2f:08:da:5a:b3:f5:ca:75:a9:5c:6f:a9:3c: 60:4a:6e:61:ca:45:b3:05:3d:ba:90:15:b7:e1:da:70:35:9e: 5c:43:75:8a:3f:5e:7b:a6:27:00:40:f5:b3:81:6b:20:87:8c: a9:28:0e:72:bc:6c:cc:79:ae:2b:1b:aa:9c:a7:75:6a:41:49: 15:7a:f9:c4:c9:a3:83:df:9f:06:9d:eb:09:a5:a2:19:40:02: 90:3f:71:4a:c3:41:1d:e8:6c:9b:72:16:60:ac:1c:24:3b:b9: 17:3a:e4:0b:80:bf:f9:c4:e9:d6:f9:a7:7f:a8:09:38:0d:a5: 52:07:48:02:f4:20:88:f1:e1:ec:d1:61:72:f0:ad:ac:f0:16: 4f:59:b8:9a:dc:79:35:fc:9d:e6:49:4b:b6:d6:d3:fd:7c:6a: f3:19:96:0a:4a:ba:0e:44:b8:72:3f:8e:81:96:bc:62:22:93: ee:89:6d:32:4c:0b:9b:06:2d:24:99:66:80:6f:38:d1:16:eb: 68:c4:8c:2d:66:e0:8b:0b:b5:a2:55:57:99:bf:a0:c9:99:c0: b0:46:2b:92 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xzGhyrAWpnRE6xgc94PjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODE2NGE1NzU3ZmRkNTcyNWE2MDg0NGYyYWU3ZWY3M2IxMDdhNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyogUUs/s+E1+ArjZ9G8uPXU4jx/B cvbKtCvMHe9cywcEUF5ukMaTIs56SlNToxleIj5FGgrlSd1pHCVo1sI0zSF+GWs6 WOLa1Z+hjQvL1zr4/PRRc1QO/w2BsqQVqUs3Uiy9KmQcLgMwMDIlSOckz0g+W7xM RlheqlX8Gmku3FtlzHdJr3atmeYIayiRZo+UU2r32q+pfdfwufUuXY3500y/Y+AS RMYqRKPqnKFuHzFolNEcnGNAcX9RCq4nMEVJty9EJG5A6H2hkKBEt1KMGe83HC3E atAKw8ut9uJOdNvOj/AN47pYYHGky/CBINpmaAz0ZcS9NfkadTSEtiLXXwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCgWSldX/dVyWmCETyrn73OxB6TAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4Lzk1NTM1 Yi1lNjMwLTQ1N2YtOGEwMS1hZWFlNWJiYzM5MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOTU1MzVi LWU2MzAtNDU3Zi04YTAxLWFlYWU1YmJjMzkyMC8xL0tCWktWMWY5MVhKYVlJUlBL dWZ2YzdFSHBNQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubK0MA0EAgACMAcDBQMqCmeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmKTANBgkqhkiG9w0BAQsFAAOCAQEAFmQC/T9DEm1Z p/+ruQEY4l7TVAD9snpIBlhmcAdKJpP3ZiL+T8MJdvUvCNpas/XKdalcb6k8YEpu YcpFswU9upAVt+HacDWeXEN1ij9ee6YnAED1s4FrIIeMqSgOcrxszHmuKxuqnKd1 akFJFXr5xMmjg9+fBp3rCaWiGUACkD9xSsNBHehsm3IWYKwcJDu5FzrkC4C/+cTp 1vmnf6gJOA2lUgdIAvQgiPHh7NFhcvCtrPAWT1m4mtx5Nfyd5klLttbT/Xxq8xmW Ckq6DkS4cj+OgZa8YiKT7oltMkwLmwYtJJlmgG840RbraMSMLWbgiwu1olVXmb+g yZnAsEYrkg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:11 2026 by rpki-client