This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer (raw, json) Hash identifier: 1pUTHSeXHjrf8Nwp2QzRv8Ushac0/esW/BGDFh/WUxk= Subject key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B866BAB6EF93413C024961D1E96F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42513 IP: 188.116.46.0/24 IP: 192.111.100.0/24 IP: 194.62.4.0/23 IP: 194.62.8.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:86:6b:ab:6e:f9:34:13:c0:24:96:1d:1e:96:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:44:ab:07:18:13:88:1e:f8:94:f7:9d:93: 5f:c6:62:73:2d:1a:09:00:c2:46:5b:14:be:0f:1a: 77:d8:f6:93:94:30:80:67:d2:94:90:f3:76:6c:54: 3a:47:de:c8:75:30:76:de:62:32:27:f3:39:5f:76: 7c:b4:7a:23:32:d0:90:86:0a:9c:99:c9:f0:0c:ed: 44:2e:5c:36:1f:00:5a:11:b4:bd:8d:e9:30:0f:cd: 8b:b3:e6:87:8d:f7:0c:47:b7:8a:57:55:55:c9:3b: 67:67:cc:a8:c7:2e:ec:81:d7:06:8e:86:32:9f:bf: 25:4d:58:4b:d3:fa:f0:37:a0:9e:bd:40:fc:36:9c: 5e:8b:a1:dd:cb:1f:f6:fc:fb:ce:08:f1:47:8d:c4: 0f:3e:d0:75:b5:56:da:38:f2:46:7c:b6:02:82:9b: 69:86:b2:5f:45:4d:a6:a3:73:b8:ab:e4:f2:d5:1f: 87:9e:d0:27:54:32:83:9e:e6:41:0b:87:8f:f6:ff: 13:1f:54:98:77:76:6d:2f:49:15:a3:32:aa:22:0f: 5b:01:21:a0:fe:e0:63:b1:d4:11:70:2e:47:02:e6: d5:ce:c5:26:1a:09:4e:05:25:12:ec:f4:46:f7:13: 0c:9e:0e:2d:46:33:3f:d1:c4:b6:82:37:ba:75:a4: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.116.46.0/24 192.111.100.0/24 194.62.4.0/23 194.62.8.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42513 Signature Algorithm: sha256WithRSAEncryption 5b:a1:29:c7:2a:5f:e6:cd:aa:9a:c8:4e:3b:3b:97:f4:a4:d1: 73:c7:c2:7f:d4:bf:de:42:06:14:81:58:44:16:80:45:5b:e2: e0:d5:f4:8a:87:ce:e6:e4:7a:f5:6c:fe:a9:5b:dc:8a:fa:2d: 1b:bd:24:9b:a0:05:24:3e:d0:99:45:ef:21:2f:e4:81:59:87: 13:5a:e1:82:e0:7c:3b:57:a2:74:e7:b3:16:a1:bf:e8:4a:78: 9d:27:e5:c2:60:58:bd:1c:1d:29:85:8c:8a:42:f9:08:20:b6: 78:53:12:4b:50:e5:46:38:b1:72:61:f6:79:40:7d:8e:1c:7d: 50:77:80:1e:92:22:f5:85:c2:6d:58:4d:3d:b7:d8:b2:0c:f6: 3f:d3:ff:0f:0b:08:44:1c:44:ce:be:c6:61:85:54:4c:ab:b1: 97:8a:c1:be:de:fd:af:c7:c7:f8:6e:f3:66:6a:66:23:9f:bd: aa:8e:23:b3:88:d9:a6:19:30:29:c4:84:c9:1a:3d:71:e5:5d: 53:17:2b:64:48:12:6d:70:00:dd:1e:dd:55:c6:ab:28:16:8e: 9d:5f:6c:8d:b2:ee:82:eb:35:74:37:b7:62:12:f2:44:92:39: 0f:96:c5:71:4f:e7:0d:b1:6a:dc:e1:f2:10:60:cc:ed:09:ba: d9:1f:c9:b3 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt9W4Zrq275NBPAJJYdHpbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODFhMGJiZjUyZDhkMmQ0ODU5NDM0M2E1NTQwOWZjMTBiYjdiNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqClEqwcYE4ge+JT3nZNfxmJzLRoJ AMJGWxS+Dxp32PaTlDCAZ9KUkPN2bFQ6R97IdTB23mIyJ/M5X3Z8tHojMtCQhgqc mcnwDO1ELlw2HwBaEbS9jekwD82Ls+aHjfcMR7eKV1VVyTtnZ8yoxy7sgdcGjoYy n78lTVhL0/rwN6CevUD8Npxei6Hdyx/2/PvOCPFHjcQPPtB1tVbaOPJGfLYCgptp hrJfRU2mo3O4q+Ty1R+HntAnVDKDnuZBC4eP9v8TH1SYd3ZtL0kVozKqIg9bASGg /uBjsdQRcC5HAubVzsUmGglOBSUS7PRG9xMMng4tRjM/0cS2gje6daQlmwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFCgaC79S2NLUhZQ0OlVAn8ELt7caMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzNmNTE1 NC02M2Q4LTRhNGItOWE0OC0xYzljNGExYmJkNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvM2Y1MTU0 LTYzZDgtNGE0Yi05YTQ4LTFjOWM0YTFiYmQ0My8xL0tCb0x2MUxZMHRTRmxEUTZW VUNmd1F1M3R4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAvHQuAwQAwG9kAwQBwj4EAwQBwj4IMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwCmETANBgkqhkiG9w0BAQsFAAOCAQEAW6Epxypf 5s2qmshOOzuX9KTRc8fCf9S/3kIGFIFYRBaARVvi4NX0iofO5uR69Wz+qVvcivot G70km6AFJD7QmUXvIS/kgVmHE1rhguB8O1eidOezFqG/6Ep4nSflwmBYvRwdKYWM ikL5CCC2eFMSS1DlRjixcmH2eUB9jhx9UHeAHpIi9YXCbVhNPbfYsgz2P9P/DwsI RBxEzr7GYYVUTKuxl4rBvt79r8fH+G7zZmpmI5+9qo4js4jZphkwKcSEyRo9ceVd UxcrZEgSbXAA3R7dVcarKBaOnV9sjbLugus1dDe3YhLyRJI5D5bFcU/nDbFq3OHy EGDM7Qm62R/Jsw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:42 2026 by rpki-client