This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer File: KCyT0maFJ4jkmYLZ96Yg222fWI0.cer (raw, json) Hash identifier: /w+5XwJC77ttiRztR8pdtcJTYSIJosy4gnLh/dJq+54= Subject key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9EC01CC7C2867570FE10AA98E43EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211212 IP: 185.196.52.0/22 IP: 185.203.184.0/22 IP: 185.232.99.0/24 IP: 2a0a:66c0::/32 IP: 2a0a:ec40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ec:01:cc:7c:28:67:57:0f:e1:0a:a9:8e:43:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=282c93d266852788e49982d9f7a620db6d9f588d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:59:29:66:93:b4:75:96:20:ef:ea:16:07: 89:9c:6b:8a:4e:67:94:b1:75:39:36:d4:33:e7:87: b9:03:4d:93:15:c0:08:05:45:b9:ec:79:a0:ac:b5: c7:aa:b1:85:f7:23:17:33:3a:57:55:67:20:4e:a2: c5:5c:2e:8b:e0:bb:f0:d3:2a:cf:13:da:72:4d:48: f7:41:7f:26:78:d9:f9:d5:97:f2:a4:53:bb:05:6a: d6:5e:1c:26:42:f1:96:b8:88:c7:82:5b:eb:9f:63: a9:7d:32:7f:31:7a:ff:45:f6:f7:8a:d9:ac:4d:36: 95:03:ba:f5:6b:00:c8:43:14:74:c4:a1:a1:6e:e8: 5d:4c:ac:45:e4:ed:80:5c:b6:6d:de:a7:82:e7:86: 72:d9:fd:08:ce:ad:ca:90:f7:34:81:82:57:5c:e9: 23:55:3d:55:24:d1:8c:e6:38:d9:df:5b:4c:ef:1d: 0c:f2:1d:54:c0:96:03:33:4a:ca:88:29:b7:54:41: 9f:ac:8e:71:78:93:68:2b:64:d5:d7:8d:65:92:cd: 2e:35:84:03:ba:88:e8:aa:1f:7a:03:46:4b:7b:81: 54:2f:6e:d8:1b:2a:84:08:c4:81:52:da:c8:9b:1c: df:87:38:d8:b5:91:8c:16:29:17:d0:18:dd:01:c7: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.52.0/22 185.203.184.0/22 185.232.99.0/24 IPv6: 2a0a:66c0::/32 2a0a:ec40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211212 Signature Algorithm: sha256WithRSAEncryption 17:0c:eb:9b:7b:ca:2b:2e:e9:6a:0b:23:60:c5:b6:68:1a:77: 04:35:50:ac:2d:5a:26:2b:24:ad:00:df:ab:7c:5a:f9:32:e5: d5:c7:08:a6:5d:c3:39:f6:8c:c6:53:ae:d3:1a:dd:b4:7f:bd: ae:2a:57:c4:56:a9:9c:51:79:66:39:f6:c7:2f:b9:f6:59:75: f3:a0:00:81:61:73:56:52:6f:cf:25:c9:8d:8d:1b:f2:d6:07: 2c:f4:d6:76:56:b7:62:3e:92:7d:b7:6e:4e:04:d3:74:d2:21: 83:9c:9e:a8:05:04:32:68:f4:82:d0:38:57:08:cb:4a:82:89: c4:96:3e:56:ac:59:1d:44:41:2a:a9:f5:6d:fa:eb:5b:46:bd: ed:15:f7:cf:6e:8e:94:f1:94:d4:4f:be:16:55:88:10:0f:84: 6e:8d:fd:21:ed:80:f4:26:43:df:da:d2:fd:a4:ec:20:04:7a: ca:3b:49:04:64:bc:65:a2:c8:f8:2f:b0:b8:e6:3e:ae:cb:0f: da:57:29:fa:63:d5:6b:4c:4e:b5:b8:75:88:ab:9b:33:06:4f: 40:a7:2a:c2:9b:16:fb:5a:50:16:d0:de:f0:40:7b:65:1e:4f: 50:26:9f:49:fd:5b:80:01:c7:1b:45:89:28:82:ca:3d:19:d0: a7:c3:ac:43 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt9yewBzHwoZ1cP4QqpjkPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODJjOTNkMjY2ODUyNzg4ZTQ5OTgyZDlmN2E2MjBkYjZkOWY1ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgNZKWaTtHWWIO/qFgeJnGuKTmeU sXU5NtQz54e5A02TFcAIBUW57HmgrLXHqrGF9yMXMzpXVWcgTqLFXC6L4Lvw0yrP E9pyTUj3QX8meNn51ZfypFO7BWrWXhwmQvGWuIjHglvrn2OpfTJ/MXr/Rfb3itms TTaVA7r1awDIQxR0xKGhbuhdTKxF5O2AXLZt3qeC54Zy2f0Izq3KkPc0gYJXXOkj VT1VJNGM5jjZ31tM7x0M8h1UwJYDM0rKiCm3VEGfrI5xeJNoK2TV141lks0uNYQD uojoqh96A0ZLe4FUL27YGyqECMSBUtrImxzfhzjYtZGMFikX0BjdAccSwQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFCgsk9JmhSeI5JmC2femINttn1iNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzM4MmZm NC00ZmMyLTQzMDItYWY5MC05NmFkZmZlMmU4NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzgyZmY0 LTRmYzItNDMwMi1hZjkwLTk2YWRmZmUyZTg2YS8xL0tDeVQwbWFGSjRqa21ZTFo5 NllnMjIyZldJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCucQ0AwQCucu4AwQAuehjMBQEAgACMA4DBQAq CmbAAwUAKgrsQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOQwwDQYJKoZIhvcN AQELBQADggEBABcM65t7yisu6WoLI2DFtmgadwQ1UKwtWiYrJK0A36t8Wvky5dXH CKZdwzn2jMZTrtMa3bR/va4qV8RWqZxReWY59scvufZZdfOgAIFhc1ZSb88lyY2N G/LWByz01nZWt2I+kn23bk4E03TSIYOcnqgFBDJo9ILQOFcIy0qCicSWPlasWR1E QSqp9W3661tGve0V989ujpTxlNRPvhZViBAPhG6N/SHtgPQmQ9/a0v2k7CAEeso7 SQRkvGWiyPgvsLjmPq7LD9pXKfpj1WtMTrW4dYirmzMGT0CnKsKbFvtaUBbQ3vBA e2UeT1Amn0n9W4ABxxtFiSiCyj0Z0KfDrEM= -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:03 2026 by rpki-client