This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer (raw, json) Hash identifier: 23jCOr5icxpF9bp4yZhjdByG2PHcxp7v2G1txglFRo4= Subject key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79104A5137FA2DE2E1042C27D283D92B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.73.122.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4a:51:37:fa:2d:e2:e1:04:2c:27:d2:83:d9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2860f15d278379483aaa0613cbf592e72cc81e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:85:4d:5f:84:e7:d7:b1:23:f2:30:fe:5e: a1:d5:1f:71:a9:e4:f6:f6:ff:50:41:7e:ac:d6:23: 11:43:74:26:e2:b7:ed:0f:8c:f3:a6:de:b6:e8:d2: 30:f0:32:1b:e7:f2:de:fb:26:8d:1e:dc:b1:54:30: bf:43:7e:50:ed:2c:ba:4b:ee:f1:24:30:b2:fa:49: a6:0c:b2:f0:0f:bd:9d:93:d1:05:a1:2d:07:e1:de: f8:09:79:c4:3d:81:1b:b3:e5:d9:35:5a:a3:56:a1: a5:aa:19:1f:ad:a9:d7:67:d2:e9:d3:29:df:ce:ea: 4f:2d:8f:f1:ad:2d:11:17:78:69:fa:32:48:73:9f: 65:75:3d:08:f2:6b:88:05:82:c6:c5:9b:70:0e:f4: 0e:b7:7d:16:f1:93:58:1f:c2:5e:af:51:5f:12:81: 15:ce:0c:2a:29:d2:a6:49:c4:65:3a:0d:a8:cc:23: 2f:37:ae:90:fc:97:5a:c1:66:19:cd:b1:5f:95:97: 0c:04:aa:a8:86:19:ed:5e:59:c5:12:e0:36:fe:33: a7:b4:31:6c:00:a0:2e:49:33:3b:86:f9:eb:11:e6: c6:f9:5a:34:70:d8:47:f9:f0:58:f4:c6:af:aa:29: 32:ac:94:ca:f8:5d:9c:8c:2b:29:65:dd:28:2e:be: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.73.122.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:64:90:00:8f:9b:9b:d4:45:ab:8e:6b:7b:e7:be:99:59:80: cb:52:05:4e:d8:ff:e6:87:6b:77:6b:e2:ac:b6:b9:fa:6a:cb: 66:f5:96:97:42:7d:03:63:b3:e2:7c:57:3e:0d:a4:d6:79:71: f4:58:45:13:fa:bd:d2:6c:26:bb:2f:e4:97:19:58:34:12:b6: e3:e7:3c:81:86:94:33:b3:9b:23:37:4f:e5:70:ea:a4:f4:c2: f8:18:39:37:80:6d:dd:25:a6:33:de:9a:0d:ca:f9:39:9d:f2: ea:89:2e:45:b1:c5:ba:d4:b9:5c:1e:fa:df:85:52:67:7d:19: ab:05:e2:11:50:b0:ab:8b:2a:48:10:0a:01:2e:8f:7a:c8:56: b3:f3:7e:5d:fb:0d:0a:1d:4a:af:1f:ae:04:08:a5:f4:99:a7: 5d:7b:29:0c:45:1d:52:5c:5f:d5:25:81:30:44:b4:fc:ff:c6: 2e:a7:c5:c0:c9:00:18:87:1d:fe:d1:dc:0c:32:31:32:f0:c2: b9:4e:55:79:72:6c:25:c4:d1:7b:34:a0:5a:54:9c:23:fb:bc: 20:26:29:2b:2d:e1:a8:f3:42:a0:b9:23:b4:c1:8e:d0:99:40: b2:a9:08:dc:be:51:57:c9:ec:56:36:2e:50:ac:8c:0f:48:bb: b0:60:74:bb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EEpRN/ot4uEELCfSg9krMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODYwZjE1ZDI3ODM3OTQ4M2FhYTA2MTNjYmY1OTJlNzJjYzgxZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc+FTV+E59exI/Iw/l6h1R9xqeT2 9v9QQX6s1iMRQ3Qm4rftD4zzpt626NIw8DIb5/Le+yaNHtyxVDC/Q35Q7Sy6S+7x JDCy+kmmDLLwD72dk9EFoS0H4d74CXnEPYEbs+XZNVqjVqGlqhkfranXZ9Lp0ynf zupPLY/xrS0RF3hp+jJIc59ldT0I8muIBYLGxZtwDvQOt30W8ZNYH8Jer1FfEoEV zgwqKdKmScRlOg2ozCMvN66Q/JdawWYZzbFflZcMBKqohhntXlnFEuA2/jOntDFs AKAuSTM7hvnrEebG+Vo0cNhH+fBY9MavqikyrJTK+F2cjCspZd0oLr6wTQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFChg8V0ng3lIOqoGE8v1kucsyB5IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzFkMWI3 Mi04YmNmLTQ1MDAtOTEyNS0zMjFjMTRkZDQ2MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMWQxYjcy LThiY2YtNDUwMC05MTI1LTMyMWMxNGRkNDYzOS8xL0tHRHhYU2VEZVVnNnFnWVR5 X1dTNXl6SUhrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwUl6MA0GCSqGSIb3DQEBCwUAA4IBAQAsZJAA j5ub1EWrjmt7576ZWYDLUgVO2P/mh2t3a+Kstrn6astm9ZaXQn0DY7PifFc+DaTW eXH0WEUT+r3SbCa7L+SXGVg0Erbj5zyBhpQzs5sjN0/lcOqk9ML4GDk3gG3dJaYz 3poNyvk5nfLqiS5FscW61LlcHvrfhVJnfRmrBeIRULCriypIEAoBLo96yFaz835d +w0KHUqvH64ECKX0maddeykMRR1SXF/VJYEwRLT8/8Yup8XAyQAYhx3+0dwMMjEy 8MK5TlV5cmwlxNF7NKBaVJwj+7wgJikrLeGo80KguSO0wY7QmUCyqQjcvlFXyexW Ni5QrIwPSLuwYHS7 -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:35 2026 by rpki-client