This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KHtQElUXlEJ0oUa7rNZOaRog-gY.cer File: KHtQElUXlEJ0oUa7rNZOaRog-gY.cer (raw, json) Hash identifier: TVO4UPw2zj/DDRHDO6+E+Id5Lt9q0RdyEvP0jEhoNPw= Subject key identifier: 28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE040EBB1DC2FFA65E05B7ECE5A9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210650 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e0:40:eb:b1:dc:2f:fa:65:e0:5b:7e:ce:5a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=287b50125517944274a146bbacd64e691a20fa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:ac:55:76:34:9d:a2:7d:55:9a:a7:89:38: d9:49:14:38:25:47:8d:03:cf:98:61:5f:2b:d4:c8: 5d:7f:25:df:90:a9:0f:60:65:f1:98:87:ef:b5:6a: 8e:e9:90:b2:0d:c0:a1:d1:29:68:24:53:e7:5c:40: d3:9f:aa:9d:c2:bf:0d:5e:28:ce:2e:ba:97:2e:5d: 45:63:37:05:45:c7:6a:49:c4:83:4e:12:0a:75:2f: b2:89:54:df:bc:bc:33:4f:6f:7b:14:19:11:d9:ae: bb:06:e4:62:f8:70:8f:96:61:6b:fb:be:5f:c3:47: d5:b3:bf:1f:85:3b:36:12:56:47:aa:84:d6:58:77: 51:e6:8b:be:6e:ff:65:b6:cd:dd:52:9f:ab:72:e2: 73:1a:f2:85:93:0d:9b:82:42:31:eb:39:a4:c8:29: 75:eb:83:c9:84:ff:1a:e6:2e:13:e7:86:8b:8d:21: 07:28:7d:87:00:1a:3a:53:54:85:97:ba:28:90:1b: 39:1b:f3:04:4a:1c:fe:27:7e:6c:2b:ae:a6:be:e6: f7:f1:29:d4:e0:95:98:3f:34:d0:6e:b8:8e:dd:3d: 87:3b:03:6f:5b:d7:21:9d:50:49:6a:1b:71:ce:6f: 45:2b:48:ed:e2:24:02:cf:e3:82:83:b6:7f:c6:b0: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210650 Signature Algorithm: sha256WithRSAEncryption 6d:4b:4a:c0:43:24:5c:59:42:a0:61:4e:d5:d2:1e:0f:ea:e7: 1a:75:c0:cd:f3:70:8d:aa:12:3e:ed:c6:c4:6a:61:1a:55:52: 08:87:6b:5c:f8:78:a9:b4:db:39:3a:e8:9c:67:97:24:35:94: ca:74:46:b5:6c:a0:98:22:80:56:22:64:6b:70:b0:f7:f5:6a: 0a:ab:3d:10:22:9b:cc:ac:d4:15:dd:d1:ab:65:dd:34:bd:3e: 5b:d2:21:e8:c4:ea:7e:ec:71:d7:6b:5d:c2:9b:6c:75:1e:69: a3:91:e6:39:22:bd:07:7c:08:ea:9e:ed:0f:10:c1:de:79:e3: 34:b7:1b:e3:a8:79:cb:a4:41:ff:26:ad:76:85:0a:a7:91:06: d7:e3:44:9c:da:90:11:6a:85:73:3a:12:94:fa:ee:11:b8:73: dd:8e:eb:1d:8a:ef:72:74:8c:09:2e:16:19:96:2e:0f:26:ab: 66:8c:b7:17:f1:05:74:fa:c5:c1:b7:40:02:6e:b5:a0:f2:99: 35:1a:d0:ea:10:50:13:3a:1c:d7:62:96:6c:66:38:02:f2:c1: 55:57:67:e3:94:60:99:67:eb:e5:2c:49:4a:56:e6:14:50:a2: da:e0:6c:19:ee:1f:fa:a6:03:0c:2f:01:bc:df:98:62:24:3b: e4:69:a1:9f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9WuBA67HcL/pl4Ft+zlqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODdiNTAxMjU1MTc5NDQyNzRhMTQ2YmJhY2Q2NGU2OTFhMjBmYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4qsVXY0naJ9VZqniTjZSRQ4JUeN A8+YYV8r1MhdfyXfkKkPYGXxmIfvtWqO6ZCyDcCh0SloJFPnXEDTn6qdwr8NXijO LrqXLl1FYzcFRcdqScSDThIKdS+yiVTfvLwzT297FBkR2a67BuRi+HCPlmFr+75f w0fVs78fhTs2ElZHqoTWWHdR5ou+bv9lts3dUp+rcuJzGvKFkw2bgkIx6zmkyCl1 64PJhP8a5i4T54aLjSEHKH2HABo6U1SFl7ookBs5G/MEShz+J35sK66mvub38SnU 4JWYPzTQbriO3T2HOwNvW9chnVBJahtxzm9FK0jt4iQCz+OCg7Z/xrATUQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCh7UBJVF5RCdKFGu6zWTmkaIPoGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzQxYTQ0 My1lZTJiLTQ2NDYtYmE2OC1hYWI2YzhiYTViZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNDFhNDQz LWVlMmItNDY0Ni1iYTY4LWFhYjZjOGJhNWJkNC8xL0tIdFFFbFVYbEVKMG9VYTdy TlpPYVJvZy1nWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM22jANBgkqhkiG9w0BAQsFAAOCAQEAbUtKwEMkXFlC oGFO1dIeD+rnGnXAzfNwjaoSPu3GxGphGlVSCIdrXPh4qbTbOTronGeXJDWUynRG tWygmCKAViJka3Cw9/VqCqs9ECKbzKzUFd3Rq2XdNL0+W9Ih6MTqfuxx12tdwpts dR5po5HmOSK9B3wI6p7tDxDB3nnjNLcb46h5y6RB/yatdoUKp5EG1+NEnNqQEWqF czoSlPruEbhz3Y7rHYrvcnSMCS4WGZYuDyarZoy3F/EFdPrFwbdAAm61oPKZNRrQ 6hBQEzoc12KWbGY4AvLBVVdn45RgmWfr5SxJSlbmFFCi2uBsGe4f+qYDDC8BvN+Y YiQ75Gmhnw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:48 2026 by rpki-client