This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer File: KL8ecjI3QqxNgTarbI6F33ujfus.cer (raw, json) Hash identifier: rHHA6Qdty3oh/Ca2gqbmBCGy7rBYMZnjx9UlveTe5yU= Subject key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15DB4AB06CDFD4F60E13040620D887 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.249.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:db:4a:b0:6c:df:d4:f6:0e:13:04:06:20:d8:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:db:54:17:59:f8:72:87:f9:5f:fb:78:7d:3b: e2:44:91:ec:f6:e6:bc:18:c6:73:49:11:34:72:19: 39:24:4c:a8:5e:64:01:1b:96:8c:18:bf:a2:95:23: 11:49:ea:a2:aa:8c:be:5c:25:ae:49:dc:81:a8:2f: 85:cb:8c:e9:59:2e:1a:cf:31:09:a5:f5:d2:b6:11: 8d:c6:53:5d:fe:2d:c2:9c:ef:5d:ac:71:bb:3b:78: 76:6c:a8:4c:44:11:11:af:9c:55:f4:65:96:ab:62: 99:76:b9:fa:3d:78:11:cb:08:de:47:19:19:d7:b3: 10:32:fb:77:75:23:76:59:a9:f9:11:70:69:92:31: 41:40:f3:26:a4:1f:a4:16:36:1e:47:85:a8:20:be: e5:15:d4:70:aa:28:d8:de:a6:ab:86:e9:e7:c2:45: fc:ac:2a:9a:e2:a3:55:6c:c7:a1:f7:30:60:74:60: eb:a9:93:37:04:24:8b:83:db:8a:9c:be:9e:93:e4: 7d:3e:ee:0e:c2:fc:42:96:16:2a:8b:9b:c1:1c:a5: c1:84:82:0a:84:01:01:82:1b:fa:57:3a:39:04:4d: 46:93:a2:2b:0c:5b:70:02:64:f9:e0:d2:e9:3a:63: ee:cd:a8:46:ae:06:bc:95:a3:23:c4:67:60:cb:78: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.140.0/22 Signature Algorithm: sha256WithRSAEncryption 25:75:9a:a8:7e:d3:e0:44:91:63:63:56:67:5b:b4:41:f9:ed: b9:92:66:68:40:96:78:dd:62:f1:72:62:d3:51:44:8a:7f:d0: 45:42:5d:04:8d:4c:1f:31:01:0c:15:fc:d7:35:73:50:a2:cf: 60:ad:01:6d:fd:bb:af:45:fd:21:cf:95:c6:56:5a:db:3e:18: a6:3e:71:23:7d:88:f0:39:7e:8c:19:94:3d:1e:66:99:9a:8d: 41:ed:de:11:b5:65:9f:8d:81:61:bd:2d:53:09:dc:d6:28:e4: b5:cb:29:83:78:bb:af:90:8c:f2:0b:40:12:4f:c2:50:58:4a: 86:f6:fb:ef:c5:e3:da:b0:7e:6b:9a:d9:69:de:3d:ed:e4:7f: d8:f5:3c:c8:23:17:78:76:5e:a3:02:d5:87:4d:e3:1a:b0:f7: 6c:a6:7d:8d:ca:e4:de:cf:f9:fd:c9:36:4f:05:1e:bd:54:90: 25:b5:f0:3e:df:df:f1:b8:15:79:ea:ce:35:dd:4f:95:d3:c9: ee:6d:51:49:c0:b7:26:b4:ce:4c:71:40:01:c9:e9:5e:ab:71: 39:e0:81:cb:f4:5d:b5:98:ec:65:bb:ac:ad:8f:f9:cb:57:23: 56:b0:7e:fc:d2:ed:56:cb:a5:e0:0b:01:26:f8:2c:d9:9f:44: 3b:5a:fa:f9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FdtKsGzf1PYOEwQGINiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGJmMWU3MjMyMzc0MmFjNGQ4MTM2YWI2YzhlODVkZjdiYTM3ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ttUF1n4cof5X/t4fTviRJHs9ua8 GMZzSRE0chk5JEyoXmQBG5aMGL+ilSMRSeqiqoy+XCWuSdyBqC+Fy4zpWS4azzEJ pfXSthGNxlNd/i3CnO9drHG7O3h2bKhMRBERr5xV9GWWq2KZdrn6PXgRywjeRxkZ 17MQMvt3dSN2Wan5EXBpkjFBQPMmpB+kFjYeR4WoIL7lFdRwqijY3qarhunnwkX8 rCqa4qNVbMeh9zBgdGDrqZM3BCSLg9uKnL6ek+R9Pu4OwvxClhYqi5vBHKXBhIIK hAEBghv6Vzo5BE1Gk6IrDFtwAmT54NLpOmPuzahGrga8laMjxGdgy3iXpwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCi/HnIyN0KsTYE2q2yOhd97o37rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1L2JhNmRm Ny1mMzI1LTQxODQtYTU0YS0wYzQ4MWYwYWQyMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvYmE2ZGY3 LWYzMjUtNDE4NC1hNTRhLTBjNDgxZjBhZDIwZS8xL0tMOGVjakkzUXF4TmdUYXJi STZGMzN1amZ1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCufmMMA0GCSqGSIb3DQEBCwUAA4IBAQAldZqo ftPgRJFjY1ZnW7RB+e25kmZoQJZ43WLxcmLTUUSKf9BFQl0EjUwfMQEMFfzXNXNQ os9grQFt/buvRf0hz5XGVlrbPhimPnEjfYjwOX6MGZQ9HmaZmo1B7d4RtWWfjYFh vS1TCdzWKOS1yymDeLuvkIzyC0AST8JQWEqG9vvvxePasH5rmtlp3j3t5H/Y9TzI Ixd4dl6jAtWHTeMasPdspn2NyuTez/n9yTZPBR69VJAltfA+39/xuBV56s413U+V 08nubVFJwLcmtM5McUAByeleq3E54IHL9F21mOxlu6ytj/nLVyNWsH780u1Wy6Xg CwEm+CzZn0Q7Wvr5 -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:34 2026 by rpki-client