This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer File: KMvNlssXsh1iT9IXD9DXCBY68j0.cer (raw, json) Hash identifier: XZKOhscWGa+GuqoCGac10zs6EGRah5QVrI2SmzytMPQ= Subject key identifier: 28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF203A3DD96DC3BD1471FDA5EA1DEE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:16fc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:03:a3:dd:96:dc:3b:d1:47:1f:da:5e:a1:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28cbcd96cb17b21d624fd2170fd0d708163af23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:7f:91:c0:b3:49:6d:e4:24:ee:46:07:c1: 85:91:5e:3f:73:d7:98:61:36:84:ab:f0:0a:82:70: c1:d7:e7:8e:72:cb:8c:7a:6c:85:67:da:65:e7:1e: 44:50:41:af:8d:bb:55:74:06:9f:20:46:f2:8c:40: 27:5e:c9:dd:09:f2:69:1c:b5:d8:2b:6d:8f:ce:b0: f3:34:f1:77:07:02:ca:50:37:23:b4:2f:6b:3c:3d: f0:05:ee:dd:9a:58:51:e2:e1:d4:28:e2:52:82:26: df:1f:60:bc:1a:3b:c4:9d:77:ad:d7:5f:4a:32:cc: 87:10:d3:ea:f7:fb:aa:aa:d6:0d:6a:de:82:0e:14: 68:ef:28:89:f4:f4:16:74:7d:99:cc:40:d2:fb:14: 0f:af:1b:b2:ca:79:11:99:eb:e9:de:c3:95:cf:69: 99:44:6a:bb:0d:32:44:cc:40:e0:1c:ca:87:5a:6e: 50:24:33:ae:06:14:cd:6e:d5:77:03:52:7d:b8:49: 42:3c:05:c1:5c:66:6f:cd:1e:b6:f0:59:72:54:d2: ab:3c:e0:5f:9a:74:8e:c4:1a:0f:12:bc:7d:df:6c: 70:aa:4f:55:37:c3:ed:4b:27:b0:77:bb:d6:43:ab: 97:de:ad:5f:af:98:77:97:d8:82:2c:e1:17:59:37: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:16fc::/48 Signature Algorithm: sha256WithRSAEncryption 77:1a:1f:a0:5d:db:55:90:6b:38:7a:f5:f7:b9:d1:4c:c2:73: e7:41:06:08:9c:93:54:1d:9b:4d:03:05:a2:f1:74:29:ad:53: df:a2:b5:29:4f:b3:9a:55:84:d4:2a:77:91:69:d7:e8:f2:47: 59:b9:94:b1:3c:03:65:3e:99:8b:3b:e6:99:54:bd:5d:f3:53: 5d:d1:f5:d4:5f:cd:51:2f:33:3d:b2:3f:10:05:37:08:7f:61: 16:1b:6b:f8:51:dd:0c:ef:3d:bf:9a:e5:a6:26:66:5a:7c:06: f6:e7:13:e3:20:7c:91:c6:59:6c:ec:ee:3f:29:11:da:71:3b: d8:b1:fa:ec:2f:3c:64:51:ab:77:fe:6d:57:d3:18:8b:c0:91: 95:5e:e3:fc:44:90:fc:06:e2:30:5e:45:9d:8a:87:bb:c5:65: bb:9a:85:db:71:9f:7c:38:4f:7b:97:c6:68:1f:b8:65:0f:12: 8b:d0:02:46:ea:bd:ee:d1:d6:ef:48:31:59:6d:1e:d5:9b:89: b7:4e:30:61:f1:ad:8d:9b:03:b7:45:ad:15:6f:2b:81:01:cb: 55:16:9e:2f:d3:ff:dd:6c:dc:99:cb:da:17:93:8e:df:f8:7a: 64:d3:d6:6d:4b:63:f2:1f:54:43:c3:17:40:1a:15:5a:22:53: c3:72:02:1c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt/8gOj3ZbcO9FHH9peod7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGNiY2Q5NmNiMTdiMjFkNjI0ZmQyMTcwZmQwZDcwODE2M2FmMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAd/kcCzSW3kJO5GB8GFkV4/c9eY YTaEq/AKgnDB1+eOcsuMemyFZ9pl5x5EUEGvjbtVdAafIEbyjEAnXsndCfJpHLXY K22PzrDzNPF3BwLKUDcjtC9rPD3wBe7dmlhR4uHUKOJSgibfH2C8GjvEnXet119K MsyHENPq9/uqqtYNat6CDhRo7yiJ9PQWdH2ZzEDS+xQPrxuyynkRmevp3sOVz2mZ RGq7DTJEzEDgHMqHWm5QJDOuBhTNbtV3A1J9uElCPAXBXGZvzR628FlyVNKrPOBf mnSOxBoPErx932xwqk9VN8PtSyewd7vWQ6uX3q1fr5h3l9iCLOEXWTeYEQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFCjLzZbLF7IdYk/SFw/Q1wgWOvI9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzZlNDBl ZS03OTM1LTQxYTktOGVlNy1mOWE2OTQ0OWQ1ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvNmU0MGVl LTc5MzUtNDFhOS04ZWU3LWY5YTY5NDQ5ZDVmYS8xL0tNdk5sc3NYc2gxaVQ5SVhE OURYQ0JZNjhqMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBb8MA0GCSqGSIb3DQEBCwUAA4IBAQB3 Gh+gXdtVkGs4evX3udFMwnPnQQYInJNUHZtNAwWi8XQprVPforUpT7OaVYTUKneR adfo8kdZuZSxPANlPpmLO+aZVL1d81Nd0fXUX81RLzM9sj8QBTcIf2EWG2v4Ud0M 7z2/muWmJmZafAb25xPjIHyRxlls7O4/KRHacTvYsfrsLzxkUat3/m1X0xiLwJGV XuP8RJD8BuIwXkWdioe7xWW7moXbcZ98OE97l8ZoH7hlDxKL0AJG6r3u0dbvSDFZ bR7Vm4m3TjBh8a2NmwO3Ra0VbyuBActVFp4v0//dbNyZy9oXk47f+Hpk09ZtS2Py H1RDwxdAGhVaIlPDcgIc -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:23 2026 by rpki-client