This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer File: KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer (raw, json) Hash identifier: k4eovGeGEVb854jDsv9+chKi8L2n0eSp+Nf2xM4LsR4= Subject key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA25AA17902DA50EE207B478EBEC1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48573 AS: 49066 AS: 210857 IP: 31.185.0.0/21 IP: 45.144.52.0/22 IP: 89.248.69.0/24 IP: 94.143.40.0/21 IP: 95.215.136.0/22 IP: 185.43.8.0/22 IP: 192.109.172.0/24 IP: 192.109.196.0/24 IP: 192.109.203.0/24 IP: 192.109.208.0/24 IP: 193.29.224.0/23 IP: 193.29.230.0/23 IP: 194.33.34.0/23 IP: 194.33.48.0/23 IP: 195.250.49.0/24 IP: 2a04:9400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:25:aa:17:90:2d:a5:0e:e2:07:b4:78:eb:ec:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:a1:e0:a3:db:24:40:16:a2:87:63:0d:3d: 07:6e:a2:91:00:10:e4:40:ef:9e:e3:58:a4:ed:96: 0d:25:e2:0c:6f:96:3c:39:62:15:50:30:1b:59:00: a1:1d:51:50:b6:b1:89:3b:07:cf:4c:99:dd:ae:c1: 12:20:69:3f:bb:32:e7:b6:fe:b7:8c:0e:c1:b8:14: 25:3e:c5:3f:fc:c0:77:22:30:99:c2:92:97:52:74: 89:e1:49:03:25:97:be:b3:17:3e:db:ea:db:67:a5: ac:88:05:f1:06:36:0e:22:e9:76:81:d0:5e:1f:e9: 90:67:d6:b7:09:99:38:09:26:d8:d2:6e:19:a3:8c: 18:87:62:3a:cb:26:80:98:e9:de:f3:d6:24:a1:77: 46:ab:09:30:89:03:8d:d3:4e:89:d0:93:51:0a:a3: 73:6c:65:5e:93:d3:83:9d:f3:fe:df:cb:69:2d:26: 0d:99:ac:2f:99:a5:ab:93:70:4e:0c:12:f0:15:fe: 17:96:9b:56:45:7d:d3:d9:84:76:7e:9c:f7:10:ab: 76:3c:41:2a:7e:8b:41:12:c8:ed:cd:f2:03:35:b0: 66:de:48:40:a3:39:74:a6:67:e5:ac:3b:24:03:8f: c7:68:2a:9c:9f:7c:eb:a8:e5:70:a8:d9:b7:19:f4: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.0.0/21 45.144.52.0/22 89.248.69.0/24 94.143.40.0/21 95.215.136.0/22 185.43.8.0/22 192.109.172.0/24 192.109.196.0/24 192.109.203.0/24 192.109.208.0/24 193.29.224.0/23 193.29.230.0/23 194.33.34.0/23 194.33.48.0/23 195.250.49.0/24 IPv6: 2a04:9400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48573 49066 210857 Signature Algorithm: sha256WithRSAEncryption 2b:92:1b:cb:6f:b6:e0:8a:eb:19:4d:2b:ee:36:75:d0:3e:d7: 2d:95:3c:4a:6a:2b:ef:28:2f:ee:cd:8a:2f:e9:5a:02:51:4c: d0:42:c1:1b:21:a5:9e:c6:01:02:ba:b1:2d:71:8f:c4:d5:f2: f7:f8:d9:4d:b9:ef:cc:3a:c4:5a:6a:da:2d:72:45:f2:70:f1: 7b:43:f2:ed:a1:38:f9:82:5f:9d:f2:02:ac:44:39:be:a2:47: b1:dd:23:d2:ea:fb:a6:1b:d7:e1:3e:c2:93:6f:0e:e2:61:80: e4:36:3e:bf:71:7f:4c:da:71:fc:c5:f2:f2:0c:8a:7b:b7:80: 92:84:15:93:63:4f:3f:2a:24:b0:68:97:36:f7:c6:42:83:99: 51:05:fe:7f:30:52:81:b3:d1:1f:7b:17:b7:3b:d7:c6:23:39: a4:b4:e0:27:a4:ed:ae:ca:bf:98:b5:01:b3:fe:b5:12:c5:52: 13:88:5d:5f:7e:45:17:39:12:1b:37:ec:35:5c:a4:a9:3b:42: af:fc:db:01:a6:d6:69:ec:cd:c2:9a:d9:dd:28:d7:10:30:cf: 9f:a6:2d:cb:a8:70:14:5b:52:04:54:51:71:c5:12:16:22:8d: 46:37:ff:77:2b:a9:fb:69:95:c1:ba:43:b4:75:fb:be:d6:e0: c9:3a:4c:22 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISAZt9yiWqF5AtpQ7iB7R46+wbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTBiY2M1MGE5YTMzYmE1NjUxZWZkMWFmZTQwYjZmZGIwMjU1NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQyh4KPbJEAWoodjDT0HbqKRABDk QO+e41ik7ZYNJeIMb5Y8OWIVUDAbWQChHVFQtrGJOwfPTJndrsESIGk/uzLntv63 jA7BuBQlPsU//MB3IjCZwpKXUnSJ4UkDJZe+sxc+2+rbZ6WsiAXxBjYOIul2gdBe H+mQZ9a3CZk4CSbY0m4Zo4wYh2I6yyaAmOne89YkoXdGqwkwiQON006J0JNRCqNz bGVek9ODnfP+38tpLSYNmawvmaWrk3BODBLwFf4XlptWRX3T2YR2fpz3EKt2PEEq fotBEsjtzfIDNbBm3khAozl0pmflrDskA4/HaCqcn3zrqOVwqNm3GfSiwQIDAQAB o4IDDjCCAwowHQYDVR0OBBYEFCkLzFCpozulZR79Gv5Atv2wJVbwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzRiNmVm NC0zOGVlLTRjMDYtOGNiNi03Njk4MjQ5M2VhMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNGI2ZWY0 LTM4ZWUtNGMwNi04Y2I2LTc2OTgyNDkzZWExYS8xL0tRdk1VS21qTzZWbEh2MGFf a0MyX2JBbFZ2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwYAQCAAEwWgMEAx+5AAMEAi2QNAMEAFn4RQMEA16PKAMEAl/X iAMEArkrCAMEAMBtrAMEAMBtxAMEAMBtywMEAMBt0AMEAcEd4AMEAcEd5gMEAcIh IgMEAcIhMAMEAMP6MTANBAIAAjAHAwUDKgSUADAkBggrBgEFBQcBCAEB/wQVMBOg ETAPAgMAvb0CAwC/qgIDAzepMA0GCSqGSIb3DQEBCwUAA4IBAQArkhvLb7bgiusZ TSvuNnXQPtctlTxKaivvKC/uzYov6VoCUUzQQsEbIaWexgECurEtcY/E1fL3+NlN ue/MOsRaatotckXycPF7Q/LtoTj5gl+d8gKsRDm+okex3SPS6vumG9fhPsKTbw7i YYDkNj6/cX9M2nH8xfLyDIp7t4CShBWTY08/KiSwaJc298ZCg5lRBf5/MFKBs9Ef exe3O9fGIzmktOAnpO2uyr+YtQGz/rUSxVITiF1ffkUXORIbN+w1XKSpO0Kv/NsB ptZp7M3CmtndKNcQMM+fpi3LqHAUW1IEVFFxxRIWIo1GN/93K6n7aZXBukO0dfu+ 1uDJOkwi -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:48 2026 by rpki-client