This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer File: KY60_lwZ8pLyiSTL8VVaj1do2CY.cer (raw, json) Hash identifier: CKqWGDZHYI+2YpjA+BDOWjMpatkf+amLn/uZepj4FZo= Subject key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE53C7498D4E9E42A084D4B951D099 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41563 IP: 89.254.128.0/18 IP: 185.182.92.0/22 IP: 2a09:2ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:c7:49:8d:4e:9e:42:a0:84:d4:b9:51:d0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:72:f8:62:7d:cc:34:96:96:36:ae:99:7e: f7:25:06:25:c8:46:3a:75:54:1a:00:6e:1b:aa:3b: 1f:ae:f1:1c:82:54:11:18:02:d5:ef:32:4a:05:b5: d0:3d:ee:d9:43:11:93:70:6c:2b:7e:ea:18:bb:4b: 11:56:aa:f6:80:3b:06:f8:8b:50:51:de:a3:46:34: 4b:cc:8b:88:51:bd:5f:f7:cd:ba:64:a8:c2:7e:ee: ca:d1:30:19:b2:f6:6f:61:2d:76:fe:89:c2:b5:97: 8e:85:07:bf:bd:79:29:b8:4e:1d:92:41:8b:ce:73: d7:f1:a1:8b:f8:4e:85:d7:40:ff:4f:a0:1a:e4:89: 08:a1:b6:81:48:66:39:c1:8d:32:fa:15:0e:b9:b0: 6a:65:d6:8a:4f:4c:ea:0d:03:a4:05:18:7d:12:93: 7b:e3:a9:02:a3:24:72:17:83:3d:d7:b9:93:ce:2a: c9:d4:03:e4:a1:58:04:eb:13:54:c3:2d:e1:35:73: b6:06:ef:ab:cb:67:09:6a:d0:f3:6a:82:5a:4c:39: a9:bc:3d:fe:68:5c:26:17:e9:71:52:10:3e:aa:2f: 4b:42:90:24:76:a3:af:1d:9a:e5:9e:01:55:16:c6: 73:2a:3f:3f:85:6a:24:64:a6:d8:8c:f8:d0:60:ba: 76:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.254.128.0/18 185.182.92.0/22 IPv6: 2a09:2ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41563 Signature Algorithm: sha256WithRSAEncryption 75:f0:f9:a4:1c:5d:90:25:60:49:a6:78:9a:81:38:a3:19:dd: cb:94:d5:9a:a0:9b:db:97:96:90:28:84:c9:6e:6d:98:92:8c: b0:e6:15:45:fe:61:6a:fb:c3:ca:2d:5f:0a:61:0f:b6:82:10: 84:24:90:43:5e:55:d1:86:1e:4c:0f:cf:e0:65:20:91:be:63: 5c:3a:4f:a2:b4:46:a2:0a:07:71:84:06:f6:a7:47:55:44:90: d3:b7:e0:d6:22:e4:83:f1:04:29:b9:9a:83:e2:a7:2d:af:2b: c5:80:19:59:ef:35:fb:80:c7:ae:79:f2:f7:0a:5d:22:3a:e0: bd:0d:f9:bd:6e:c7:5e:54:58:ef:d2:4b:b8:8c:5e:04:9a:0d: 70:c4:1e:2a:64:40:ee:19:ab:16:01:90:4a:5f:44:f0:ac:c6: 60:96:ad:3f:e4:24:a5:d8:b2:d5:bb:8a:09:8b:ca:91:33:4e: d9:1a:8e:f8:98:3f:c9:e2:ff:96:e1:f6:69:93:0d:28:eb:71: b8:c5:f4:be:d0:28:69:5e:a3:d1:ce:eb:58:5a:ab:43:d1:e2: 40:10:ed:a0:23:b4:56:15:6d:bf:a0:10:38:e2:a9:be:7d:60: 8a:2f:39:34:30:92:a3:7c:c1:fa:ae:b8:e4:79:ee:96:2d:e4: 73:52:9e:59 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87lPHSY1OnkKghNS5UdCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOThlYjRmZTVjMTlmMjkyZjI4OTI0Y2JmMTU1NWE4ZjU3NjhkODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw1y+GJ9zDSWljaumX73JQYlyEY6 dVQaAG4bqjsfrvEcglQRGALV7zJKBbXQPe7ZQxGTcGwrfuoYu0sRVqr2gDsG+ItQ Ud6jRjRLzIuIUb1f9826ZKjCfu7K0TAZsvZvYS12/onCtZeOhQe/vXkpuE4dkkGL znPX8aGL+E6F10D/T6Aa5IkIobaBSGY5wY0y+hUOubBqZdaKT0zqDQOkBRh9EpN7 46kCoyRyF4M917mTzirJ1APkoVgE6xNUwy3hNXO2Bu+ry2cJatDzaoJaTDmpvD3+ aFwmF+lxUhA+qi9LQpAkdqOvHZrlngFVFsZzKj8/hWokZKbYjPjQYLp2LwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCmOtP5cGfKS8okky/FVWo9XaNgmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzk3MTEx Yy0yZTYxLTQzNTktODc2Ni02YmVkZjJmYmRjZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvOTcxMTFj LTJlNjEtNDM1OS04NzY2LTZiZWRmMmZiZGNlMi8xL0tZNjBfbHdaOHBMeWlTVEw4 VlZhajFkbzJDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGWf6AAwQCubZcMA0EAgACMAcDBQMqCSrAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCiWzANBgkqhkiG9w0BAQsFAAOCAQEAdfD5 pBxdkCVgSaZ4moE4oxndy5TVmqCb25eWkCiEyW5tmJKMsOYVRf5havvDyi1fCmEP toIQhCSQQ15V0YYeTA/P4GUgkb5jXDpPorRGogoHcYQG9qdHVUSQ07fg1iLkg/EE Kbmag+KnLa8rxYAZWe81+4DHrnny9wpdIjrgvQ35vW7HXlRY79JLuIxeBJoNcMQe KmRA7hmrFgGQSl9E8KzGYJatP+Qkpdiy1buKCYvKkTNO2RqO+Jg/yeL/luH2aZMN KOtxuMX0vtAoaV6j0c7rWFqrQ9HiQBDtoCO0VhVtv6AQOOKpvn1gii85NDCSo3zB +q645Hnuli3kc1KeWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:07 2026 by rpki-client