This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer File: KYNUhhlzcozivlBfcnCkNk2U5pE.cer (raw, json) Hash identifier: l5U//si4Ia0nuiwyG5M4DQwVNLGtMTQx1jChkW5FAnE= Subject key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FF3CDF3FECEAC5A10D309F8C27A81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41693 AS: 59964 IP: 185.1.94.0/24 IP: 2001:7f8:b6::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f3:cd:f3:fe:ce:ac:5a:10:d3:09:f8:c2:7a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=298354861973728ce2be505f7270a4364d94e691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:93:95:bc:44:e6:23:85:5b:16:ab:0f:43: df:0e:7a:97:9b:b4:79:35:3e:3d:f8:c2:0a:00:fb: 98:20:55:76:9d:76:78:25:8f:3d:a9:c7:0b:ad:31: 30:9e:8c:02:c1:2b:ae:eb:ee:59:ca:d3:e7:4a:18: 2b:6d:62:03:cb:af:80:74:90:91:3b:bc:46:bc:d0: 81:0d:7c:44:5c:a3:d6:ad:bf:3f:14:bc:4b:7d:82: e9:e2:ff:11:ea:fa:58:36:c4:76:e4:01:74:27:ef: f4:b8:d7:7e:e3:0d:35:f2:31:a1:c6:41:c8:fa:7a: 65:d6:f0:6f:88:0b:0b:f0:73:f4:1e:f3:87:d5:9d: ce:33:00:ff:e3:87:88:a4:fb:4c:84:97:04:3e:6b: 5b:5e:b5:28:6a:f7:55:f0:22:fa:d1:86:08:ea:ca: 1c:37:59:99:d4:0a:5f:81:24:51:5c:6e:0b:18:12: ad:ad:bc:99:d1:6e:ba:7c:82:b7:9e:97:f9:eb:5f: 66:8e:48:91:57:fd:37:2a:49:e5:97:ed:d7:c5:e6: f7:24:37:92:d7:f1:2c:70:50:6c:c7:10:7b:f6:1d: e3:d3:a5:0b:e7:b7:c3:f4:66:e1:fb:a9:94:9f:57: a4:47:6f:28:37:cf:76:71:af:a8:15:f2:7f:91:21: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.94.0/24 IPv6: 2001:7f8:b6::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41693 59964 Signature Algorithm: sha256WithRSAEncryption b1:75:56:3c:aa:e3:34:22:28:90:f9:de:20:14:0d:a2:e6:62: eb:23:fc:a6:75:af:a3:b0:0d:c2:51:3d:0e:c1:90:70:d8:d3: a1:52:91:f4:61:b7:48:9e:1b:6d:27:7c:72:9c:75:3f:e4:9a: f6:07:c4:79:51:99:9e:ce:a7:8b:1c:12:98:6f:0b:e1:2a:f6: 9f:7f:81:f8:b0:6f:3d:3a:93:f3:65:0d:aa:3e:1b:23:a6:46: 42:ce:85:67:02:58:4b:1d:8e:dd:79:4f:0a:53:e4:58:f8:02: 5e:4c:03:df:b7:fc:ce:8f:6c:8c:9e:23:8e:a8:73:dd:0c:e3: b4:7b:98:73:ce:4a:22:97:fa:e3:c7:20:1a:47:8c:c3:b9:7a: 60:b0:2e:be:2f:b0:4e:bf:3a:72:76:11:47:d2:f7:b9:ba:2c: 47:84:f7:89:76:33:ec:15:1b:24:7e:94:46:4a:e7:a6:ef:68: 88:ca:49:71:20:53:d3:bb:96:0a:72:45:50:e4:3f:53:ff:f2: 5e:9d:af:57:2a:cc:e1:83:7d:07:23:e7:66:41:3f:f3:72:2d: 91:90:2c:2f:1c:50:bc:79:5e:a0:33:00:cb:8e:52:3a:b4:d0: 31:f8:2a:e4:41:eb:96:eb:e8:2e:11:3d:cb:9f:69:0c:e5:f0: 4e:d9:a6:6b -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt8f/PN8/7OrFoQ0wn4wnqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTgzNTQ4NjE5NzM3MjhjZTJiZTUwNWY3MjcwYTQzNjRkOTRlNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yiTlbxE5iOFWxarD0PfDnqXm7R5 NT49+MIKAPuYIFV2nXZ4JY89qccLrTEwnowCwSuu6+5ZytPnShgrbWIDy6+AdJCR O7xGvNCBDXxEXKPWrb8/FLxLfYLp4v8R6vpYNsR25AF0J+/0uNd+4w018jGhxkHI +npl1vBviAsL8HP0HvOH1Z3OMwD/44eIpPtMhJcEPmtbXrUoavdV8CL60YYI6soc N1mZ1ApfgSRRXG4LGBKtrbyZ0W66fIK3npf5619mjkiRV/03Kknll+3Xxeb3JDeS 1/EscFBsxxB79h3j06UL57fD9Gbh+6mUn1ekR28oN892ca+oFfJ/kSEA+wIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFCmDVIYZc3KM4r5QX3JwpDZNlOaRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2E2ZGNm MS05N2Y0LTQ1YWYtYmI0OC0zZGI2ZjA1NzBkNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvYTZkY2Yx LTk3ZjQtNDVhZi1iYjQ4LTNkYjZmMDU3MGQ0OC8xL0tZTlVoaGx6Y296aXZsQmZj bkNrTmsyVTVwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAuQFeMA8EAgACMAkDBwAgAQf4ALYwHwYIKwYB BQUHAQgBAf8EEDAOoAwwCgIDAKLdAgMA6jwwDQYJKoZIhvcNAQELBQADggEBALF1 Vjyq4zQiKJD53iAUDaLmYusj/KZ1r6OwDcJRPQ7BkHDY06FSkfRht0ieG20nfHKc dT/kmvYHxHlRmZ7Op4scEphvC+Eq9p9/gfiwbz06k/NlDao+GyOmRkLOhWcCWEsd jt15TwpT5Fj4Al5MA9+3/M6PbIyeI46oc90M47R7mHPOSiKX+uPHIBpHjMO5emCw Lr4vsE6/OnJ2EUfS97m6LEeE94l2M+wVGyR+lEZK56bvaIjKSXEgU9O7lgpyRVDk P1P/8l6dr1cqzOGDfQcj52ZBP/NyLZGQLC8cULx5XqAzAMuOUjq00DH4KuRB65br 6C4RPcufaQzl8E7Zpms= -----END CERTIFICATE-----Generated at Sat Jan 10 06:51:16 2026 by rpki-client