This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer (raw, json) Hash identifier: 1ZfAtOFIJNqfFsBSc6RHjc6a3J1xS7wAXrv68WFzGkY= Subject key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2DA54D1BD4075BA864A6A6A210896 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199526 IP: 91.246.14.0/24 IP: 194.176.108.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:da:54:d1:bd:40:75:ba:86:4a:6a:6a:21:08:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:eb:72:fd:22:27:d4:3e:eb:5d:e5:41:f8: 1b:bc:c9:6d:e5:40:90:53:9c:fa:29:2b:29:03:ad: f8:c7:3a:2c:f4:54:3b:ea:a2:2e:73:5e:7d:f5:97: f1:aa:f4:44:e1:78:47:f3:81:74:40:73:e6:b3:9a: bd:a4:bc:16:80:bb:e8:63:e3:62:7d:11:89:3d:43: 55:54:cb:38:81:5d:05:a1:7c:4d:2b:48:9e:49:17: 2c:44:2a:a4:8a:0f:fd:36:01:e9:19:9b:a1:4e:0d: 15:90:83:c9:a2:85:a1:6d:9a:84:f5:30:76:38:96: d1:39:5f:04:cf:57:86:ca:42:ee:81:b2:08:31:c5: 1f:fd:f2:e5:9f:c6:b0:e1:96:5b:ae:aa:ef:48:57: c8:1a:88:d6:df:c1:45:8d:6e:b3:3e:dd:18:90:72: 56:9b:39:a4:45:05:6e:89:71:20:f8:95:da:64:f1: 3b:39:c8:65:ba:3d:a3:c3:0f:71:d1:22:4c:cd:a4: 1b:a7:a8:5a:c8:03:a8:f3:17:2f:0c:21:d8:94:17: bb:82:29:8f:da:e5:8e:86:4f:6c:af:e4:dd:7e:7d: 16:05:59:03:9a:94:76:f0:ae:a5:d5:5e:0e:a5:a9: 0d:19:f4:bf:31:8c:fb:b1:9f:0d:e7:03:81:da:59: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.14.0/24 194.176.108.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199526 Signature Algorithm: sha256WithRSAEncryption a2:90:2c:4c:80:4b:b5:3b:88:f9:84:a0:8d:c6:18:72:d8:c0: 76:a3:df:dc:43:3a:18:d3:da:88:41:20:5b:81:fd:3c:c0:34: e2:6f:11:e5:ef:97:e9:8d:31:75:15:cf:d3:de:7f:1f:14:0e: c4:ab:fc:06:16:f4:20:38:1a:3d:e5:ab:17:70:80:f2:34:6a: 37:52:1c:79:59:bb:f6:f6:06:4f:f6:ce:4b:0d:cb:c6:f4:0d: 24:08:83:20:c7:73:2f:47:17:85:7f:ef:22:8e:5f:42:a2:6d: 20:b0:d4:1e:5e:60:b7:37:09:8f:0f:c9:f7:54:95:38:f7:f3: 9b:ef:b4:6e:5b:f7:80:3f:37:f1:f4:22:a8:16:7b:0f:97:76: 66:ea:fb:da:2c:af:43:c1:13:a8:21:ae:32:d1:f4:cb:bf:32: d6:87:b5:ea:5e:3c:4a:80:6f:b3:59:8c:05:cd:ad:2b:be:35: 79:ef:dd:4e:30:a7:38:85:b8:12:ce:a3:b4:12:e6:c3:f6:8e: ce:48:04:52:1d:88:52:43:d2:db:ad:bc:16:37:2d:bb:d3:56: a1:8c:c8:b1:41:9b:f8:ef:2e:b2:72:3d:f4:70:1e:31:4e:1d: 86:1b:c2:af:64:bd:5f:91:0e:a5:d4:02:3a:3d:51:8d:88:62: 85:25:c2:88 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4otpU0b1AdbqGSmpqIQiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWQ0NTdiMTAyNWU0YTZhNDVjNmM0YjQ1ZDZlMjM0YWE1MThjOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygfrcv0iJ9Q+613lQfgbvMlt5UCQ U5z6KSspA634xzos9FQ76qIuc1599ZfxqvRE4XhH84F0QHPms5q9pLwWgLvoY+Ni fRGJPUNVVMs4gV0FoXxNK0ieSRcsRCqkig/9NgHpGZuhTg0VkIPJooWhbZqE9TB2 OJbROV8Ez1eGykLugbIIMcUf/fLln8aw4ZZbrqrvSFfIGojW38FFjW6zPt0YkHJW mzmkRQVuiXEg+JXaZPE7Ochluj2jww9x0SJMzaQbp6hayAOo8xcvDCHYlBe7gimP 2uWOhk9sr+Tdfn0WBVkDmpR28K6l1V4OpakNGfS/MYz7sZ8N5wOB2llTrwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFCnUV7ECXkpqRcbEtF1uI0qlGMixMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzhlODdm ZS1jOWQ2LTQ0MjQtYmQ5OC03YTA2MTlmYWFmN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOGU4N2Zl LWM5ZDYtNDQyNC1iZDk4LTdhMDYxOWZhYWY3ZC8xL0tkUlhzUUplU21wRnhzUzBY VzRqU3FVWXlMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW/YOAwQAwrBsMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMLZjANBgkqhkiG9w0BAQsFAAOCAQEAopAsTIBLtTuI+YSgjcYYctjA dqPf3EM6GNPaiEEgW4H9PMA04m8R5e+X6Y0xdRXP095/HxQOxKv8Bhb0IDgaPeWr F3CA8jRqN1IceVm79vYGT/bOSw3LxvQNJAiDIMdzL0cXhX/vIo5fQqJtILDUHl5g tzcJjw/J91SVOPfzm++0blv3gD838fQiqBZ7D5d2Zur72iyvQ8ETqCGuMtH0y78y 1oe16l48SoBvs1mMBc2tK741ee/dTjCnOIW4Es6jtBLmw/aOzkgEUh2IUkPS2628 Fjctu9NWoYzIsUGb+O8usnI99HAeMU4dhhvCr2S9X5EOpdQCOj1RjYhihSXCiA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:14 2026 by rpki-client