This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer File: KfUkAji4KPFuYCKeJjNQPwSEZZk.cer (raw, json) Hash identifier: fSNzXK+JDNa4rvZMXCIp9LNSYDBJlQl3/xcIzHY6fM8= Subject key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DFC0BE19628F2DF209243EA529E59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61407 IP: 185.29.211.0/24 IP: 2a07:5240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fc:0b:e1:96:28:f2:df:20:92:43:ea:52:9e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29f5240238b828f16e60229e2633503f04846599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:85:2b:82:49:87:89:b4:f1:d5:b3:c2:4d: a8:b9:c3:d1:b3:a2:f4:74:ac:de:23:d6:53:23:09: 28:0e:3d:f5:ac:f3:24:f7:32:26:9d:8e:e1:69:b9: f7:76:8f:8f:81:e2:c1:76:b7:fc:37:c0:0f:a7:fa: f3:48:7c:5e:f5:33:c2:35:f1:8e:48:84:16:90:83: 71:87:81:c7:7b:01:75:c5:93:c5:cb:05:c4:9d:db: 9e:3d:6b:d2:f6:da:21:34:1b:47:fb:f8:f1:d1:c3: ad:c7:18:4d:26:51:39:fe:d9:9f:3b:6b:f0:2e:cc: 8d:7b:74:1a:ad:b4:42:de:07:ab:ed:ff:30:c5:5c: 8e:52:ed:18:8b:7f:b2:ab:58:69:5b:c1:b2:fb:b3: c9:a1:1b:3b:81:c0:7a:5b:ee:57:62:0e:66:b9:f1: 1b:0c:7b:3f:a0:9b:ac:c1:1a:3b:c1:cf:47:2e:ae: ed:6f:33:ee:98:60:d6:97:b2:37:83:f0:e5:2d:e4: 38:86:ef:70:68:d4:7d:fb:5c:2b:da:8d:aa:df:59: cc:7e:f1:55:f6:77:7b:6f:99:72:8c:ec:8d:9b:04: bc:b8:1b:0f:e0:90:2c:53:53:75:18:a2:b4:c3:26: 33:1b:40:c9:2a:59:a1:55:05:81:0f:62:7e:1c:a9: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.211.0/24 IPv6: 2a07:5240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61407 Signature Algorithm: sha256WithRSAEncryption 82:8b:84:69:d4:7c:ef:cc:a7:e9:c6:f0:83:54:53:3a:d9:72: 60:61:5c:8e:88:9f:d6:fa:90:36:7e:30:55:19:9f:23:9a:67: fc:31:ae:1c:78:bb:34:47:8c:11:32:c7:89:84:5b:cf:45:51: 06:16:22:f1:08:32:fb:d3:57:f3:09:07:a2:5f:2e:f9:06:02: de:b3:2c:ef:fd:7e:af:49:f4:8b:62:9a:88:3c:0d:2f:a9:f4: a7:6b:be:69:22:c1:87:0d:9b:39:8a:e3:da:47:cb:3b:2a:4f: 91:9e:db:f7:7f:b9:c2:69:c2:e2:e3:90:23:94:f1:01:8f:e9: db:48:0f:e8:76:54:f7:07:d3:c0:0d:6d:e3:3b:8e:9d:e1:87: 00:ea:42:8a:a8:eb:b3:31:95:3b:0b:4c:00:f9:9d:17:e4:ae: 97:ed:be:21:97:58:d8:93:c5:62:5b:95:2b:ae:81:b1:73:84: 61:69:fb:1c:56:f2:45:4b:00:28:77:24:da:64:b6:a3:ea:2c: 32:64:54:44:19:d9:3e:fb:68:54:4e:5f:95:ae:c8:05:c8:3a: 51:2b:a7:fd:53:42:f0:b1:1d:24:2f:bd:d8:d5:84:97:07:16: 21:8a:99:d7:99:d2:0f:81:2f:e3:7d:aa:c7:8b:4d:44:72:4f: 16:21:9a:f5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ffwL4ZYo8t8gkkPqUp5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWY1MjQwMjM4YjgyOGYxNmU2MDIyOWUyNjMzNTAzZjA0ODQ2NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyKFK4JJh4m08dWzwk2oucPRs6L0 dKzeI9ZTIwkoDj31rPMk9zImnY7habn3do+PgeLBdrf8N8APp/rzSHxe9TPCNfGO SIQWkINxh4HHewF1xZPFywXEnduePWvS9tohNBtH+/jx0cOtxxhNJlE5/tmfO2vw LsyNe3QarbRC3ger7f8wxVyOUu0Yi3+yq1hpW8Gy+7PJoRs7gcB6W+5XYg5mufEb DHs/oJuswRo7wc9HLq7tbzPumGDWl7I3g/DlLeQ4hu9waNR9+1wr2o2q31nMfvFV 9nd7b5lyjOyNmwS8uBsP4JAsU1N1GKK0wyYzG0DJKlmhVQWBD2J+HKlS1wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCn1JAI4uCjxbmAiniYzUD8EhGWZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzA2MTRh Ni1kMDFjLTRmZjItYTk5My03MjQ2NDU3ZmQyYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMDYxNGE2 LWQwMWMtNGZmMi1hOTkzLTcyNDY0NTdmZDJiMy8xL0tmVWtBamk0S1BGdVlDS2VK ak5RUHdTRVpaay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuR3TMA0EAgACMAcDBQMqB1JAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDv3zANBgkqhkiG9w0BAQsFAAOCAQEAgouEadR878yn 6cbwg1RTOtlyYGFcjoif1vqQNn4wVRmfI5pn/DGuHHi7NEeMETLHiYRbz0VRBhYi 8Qgy+9NX8wkHol8u+QYC3rMs7/1+r0n0i2KaiDwNL6n0p2u+aSLBhw2bOYrj2kfL OypPkZ7b93+5wmnC4uOQI5TxAY/p20gP6HZU9wfTwA1t4zuOneGHAOpCiqjrszGV OwtMAPmdF+Sul+2+IZdY2JPFYluVK66BsXOEYWn7HFbyRUsAKHck2mS2o+osMmRU RBnZPvtoVE5fla7IBcg6USun/VNC8LEdJC+92NWElwcWIYqZ15nSD4Ev432qx4tN RHJPFiGa9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:03 2026 by rpki-client