This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer File: KhQFaUht0XjbWDoKHklt8iMYXTU.cer (raw, json) Hash identifier: G5e+S0HD3Iec+nPee+xjR6fu1wLCF3lSmcAF+lMzjso= Subject key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CAAAC2596796EC27D3BD521435EC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47440 IP: 45.141.219.0/24 IP: 93.174.48.0/21 IP: 185.31.132.0/24 IP: 185.31.134.0/23 IP: 195.47.192.0/24 IP: 2a04:4a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:aa:ac:25:96:79:6e:c2:7d:3b:d5:21:43:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a140569486dd178db583a0a1e496df223185d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:f5:fa:0e:88:33:68:29:12:92:11:2b:55: c1:10:64:ec:2b:ff:a5:f4:22:43:b4:d3:16:ce:4b: 34:72:f2:cb:a7:a7:77:50:27:8d:35:40:37:ab:10: ba:5a:9e:32:7d:a8:e3:36:02:24:4b:51:16:8b:e4: 0c:93:3b:cc:8b:60:c9:13:3e:7c:60:fc:9d:d2:db: 85:22:fe:c5:36:0e:c4:b7:ca:5a:98:98:9a:56:3a: bb:ad:c4:d5:2b:d1:45:94:5e:af:dc:21:7e:cf:20: d8:dc:17:ef:fe:1f:9b:08:7f:b9:25:9e:6c:6f:9b: 63:8e:fd:39:69:82:a1:f5:e4:a7:47:73:ac:50:6d: 69:7d:2c:1a:f7:b1:3e:18:23:e4:50:19:7c:e8:23: 7a:e6:c6:42:e3:7d:84:70:49:c1:29:4c:cc:e2:de: ee:40:30:76:52:e7:27:69:8e:a2:d6:07:dd:98:a8: dc:24:e6:3a:29:f2:a4:f3:b8:d4:f7:8c:a7:c1:20: 04:c1:43:c3:08:50:a8:44:b2:7c:38:41:ee:4f:f7: e7:4d:80:08:3c:f6:b8:9c:99:b2:dc:3b:d6:f3:cb: aa:ea:43:a3:1e:ba:0c:64:2d:4a:24:f0:5d:00:33: 7e:0a:51:e7:47:37:2f:53:83:38:de:84:81:02:bd: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.219.0/24 93.174.48.0/21 185.31.132.0/24 185.31.134.0/23 195.47.192.0/24 IPv6: 2a04:4a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47440 Signature Algorithm: sha256WithRSAEncryption 8c:11:ca:41:66:5d:ae:b1:44:06:f9:10:a5:03:a0:97:70:1d: 8e:c8:f5:8a:f5:02:3f:35:4e:8d:4f:d9:a4:56:d8:76:fd:2a: 46:2a:48:af:d9:bd:e5:3d:73:2a:d2:27:fe:f5:d0:a2:b5:95: 8d:4f:a7:09:71:8c:5c:5f:58:da:0e:85:fa:e9:3c:a2:8d:5c: b3:f0:8e:e7:0c:95:13:1d:42:18:c3:2d:52:94:b7:7d:b3:02: 67:26:f0:63:ca:cd:df:7b:73:fd:76:87:0c:1a:6b:d5:c2:a6: fd:83:3c:14:1b:eb:92:96:81:61:dc:d9:01:14:30:d5:ff:e2: 06:13:56:25:2f:11:89:a6:24:de:6c:24:89:8e:cc:ba:61:6e: ff:35:e0:5f:7a:14:30:e3:dd:57:dc:de:e9:a3:ea:ee:9d:86: 51:d5:a6:8f:9b:c4:a9:1e:61:41:cb:a4:bb:38:4b:71:9f:24: af:60:01:e9:2f:c0:e9:fa:a7:84:5e:9d:23:c3:9a:27:84:3f: 4e:b5:04:37:ce:80:45:b4:cf:84:3e:a1:e0:2b:45:4d:f1:d1: 73:2d:95:b9:90:b1:ce:15:7c:a3:4b:ed:1c:a8:93:8a:d4:49: 9f:0c:af:eb:13:09:e8:32:98:b5:76:b7:46:6c:c5:59:b9:32: 4f:d0:fe:dc -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt9XKqsJZZ5bsJ9O9UhQ17AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTE0MDU2OTQ4NmRkMTc4ZGI1ODNhMGExZTQ5NmRmMjIzMTg1ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRn1+g6IM2gpEpIRK1XBEGTsK/+l 9CJDtNMWzks0cvLLp6d3UCeNNUA3qxC6Wp4yfajjNgIkS1EWi+QMkzvMi2DJEz58 YPyd0tuFIv7FNg7Et8pamJiaVjq7rcTVK9FFlF6v3CF+zyDY3Bfv/h+bCH+5JZ5s b5tjjv05aYKh9eSnR3OsUG1pfSwa97E+GCPkUBl86CN65sZC432EcEnBKUzM4t7u QDB2UucnaY6i1gfdmKjcJOY6KfKk87jU94ynwSAEwUPDCFCoRLJ8OEHuT/fnTYAI PPa4nJmy3DvW88uq6kOjHroMZC1KJPBdADN+ClHnRzcvU4M43oSBAr2yYQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFCoUBWlIbdF421g6Ch5JbfIjGF01MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzU2OTU3 NC00NDFlLTQxNWItODAzZi01NGJkNjQ5YjQ4NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvNTY5NTc0 LTQ0MWUtNDE1Yi04MDNmLTU0YmQ2NDliNDg1Mi8xL0toUUZhVWh0MFhqYldEb0tI a2x0OGlNWVhUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQALY3bAwQDXa4wAwQAuR+EAwQBuR+GAwQAwy/A MA0EAgACMAcDBQMqBEoAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC5UDANBgkq hkiG9w0BAQsFAAOCAQEAjBHKQWZdrrFEBvkQpQOgl3Adjsj1ivUCPzVOjU/ZpFbY dv0qRipIr9m95T1zKtIn/vXQorWVjU+nCXGMXF9Y2g6F+uk8oo1cs/CO5wyVEx1C GMMtUpS3fbMCZybwY8rN33tz/XaHDBpr1cKm/YM8FBvrkpaBYdzZARQw1f/iBhNW JS8RiaYk3mwkiY7MumFu/zXgX3oUMOPdV9ze6aPq7p2GUdWmj5vEqR5hQcukuzhL cZ8kr2AB6S/A6fqnhF6dI8OaJ4Q/TrUEN86ARbTPhD6h4CtFTfHRcy2VuZCxzhV8 o0vtHKiTitRJnwyv6xMJ6DKYtXa3RmzFWbkyT9D+3A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:15 2026 by rpki-client