This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer File: KknhDg5wlLReuhwW-WN-HOxnvcY.cer (raw, json) Hash identifier: twq9gdpwRHnKWHLDOHufbAOL4xIOLbuwAkQEj/yOFQY= Subject key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBE378202D5F94577292E18B26CFFDD5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 20:34:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202274 IP: 2a02:f440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:be:37:82:02:d5:f9:45:77:29:2e:18:b2:6c:ff:dd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 20:34:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:bc:80:82:d4:e1:71:3f:de:82:be:72:04: 26:f2:9b:b9:87:67:a9:58:b8:62:ab:ed:cc:1c:1f: 74:52:a8:e5:ad:d9:2d:da:0a:2d:2c:dc:c2:c9:89: 03:92:07:32:ce:b1:02:9f:a5:f7:19:92:db:37:d1: d4:1f:74:63:82:50:a5:bc:5b:5a:2c:59:cd:41:7a: be:2a:63:13:72:1e:eb:32:11:b4:4d:6a:75:73:f0: dc:3c:d3:47:31:a5:69:ed:3d:05:a8:4e:24:93:e1: 41:4b:35:81:d4:41:ed:dc:31:41:89:50:1a:d6:56: f3:22:67:b9:48:45:8b:8e:3c:49:d4:1a:35:39:75: a1:a1:42:2c:41:2b:a8:75:c4:f7:cb:cb:ac:7b:25: 83:8d:1e:35:53:81:41:ea:29:a7:43:a8:31:82:b5: 94:50:3a:23:a0:9f:7c:88:58:bc:8e:bc:33:40:c8: 90:05:6f:07:ec:35:88:7d:cf:16:9c:e9:40:d6:7b: 0b:a5:cf:e3:32:d0:eb:22:7e:33:a9:a3:d3:18:1d: 0e:59:56:c8:7d:1f:6d:ba:47:83:31:9a:43:4d:59: b5:f7:d3:f4:8b:ba:b9:5a:90:f3:c4:ef:2a:ec:3e: 84:1d:1d:6e:2b:b1:7a:cc:e9:b8:6b:4d:1c:a4:bc: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:f440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202274 Signature Algorithm: sha256WithRSAEncryption a4:a5:67:98:0b:53:8f:85:34:dc:92:c9:14:e1:39:8a:a7:5b: 7d:e0:30:d0:74:97:8a:cf:4d:72:91:86:7b:1e:83:0d:c1:19: ce:7b:43:d4:7d:b6:dc:dd:86:50:21:15:ca:1c:98:6a:3f:77: 2d:74:f0:6e:a8:8a:81:21:9e:9f:56:3d:ed:ce:bb:01:60:9a: da:e7:e1:27:3e:d2:e9:4e:0b:75:05:bc:e4:38:10:9e:36:eb: e2:b4:33:86:a1:d0:c7:9e:ab:ef:23:11:69:93:ca:5f:1b:02: fa:96:fb:2c:2f:d7:5d:d1:43:c8:60:ec:95:95:6e:d9:e8:31: cf:65:3b:11:f6:06:8a:95:a0:bf:ce:58:96:3c:95:56:da:e4: 17:a8:f4:59:1c:51:6c:e1:59:3f:b2:5a:04:7e:38:55:3f:85: 88:77:84:16:b8:e9:09:ae:e1:00:e3:8a:ae:88:fa:81:15:5c: 99:69:38:b0:53:d2:31:9a:85:44:0a:8e:fa:14:f3:b7:e4:51: 05:82:6f:02:6a:84:39:19:6d:e6:0c:9e:b0:6c:d7:0b:ef:3a: 6d:0e:08:c8:fe:7f:f4:35:68:3c:56:1a:64:55:14:5c:71:b9: 0f:a2:10:91:6b:b6:32:1c:45:99:0c:d0:ce:43:d3:b7:7d:ce: ab:7c:db:bd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZu+N4IC1flFdykuGLJs/91eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MjAzNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTQ5ZTEwZTBlNzA5NGI0NWViYTFjMTZmOTYzN2UxY2VjNjdiZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2O8gILU4XE/3oK+cgQm8pu5h2ep WLhiq+3MHB90Uqjlrdkt2gotLNzCyYkDkgcyzrECn6X3GZLbN9HUH3RjglClvFta LFnNQXq+KmMTch7rMhG0TWp1c/DcPNNHMaVp7T0FqE4kk+FBSzWB1EHt3DFBiVAa 1lbzIme5SEWLjjxJ1Bo1OXWhoUIsQSuodcT3y8useyWDjR41U4FB6imnQ6gxgrWU UDojoJ98iFi8jrwzQMiQBW8H7DWIfc8WnOlA1nsLpc/jMtDrIn4zqaPTGB0OWVbI fR9tukeDMZpDTVm199P0i7q5WpDzxO8q7D6EHR1uK7F6zOm4a00cpLyPcwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFCpJ4Q4OcJS0XrocFvljfhzsZ73GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2MwYmU1 Zi1mODg3LTQ0MGQtYjFlZC0yZDM4YjM5M2IxMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvYzBiZTVm LWY4ODctNDQwZC1iMWVkLTJkMzhiMzkzYjEyMy8xL0trbmhEZzV3bExSZXVod1ct V04tSE94bnZjWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgL0QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDFiIwDQYJKoZIhvcNAQELBQADggEBAKSlZ5gLU4+FNNySyRThOYqnW33gMNB0 l4rPTXKRhnsegw3BGc57Q9R9ttzdhlAhFcocmGo/dy108G6oioEhnp9WPe3OuwFg mtrn4Sc+0ulOC3UFvOQ4EJ426+K0M4ah0Meeq+8jEWmTyl8bAvqW+ywv113RQ8hg 7JWVbtnoMc9lOxH2BoqVoL/OWJY8lVba5Beo9FkcUWzhWT+yWgR+OFU/hYh3hBa4 6Qmu4QDjiq6I+oEVXJlpOLBT0jGahUQKjvoU87fkUQWCbwJqhDkZbeYMnrBs1wvv Om0OCMj+f/Q1aDxWGmRVFFxxuQ+iEJFrtjIcRZkM0M5D07d9zqt8270= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:39 2026 by rpki-client