This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer (raw, json) Hash identifier: sXba5N3DYcm38rxtCUtgCAUvXcoh76cpaNBX6VUWy+A= Subject key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA932BDF295A3741DA679AFA8AE73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8671 IP: 212.4.0.0/19 IP: 212.177.0.0/16 IP: 2a02:2ae0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a9:32:bd:f2:95:a3:74:1d:a6:79:af:a8:ae:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a7df35d41b4062c10fc118189de47da27096db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:b1:e6:6b:1a:e6:9c:e8:f2:ee:ea:8f:c5: 2c:76:18:c7:f2:65:1d:a7:d4:56:97:ef:dd:eb:4a: 67:7e:cd:a7:67:ed:fd:30:d3:b8:b8:ed:9b:31:6e: 4b:43:af:24:08:c9:e0:a1:1c:ab:32:14:0e:bb:7c: f0:53:5d:d3:80:f3:8d:cb:bc:b7:6f:ef:40:6f:26: 5a:8e:86:4c:c3:d3:95:85:ac:e2:10:89:38:28:e5: cd:8b:f0:91:f4:15:c5:e4:9e:e0:1f:9d:4e:d5:22: 58:03:5b:f2:cd:66:29:7a:94:41:cb:58:b7:93:01: f9:2a:2c:a5:47:54:d5:04:2d:ca:6d:d7:5e:0c:4a: 3f:db:25:30:78:1f:a0:96:9d:f8:66:75:03:93:d1: 46:a8:e3:e2:be:38:4b:70:93:a8:30:7c:d2:7a:7a: ae:08:65:f9:8b:39:a5:36:cb:ca:c9:f5:3f:7a:64: fe:3d:86:7e:11:a0:98:1d:8e:d2:35:5b:fa:05:4b: de:f8:f9:bd:87:72:ba:e6:ad:18:af:19:54:19:cc: e9:ce:cf:e5:89:2d:ee:d2:c1:87:4e:17:cb:66:b7: 45:ec:57:1a:73:e3:17:74:e4:32:e1:ed:e8:3e:47: f3:16:7e:4f:33:9d:33:e7:c5:6f:a0:68:29:70:d2: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.4.0.0/19 212.177.0.0/16 IPv6: 2a02:2ae0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8671 Signature Algorithm: sha256WithRSAEncryption 0a:9d:67:ad:85:1f:f0:4a:a4:e8:5a:9f:db:0b:99:7c:d8:d1: 63:73:fd:42:3a:86:5a:07:24:da:1a:d3:24:c9:09:93:cb:aa: 57:f7:c6:c8:55:68:7f:43:b5:cf:f0:aa:6e:26:96:05:60:37: 35:c4:a4:56:02:e6:63:72:a7:e2:da:d8:11:79:0b:eb:8c:ae: 75:75:75:b6:1c:e0:b9:3e:83:79:d4:2d:ff:41:38:3f:6a:c1: 89:51:85:0a:a3:1e:3f:eb:21:dd:58:ff:da:36:d3:ad:52:2f: b3:09:27:f9:9b:a4:ca:82:d4:a3:c8:a6:03:83:ac:37:cd:b5: df:26:51:41:a9:5e:f8:1c:cb:52:2b:19:4b:4c:95:68:fa:9e: fc:97:87:61:54:f4:23:a2:84:cd:2c:d1:0d:e1:7b:cb:bb:a1: 56:73:a9:22:66:d1:4b:cf:83:0e:d1:9d:2c:77:95:f3:2c:1e: 08:f1:b8:7a:32:ac:62:7a:fa:50:eb:13:11:38:8c:39:aa:b9: 11:2e:2b:b1:cc:73:7e:79:c6:11:35:2e:7a:20:75:58:d3:ff: fb:f8:e2:51:78:65:40:e5:24:66:05:40:25:fc:61:49:fb:42: 8d:59:c3:d6:d7:34:38:c5:ee:02:2e:58:47:77:4a:68:55:0d: a5:13:cc:0b -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt9yqkyvfKVo3QdpnmvqK5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTdkZjM1ZDQxYjQwNjJjMTBmYzExODE4OWRlNDdkYTI3MDk2ZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVKx5msa5pzo8u7qj8UsdhjH8mUd p9RWl+/d60pnfs2nZ+39MNO4uO2bMW5LQ68kCMngoRyrMhQOu3zwU13TgPONy7y3 b+9AbyZajoZMw9OVhaziEIk4KOXNi/CR9BXF5J7gH51O1SJYA1vyzWYpepRBy1i3 kwH5KiylR1TVBC3KbddeDEo/2yUweB+glp34ZnUDk9FGqOPivjhLcJOoMHzSenqu CGX5izmlNsvKyfU/emT+PYZ+EaCYHY7SNVv6BUve+Pm9h3K65q0YrxlUGczpzs/l iS3u0sGHThfLZrdF7Fcac+MXdOQy4e3oPkfzFn5PM50z58VvoGgpcNJcgQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFCp9811BtAYsEPwRgYneR9onCW24MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2VkMzM0 Yy1kNzk3LTQyNWEtOTNhMS1hOWNjODlkNDRiMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvZWQzMzRj LWQ3OTctNDI1YS05M2ExLWE5Y2M4OWQ0NGIyNS8xL0tuM3pYVUcwQml3UV9CR0Jp ZDVIMmljSmJiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjARBAIAATALAwQF1AQAAwMA1LEwDQQCAAIwBwMFAyoCKuAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICId8wDQYJKoZIhvcNAQELBQADggEBAAqdZ62F H/BKpOhan9sLmXzY0WNz/UI6hloHJNoa0yTJCZPLqlf3xshVaH9Dtc/wqm4mlgVg NzXEpFYC5mNyp+La2BF5C+uMrnV1dbYc4Lk+g3nULf9BOD9qwYlRhQqjHj/rId1Y /9o2061SL7MJJ/mbpMqC1KPIpgODrDfNtd8mUUGpXvgcy1IrGUtMlWj6nvyXh2FU 9COihM0s0Q3he8u7oVZzqSJm0UvPgw7RnSx3lfMsHgjxuHoyrGJ6+lDrExE4jDmq uREuK7HMc355xhE1LnogdVjT//v44lF4ZUDlJGYFQCX8YUn7Qo1Zw9bXNDjF7gIu WEd3SmhVDaUTzAs= -----END CERTIFICATE-----Generated at Fri Jan 2 13:09:19 2026 by rpki-client