This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer File: KoC1_zdQaKdJAhDrxsryKCLKDQo.cer (raw, json) Hash identifier: av+EPf5oqB1Av5ZI/X0rFUQdkVTS0ROXyZHDyrnfJGw= Subject key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA57309FF340DA1184D47FB37A468EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44231 IP: 91.199.65.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:73:09:ff:34:0d:a1:18:4d:47:fb:37:a4:68:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a3:eb:5d:7b:be:40:a4:64:d1:49:b4:e2:64: ba:3e:dd:13:98:eb:34:4e:08:a0:3d:1f:4c:62:01: bf:23:c6:20:65:95:0e:73:c5:36:bf:4a:c3:86:06: d7:ed:ff:51:4a:22:b2:4b:b5:57:7b:e4:6b:e2:1e: e8:be:f0:16:ba:e7:e9:88:0a:74:49:e2:46:d0:91: fa:0f:eb:56:2d:e7:91:dd:e0:43:f4:d4:32:b1:a3: bf:92:d9:30:2a:45:36:29:63:1a:8e:86:53:c7:56: 04:00:2d:f2:90:68:9d:a6:cb:ee:91:75:3d:ba:b1: 86:c6:6a:aa:03:62:44:ee:e4:6e:d6:95:5f:85:a1: 99:56:02:fa:8f:21:e8:5e:db:74:26:8e:48:33:94: 05:f8:fd:44:34:fe:b0:7a:ef:43:f3:b2:17:b6:a2: 9b:90:97:b3:21:5e:5a:64:5c:92:8c:68:60:13:98: f5:4f:5e:b3:f1:5b:d7:55:74:1b:73:c5:81:33:05: 9c:c1:c9:7e:82:05:bf:b4:b8:19:e5:79:80:74:61: d9:bc:ec:a8:c7:23:82:97:cd:64:b6:2b:c5:b2:40: 9c:68:b9:22:9d:74:a0:ce:dc:fc:35:30:85:fc:77: a0:17:d5:a0:c3:e0:c3:80:e6:9b:f7:aa:4b:9b:e5: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.65.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44231 Signature Algorithm: sha256WithRSAEncryption 5f:df:48:b9:89:2b:f9:35:4c:72:e7:70:67:bc:3e:d6:31:b4: 69:86:91:10:20:42:1d:68:19:c5:2d:e0:3a:b9:94:52:94:30: ea:2b:78:a5:92:08:8f:3f:5a:ca:3e:8b:3d:98:d3:79:d4:27: f7:ac:85:de:6f:17:09:bf:f0:3c:25:1e:01:ff:aa:9a:49:c3: 75:0a:fa:24:39:64:22:b6:32:4d:67:84:9b:df:98:31:f1:06: ea:9e:b2:6b:23:2e:42:3a:26:78:1e:f0:64:a3:c6:92:7e:b5: 08:ed:e5:af:a7:1c:25:31:66:8e:94:b2:bd:41:c0:f5:ed:b2: 77:71:cd:d7:1c:9e:f8:81:e3:a6:87:e4:5b:36:22:c1:8e:ef: 84:99:b6:aa:06:fd:60:7e:6e:74:1f:e6:a4:82:94:b4:89:a5: 85:a0:6e:99:f0:68:ff:77:a5:5f:b1:26:24:73:24:e0:5d:6e: 5e:3d:70:72:70:77:4e:3f:40:f9:91:f0:98:02:c5:60:30:7b: 82:9e:d9:97:5d:e5:92:b5:27:f3:9a:ed:90:01:73:a0:d6:f8: 74:7e:25:83:84:c1:f2:ee:4f:29:d7:60:8d:a5:53:08:da:0a: 1e:b0:5f:ca:25:de:5c:d2:e5:2b:a3:1e:cd:87:69:4b:11:1d: 62:da:4d:1b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pXMJ/zQNoRhNR/s3pGjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTgwYjVmZjM3NTA2OGE3NDkwMjEwZWJjNmNhZjIyODIyY2EwZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KPrXXu+QKRk0Um04mS6Pt0TmOs0 TgigPR9MYgG/I8YgZZUOc8U2v0rDhgbX7f9RSiKyS7VXe+Rr4h7ovvAWuufpiAp0 SeJG0JH6D+tWLeeR3eBD9NQysaO/ktkwKkU2KWMajoZTx1YEAC3ykGidpsvukXU9 urGGxmqqA2JE7uRu1pVfhaGZVgL6jyHoXtt0Jo5IM5QF+P1ENP6weu9D87IXtqKb kJezIV5aZFySjGhgE5j1T16z8VvXVXQbc8WBMwWcwcl+ggW/tLgZ5XmAdGHZvOyo xyOCl81ktivFskCcaLkinXSgztz8NTCF/HegF9Wgw+DDgOab96pLm+VW6QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCqAtf83UGinSQIQ68bK8igiyg0KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2FmMmYz Yy1lYWMyLTRlMzUtOGVjNC0wZGRjNTA0ODY3ODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvYWYyZjNj LWVhYzItNGUzNS04ZWM0LTBkZGM1MDQ4Njc4Ny8xL0tvQzFfemRRYUtkSkFoRHJ4 c3J5S0NMS0RRby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8dBMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCsxzANBgkqhkiG9w0BAQsFAAOCAQEAX99IuYkr+TVMcudwZ7w+1jG0aYaRECBC HWgZxS3gOrmUUpQw6it4pZIIjz9ayj6LPZjTedQn96yF3m8XCb/wPCUeAf+qmknD dQr6JDlkIrYyTWeEm9+YMfEG6p6yayMuQjomeB7wZKPGkn61CO3lr6ccJTFmjpSy vUHA9e2yd3HN1xye+IHjpofkWzYiwY7vhJm2qgb9YH5udB/mpIKUtImlhaBumfBo /3elX7EmJHMk4F1uXj1wcnB3Tj9A+ZHwmALFYDB7gp7Zl13lkrUn85rtkAFzoNb4 dH4lg4TB8u5PKddgjaVTCNoKHrBfyiXeXNLlK6MezYdpSxEdYtpNGw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:13 2026 by rpki-client