This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer File: KpKTnjuv_mq42aeWIFHYXOKjaLo.cer (raw, json) Hash identifier: g96n1vZ9w9gbjpz2BqFt/DIfWNfPuPbalQwKjMP3hDM= Subject key identifier: 2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C0496C2EECE346273A0ECABB6BC840AB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 12:31:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199282 IP: 193.111.89.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:96:c2:ee:ce:34:62:73:a0:ec:ab:b6:bc:84:0a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 12:31:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2c:20:6b:1c:f5:6c:1e:81:6b:95:a9:4a:c5: 56:9b:5a:18:33:85:3c:c2:e0:ec:6d:0a:82:a0:4f: f9:34:1a:95:8d:69:38:af:e2:c6:ca:8b:40:d5:ee: 5c:23:bd:1a:b1:9b:94:45:5f:ab:f9:08:8b:41:06: c7:c5:5a:0a:9b:12:c3:54:5b:63:c1:42:e7:41:d8: 42:89:88:e8:36:dc:24:cd:ad:06:5c:30:79:29:5c: 84:45:7e:91:75:8f:83:14:da:21:8b:e6:5b:e4:80: 18:5f:55:f2:9b:59:72:3c:b1:92:c0:bf:fe:33:6b: 06:b7:d7:3d:f8:5e:b8:26:23:4a:30:f0:39:b8:9a: 92:f0:89:0b:53:9a:ef:01:ee:70:de:d2:68:56:44: dd:2c:90:54:23:ab:68:55:73:3d:10:8b:82:5d:33: bd:00:f5:ec:1f:6f:3b:95:a3:29:e0:59:f6:3d:14: e4:76:9c:a5:78:c2:9e:f3:5c:9e:0f:a7:41:16:54: ff:b4:8c:29:20:4b:ae:13:fc:c3:2f:0d:9d:68:7f: 83:da:4a:65:e5:86:4b:78:01:ad:ad:92:df:97:10: 07:f1:41:58:07:cb:34:ec:5e:39:5c:e7:f1:e9:da: 8a:55:5f:b3:7e:45:63:d9:c1:7d:d6:a7:0f:11:fb: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.89.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199282 Signature Algorithm: sha256WithRSAEncryption 5e:c4:29:ee:bb:c2:1b:73:01:85:79:54:7b:61:81:81:cd:5c: 7e:81:bd:54:de:04:35:a5:34:f8:fa:49:5c:41:fd:a8:e4:18: 48:be:1d:58:7e:7d:88:bd:ff:da:ef:ab:6c:16:86:1b:d1:3e: f7:65:79:67:d9:5e:5e:e2:86:13:0b:11:63:25:54:56:9d:59: c5:2b:37:9e:12:49:b0:06:99:f2:66:54:54:41:90:f9:29:8f: f2:cf:cb:8f:4b:98:71:5f:05:c9:3d:30:eb:fc:b7:4f:d7:ed: 8c:bd:7a:2a:82:5e:26:60:e4:93:09:ea:c0:0a:68:11:36:fe: 40:97:28:8f:55:2d:f5:c5:74:bc:08:3f:5a:d2:32:fa:81:6f: be:7b:0d:1c:9d:39:ac:ae:06:70:76:50:d9:0a:05:28:a6:f8: 4c:b1:07:de:7c:df:90:c2:55:b0:84:d0:98:e3:1d:cf:e5:1c: b6:45:ee:1f:37:51:92:7e:2e:df:73:ca:0d:7c:42:75:a1:96: 64:39:06:46:ce:5b:49:e6:b3:dc:72:33:30:3d:18:70:7a:4c: a6:91:44:47:db:a0:4e:6a:b5:b4:69:a3:85:6a:3b:05:67:ab: 87:45:f5:1e:86:03:87:cd:fa:44:e7:6f:b0:52:ea:32:3c:e1: ac:b0:c6:cb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZwElsLuzjRic6Dsq7a8hAq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTIzMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTkyOTM5ZTNiYWZmZTZhYjhkOWE3OTYyMDUxZDg1Y2UyYTM2OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoywgaxz1bB6Ba5WpSsVWm1oYM4U8 wuDsbQqCoE/5NBqVjWk4r+LGyotA1e5cI70asZuURV+r+QiLQQbHxVoKmxLDVFtj wULnQdhCiYjoNtwkza0GXDB5KVyERX6RdY+DFNohi+Zb5IAYX1Xym1lyPLGSwL/+ M2sGt9c9+F64JiNKMPA5uJqS8IkLU5rvAe5w3tJoVkTdLJBUI6toVXM9EIuCXTO9 APXsH287laMp4Fn2PRTkdpyleMKe81yeD6dBFlT/tIwpIEuuE/zDLw2daH+D2kpl 5YZLeAGtrZLflxAH8UFYB8s07F45XOfx6dqKVV+zfkVj2cF91qcPEft83wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCqSk547r/5quNmnliBR2Fzio2i6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2UwNmRj Zi1iNTIwLTRiNjUtOWNhYy1iYzYxY2IxZjg2MTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvZTA2ZGNm LWI1MjAtNGI2NS05Y2FjLWJjNjFjYjFmODYxMC8xL0twS1RuanV2X21xNDJhZVdJ RkhZWE9LamFMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwW9ZMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMKcjANBgkqhkiG9w0BAQsFAAOCAQEAXsQp7rvCG3MBhXlUe2GBgc1cfoG9VN4E NaU0+PpJXEH9qOQYSL4dWH59iL3/2u+rbBaGG9E+92V5Z9leXuKGEwsRYyVUVp1Z xSs3nhJJsAaZ8mZUVEGQ+SmP8s/Lj0uYcV8FyT0w6/y3T9ftjL16KoJeJmDkkwnq wApoETb+QJcoj1Ut9cV0vAg/WtIy+oFvvnsNHJ05rK4GcHZQ2QoFKKb4TLEH3nzf kMJVsITQmOMdz+UctkXuHzdRkn4u33PKDXxCdaGWZDkGRs5bSeaz3HIzMD0YcHpM ppFER9ugTmq1tGmjhWo7BWerh0X1HoYDh836ROdvsFLqMjzhrLDGyw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:33 2026 by rpki-client