This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer File: KpTH34VXtlNEfD4G-0s3LVEgoiI.cer (raw, json) Hash identifier: VzJnDC0vKPC2Ssuhq72Ng37cUGXWddA7tSeX0jMBs9c= Subject key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAF53FD1E07AAB33844A42301799CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196854 IP: 185.121.0.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f5:3f:d1:e0:7a:ab:33:84:4a:42:30:17:99:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a94c7df8557b653447c3e06fb4b372d5120a222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:7f:a9:d3:cc:b0:29:46:b4:5b:24:41:be: ab:6c:b8:dc:92:19:2b:90:aa:7e:e4:f3:87:f0:f2: b7:68:14:10:fa:88:e7:e4:b8:40:f6:77:25:d7:93: 03:9b:a0:78:2d:66:42:1d:58:76:c4:0c:61:99:a3: e8:f5:cd:1c:1a:32:6d:12:34:63:10:39:3e:9f:87: 9b:19:de:54:2f:2c:62:b6:1b:1b:7e:97:f4:65:be: a0:14:a9:b9:ae:9b:e6:dc:59:67:61:56:1e:3c:fd: 87:4b:21:dd:49:fd:46:3a:75:23:c8:d7:bb:b0:02: 76:bd:2f:c8:82:c2:6b:89:8e:a7:92:f4:b7:57:c0: 72:c0:d4:16:98:e3:ae:92:1a:fb:1f:28:b8:00:50: 09:33:55:2c:df:5a:28:07:ad:61:61:c2:be:4b:3d: 38:71:fa:9f:84:4f:90:9b:ea:77:70:03:93:3e:2e: 62:99:01:e2:c6:45:d1:e6:13:5a:1f:24:fb:25:97: 44:92:4a:96:d3:12:46:f3:55:03:d3:70:8a:60:2e: e7:35:b6:d4:0b:33:9d:96:d9:f5:a6:df:46:0a:90: e6:b7:72:2b:63:1a:7a:65:8a:99:9f:2d:f0:b3:b8: 4d:9c:c6:a5:66:c6:67:bc:d7:b9:57:5c:b0:5b:3b: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.0.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196854 Signature Algorithm: sha256WithRSAEncryption 68:7d:99:48:32:61:89:42:e5:8c:8b:0e:07:15:d8:c5:5b:19: 82:fe:28:d6:a9:e2:0c:e1:76:00:7e:08:20:23:64:bc:cf:9c: f2:29:da:71:db:ca:41:d8:de:8f:18:04:b1:47:c3:cd:a1:c2: 18:9f:3b:10:d6:dc:cf:9c:76:1f:19:8c:65:22:9b:fc:21:8d: bd:3c:db:16:af:5a:06:66:ca:76:62:bc:17:a4:bf:70:39:b6: c2:76:5f:02:fa:11:67:e4:4d:b5:6f:3a:79:a3:19:41:19:15: d4:17:b1:dd:8d:8c:b5:ec:dc:b8:3e:b7:b6:29:a6:e2:7c:28: 95:e4:dd:7f:6b:8e:81:3c:d3:82:d8:f2:5a:7d:dc:0b:8b:8e: 75:9f:a8:0d:41:ca:2e:af:e5:9e:f1:65:c1:04:74:25:0b:b2: 8c:d9:5d:6a:65:50:1e:f8:60:60:45:a8:d3:5e:be:f0:4c:0d: 39:e9:38:ae:2c:f6:e8:36:8d:66:fb:0d:db:44:26:9a:56:2e: 3d:9a:ea:bd:29:ac:73:3e:78:35:df:04:4f:e7:28:08:a3:12: 50:7f:18:7e:4f:ca:5b:9e:2c:98:47:32:dc:23:c7:6f:c3:cb: 6f:02:9b:76:a4:db:95:04:72:eb:f4:71:a0:e1:75:c2:00:ea: 56:c0:8c:5d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yvU/0eB6qzOESkIwF5nPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTk0YzdkZjg1NTdiNjUzNDQ3YzNlMDZmYjRiMzcyZDUxMjBhMjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHF/qdPMsClGtFskQb6rbLjckhkr kKp+5POH8PK3aBQQ+ojn5LhA9ncl15MDm6B4LWZCHVh2xAxhmaPo9c0cGjJtEjRj EDk+n4ebGd5ULyxithsbfpf0Zb6gFKm5rpvm3FlnYVYePP2HSyHdSf1GOnUjyNe7 sAJ2vS/IgsJriY6nkvS3V8BywNQWmOOukhr7Hyi4AFAJM1Us31ooB61hYcK+Sz04 cfqfhE+Qm+p3cAOTPi5imQHixkXR5hNaHyT7JZdEkkqW0xJG81UD03CKYC7nNbbU CzOdltn1pt9GCpDmt3IrYxp6ZYqZny3ws7hNnMalZsZnvNe5V1ywWzsDywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCqUx9+FV7ZTRHw+BvtLNy1RIKIiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzY3Y2Fl ZS00YzExLTRhNmYtYmY2My01NTE4YjBlODY1NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNjdjYWVl LTRjMTEtNGE2Zi1iZjYzLTU1MThiMGU4NjU2Ni8xL0twVEgzNFZYdGxORWZENEct MHMzTFZFZ29pSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBuXkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMA9jANBgkqhkiG9w0BAQsFAAOCAQEAaH2ZSDJhiULljIsOBxXYxVsZgv4o1qni DOF2AH4IICNkvM+c8inacdvKQdjejxgEsUfDzaHCGJ87ENbcz5x2HxmMZSKb/CGN vTzbFq9aBmbKdmK8F6S/cDm2wnZfAvoRZ+RNtW86eaMZQRkV1Bex3Y2MtezcuD63 timm4nwoleTdf2uOgTzTgtjyWn3cC4uOdZ+oDUHKLq/lnvFlwQR0JQuyjNldamVQ HvhgYEWo016+8EwNOek4riz26DaNZvsN20QmmlYuPZrqvSmscz54Nd8ET+coCKMS UH8Yfk/KW54smEcy3CPHb8PLbwKbdqTblQRy6/RxoOF1wgDqVsCMXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:13 2026 by rpki-client