This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer File: KrmiSem1jILhRV6yM5RVsDHn3d8.cer (raw, json) Hash identifier: BVclL6wSHJ93QjBrGkoAP9lGq+m0wYVqEdHqkJKyIQ8= Subject key identifier: 2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7EF1DC5EBF00FC9A6F0BFF722665 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206669 IP: 185.179.76.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:f1:dc:5e:bf:00:fc:9a:6f:0b:ff:72:26:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:51:cc:ce:f9:01:65:12:14:a9:92:23:a9:b4: 53:8e:b7:bd:84:fe:fa:98:37:49:40:70:f8:a5:1d: 5b:35:80:8a:f2:5a:3a:ed:2a:45:76:70:4a:24:d5: e8:88:d4:fb:d4:74:0b:b1:28:71:59:97:9b:6e:95: 39:a1:e4:0d:4a:87:a0:64:6d:bf:d3:b5:9f:9d:1d: e7:ad:c4:c7:b4:49:dc:41:85:1c:b0:21:42:1a:19: 4e:61:8d:3e:eb:a2:f5:ff:d9:e3:ea:b6:b8:f8:05: 0f:ec:4c:be:a8:63:e3:ae:8f:98:fa:f9:17:3a:8f: 4d:f1:ae:f8:68:19:1e:4a:47:5e:1a:81:34:bb:84: 69:97:e2:fc:04:e1:e4:95:d9:f2:6a:8c:ea:e5:37: f4:1a:6c:a5:34:4d:00:9a:c3:df:28:49:ba:0e:a8: 10:00:c0:77:ce:3c:46:e1:5d:78:e4:34:e3:91:0f: 8b:ae:00:6f:52:3c:bc:9e:c2:08:72:ba:0c:18:a3: 25:f2:b4:6e:2d:7d:4b:ff:29:de:b5:de:8d:05:de: d9:7c:bf:8b:00:10:7e:f5:5a:08:6d:77:a1:c6:eb: 1f:ca:ff:59:ca:a4:56:25:b4:5c:c5:bd:32:05:f6: 35:fb:3d:dc:4b:16:4c:0e:ee:f2:5a:5b:b6:c0:7f: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.76.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206669 Signature Algorithm: sha256WithRSAEncryption 7c:45:b9:21:a0:83:7f:4b:71:7d:8b:09:62:68:52:7f:73:69: bf:c9:5c:fe:63:0e:5e:86:d3:9f:c2:6b:a1:2d:1d:5c:a9:50: 2a:c4:06:2a:dc:20:a1:b6:de:fb:18:e4:31:d1:2c:b8:db:84: c0:02:03:db:06:d3:03:55:59:95:30:fa:74:b0:51:0e:55:f1: a7:02:2a:47:02:cb:ce:4d:c5:9e:74:7d:62:d3:40:19:99:ad: d8:f4:9b:57:8f:ef:e3:ee:42:17:33:0b:ad:16:c8:45:a6:c0: cd:ea:7d:3a:c7:a9:21:83:f4:c5:ed:c3:ba:75:87:60:61:d8: 39:6c:70:85:1d:eb:7e:65:a5:fa:34:2d:c6:99:43:d5:a5:f3: 9d:9c:27:13:69:45:57:4e:01:ca:9a:38:03:4a:01:64:75:78: d8:18:3f:6e:75:dd:df:68:0b:d4:b0:e4:71:d6:a9:5d:0e:60: dd:2f:8a:c1:d4:fd:e3:fd:43:9d:52:dc:6e:64:69:4e:4d:8a: e5:64:0b:55:04:5c:c0:47:a5:8b:40:b4:b9:39:37:df:b9:33: 32:93:8c:da:44:8e:cf:ca:a0:84:6e:d6:72:d6:d0:29:4c:04: ee:12:9c:32:cc:7a:ac:96:78:1b:bd:f5:55:a5:0f:77:da:87: ef:53:1d:3d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt2637x3F6/APyabwv/ciZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWI5YTI0OWU5YjU4YzgyZTE0NTVlYjIzMzk0NTViMDMxZTdkZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lHMzvkBZRIUqZIjqbRTjre9hP76 mDdJQHD4pR1bNYCK8lo67SpFdnBKJNXoiNT71HQLsShxWZebbpU5oeQNSoegZG2/ 07WfnR3nrcTHtEncQYUcsCFCGhlOYY0+66L1/9nj6ra4+AUP7Ey+qGPjro+Y+vkX Oo9N8a74aBkeSkdeGoE0u4Rpl+L8BOHkldnyaozq5Tf0GmylNE0AmsPfKEm6DqgQ AMB3zjxG4V145DTjkQ+LrgBvUjy8nsIIcroMGKMl8rRuLX1L/ynetd6NBd7ZfL+L ABB+9VoIbXehxusfyv9ZyqRWJbRcxb0yBfY1+z3cSxZMDu7yWlu2wH+btQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCq5oknptYyC4UVesjOUVbAx593fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzllYWI2 ZC02YjM1LTRhNWEtYWZiMS0yNTFmMjIwOTNkMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOWVhYjZk LTZiMzUtNGE1YS1hZmIxLTI1MWYyMjA5M2QwNC8xL0tybWlTZW0xaklMaFJWNnlN NVJWc0RIbjNkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubNMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMnTTANBgkqhkiG9w0BAQsFAAOCAQEAfEW5IaCDf0txfYsJYmhSf3Npv8lc/mMO XobTn8JroS0dXKlQKsQGKtwgobbe+xjkMdEsuNuEwAID2wbTA1VZlTD6dLBRDlXx pwIqRwLLzk3FnnR9YtNAGZmt2PSbV4/v4+5CFzMLrRbIRabAzep9OsepIYP0xe3D unWHYGHYOWxwhR3rfmWl+jQtxplD1aXznZwnE2lFV04Bypo4A0oBZHV42Bg/bnXd 32gL1LDkcdapXQ5g3S+KwdT94/1DnVLcbmRpTk2K5WQLVQRcwEeli0C0uTk337kz MpOM2kSOz8qghG7WctbQKUwE7hKcMsx6rJZ4G731VaUPd9qH71MdPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:56 2026 by rpki-client