This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer File: Kt1DinzjyzefKM-gUc9j1a2P48o.cer (raw, json) Hash identifier: FGLlhlFX34CZrdL+B+zQ2VXPER8mgQTAaZzrCJrus10= Subject key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37DB7F6CC6CAB116438B3EF0BC0097 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42209 AS: 43309 AS: 44340 IP: 2.56.168.0/24 IP: 185.216.51.0/24 IP: 185.234.252.0/24 IP: 2a0f:ca00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:db:7f:6c:c6:ca:b1:16:43:8b:3e:f0:bc:00:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:e4:d9:dc:71:83:6c:c0:f5:c9:7a:a8:26: a8:c4:b2:bc:e1:d3:70:4f:b9:b4:b3:4f:54:5f:8a: d6:a2:a4:af:39:5d:b7:10:15:cd:f8:18:31:87:bc: 3e:50:6a:fc:11:5e:29:75:60:69:10:9a:10:f9:47: 47:aa:e8:06:78:41:7b:3f:c4:4f:35:72:9a:0c:6c: 90:33:d4:dc:fe:5d:37:b9:6f:b1:14:4b:88:a5:1c: 8f:a1:33:5b:b1:21:f0:3a:23:40:a6:58:b9:b2:9e: 10:f4:b0:8c:1d:69:93:4b:21:66:7c:22:81:77:d8: 60:f9:30:76:68:d5:69:08:93:cd:14:96:26:e9:ef: 00:d6:8b:24:07:3d:86:d4:f1:c3:fe:c2:d1:92:d2: d2:9a:f5:5e:53:1c:8e:13:89:53:a2:1a:6b:3d:22: cc:95:63:15:f7:6e:24:41:97:23:e7:b9:b3:31:5f: 05:e6:44:72:3f:bf:98:d3:04:df:71:3d:4e:1b:1d: 5c:e6:77:93:16:fa:82:a4:c1:7b:62:6b:f6:fc:e0: 78:db:ae:64:70:ea:07:03:ec:a3:38:56:4e:65:3c: 87:8e:1f:0d:4d:ff:30:2e:d8:3b:a5:66:f5:5a:6a: ff:87:a3:e1:57:ab:fe:38:1d:05:0d:9e:85:e2:f6: 90:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.168.0/24 185.216.51.0/24 185.234.252.0/24 IPv6: 2a0f:ca00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42209 43309 44340 Signature Algorithm: sha256WithRSAEncryption 48:22:59:c9:bb:40:12:b4:29:0c:41:89:3e:5c:75:d7:02:7f: 94:94:dc:0f:a9:5b:a2:55:07:07:7e:22:11:18:47:47:da:d0: 0a:d4:a6:c4:78:87:03:88:ed:18:3d:c4:fc:dc:d3:89:b4:ab: 1f:86:a1:7c:4c:fe:df:f0:dd:e0:41:65:53:67:06:5f:60:20: a0:aa:dc:9f:a5:9e:bf:15:ef:c3:98:f6:4b:17:82:6f:bb:a6: 39:7d:b6:c9:b1:73:b2:93:8d:80:eb:82:18:b8:67:8e:d9:cb: 1e:60:9e:5c:02:2a:ed:72:97:a4:5b:28:98:a5:8f:56:e0:13: 2f:c9:12:c0:e2:29:e4:f1:76:3a:d0:42:85:31:f4:61:14:c4: 68:ec:03:6e:08:ae:a0:e4:df:ff:b5:02:cd:41:12:a7:71:f1: d6:a2:a2:ff:e3:41:e8:da:ca:57:42:4a:72:01:e0:a9:77:cf: cb:87:58:65:74:ab:ff:d0:d7:39:37:a5:8b:1b:72:99:ea:c1: 2e:31:43:71:86:80:e8:42:3d:94:16:ad:bf:4b:f9:1b:cd:57: bd:a2:8f:bf:d1:e7:64:80:26:1d:f2:cb:2f:31:63:05:22:72: c3:b3:7d:0b:85:32:72:46:2b:64:3b:0d:40:13:8b:ea:80:28: 85:dc:00:5e -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt+N9t/bMbKsRZDiz7wvACXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWRkNDM4YTdjZTNjYjM3OWYyOGNmYTA1MWNmNjNkNWFkOGZlM2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5vk2dxxg2zA9cl6qCaoxLK84dNw T7m0s09UX4rWoqSvOV23EBXN+Bgxh7w+UGr8EV4pdWBpEJoQ+UdHqugGeEF7P8RP NXKaDGyQM9Tc/l03uW+xFEuIpRyPoTNbsSHwOiNApli5sp4Q9LCMHWmTSyFmfCKB d9hg+TB2aNVpCJPNFJYm6e8A1oskBz2G1PHD/sLRktLSmvVeUxyOE4lTohprPSLM lWMV924kQZcj57mzMV8F5kRyP7+Y0wTfcT1OGx1c5neTFvqCpMF7Ymv2/OB4265k cOoHA+yjOFZOZTyHjh8NTf8wLtg7pWb1Wmr/h6PhV6v+OB0FDZ6F4vaQAQIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFCrdQ4p848s3nyjPoFHPY9Wtj+PKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzBiNjFj Zi04MGJhLTRlOGUtYTJlNS0yMGEwZDEzMGM0NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMGI2MWNm LTgwYmEtNGU4ZS1hMmU1LTIwYTBkMTMwYzQ1Ni8xL0t0MURpbnpqeXplZktNLWdV YzlqMWEyUDQ4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAAjioAwQAudgzAwQAuer8MA0EAgACMAcDBQMq D8oAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCk4QIDAKktAgMArTQwDQYJKoZI hvcNAQELBQADggEBAEgiWcm7QBK0KQxBiT5cddcCf5SU3A+pW6JVBwd+IhEYR0fa 0ArUpsR4hwOI7Rg9xPzc04m0qx+GoXxM/t/w3eBBZVNnBl9gIKCq3J+lnr8V78OY 9ksXgm+7pjl9tsmxc7KTjYDrghi4Z47Zyx5gnlwCKu1yl6RbKJilj1bgEy/JEsDi KeTxdjrQQoUx9GEUxGjsA24IrqDk3/+1As1BEqdx8daiov/jQejayldCSnIB4Kl3 z8uHWGV0q//Q1zk3pYsbcpnqwS4xQ3GGgOhCPZQWrb9L+RvNV72ij7/R52SAJh3y yy8xYwUicsOzfQuFMnJGK2Q7DUATi+qAKIXcAF4= -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:50 2026 by rpki-client