This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer File: KtNUu6DgTX5arSd5J4n8Jt3W31E.cer (raw, json) Hash identifier: ijB9CQTWEZH26a1zA420E++ZN8rQj4snW9VHQCCoPX0= Subject key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB3B294EA8CFCC3EEEAD99246FAEA2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:fd8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3b:29:4e:a8:cf:cc:3e:ee:ad:99:24:6f:ae:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:e8:fb:11:66:b0:d4:28:f7:6e:44:b5:49: dc:7e:80:dd:4e:62:fb:0e:c8:5e:be:96:c0:e4:3e: 0e:2c:db:7d:1a:08:00:d9:58:8d:86:2c:f4:3f:76: 8c:da:e3:94:cf:1c:74:de:39:f1:00:7d:e1:4f:40: 24:1d:ca:f0:d5:dc:5d:f9:77:5a:32:cf:90:92:5f: f9:db:0e:c5:d2:de:60:55:85:f5:4a:c5:95:5a:32: c7:bb:c8:53:4d:3c:4d:33:0f:ea:63:9c:56:97:15: 3d:78:d8:f4:dd:ca:58:ac:2d:3e:c0:ac:94:c0:c3: 66:e4:20:82:89:94:4d:e3:b0:43:f3:a1:16:9a:73: 79:50:4d:59:7d:42:19:e3:e4:ce:a8:f3:b7:cb:de: 29:77:ef:e0:ca:53:b9:06:59:3b:ae:29:c8:e3:4e: 16:82:b3:98:68:0e:cd:89:14:32:92:6d:95:c1:03: b9:f8:88:e6:cd:5e:06:17:e9:8c:d5:2a:a7:6e:24: 2d:5f:12:5c:23:26:e2:14:46:b3:32:e6:b5:a5:a4: db:6e:69:92:9b:b0:41:78:1a:e3:3a:e2:a8:e2:c4: 76:5d:00:44:fa:21:3f:7d:fe:04:8c:3e:34:5b:ce: 7a:fc:ca:10:a6:01:56:17:de:13:55:f7:33:a7:dc: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:fd8::/48 Signature Algorithm: sha256WithRSAEncryption a5:44:fc:11:06:76:0c:a3:25:0a:4d:8c:98:cb:27:7b:87:15: 3f:57:ac:46:a5:b3:bb:eb:66:9e:46:08:8a:15:73:a4:6d:86: 9d:d6:dc:5a:13:7a:fa:f4:6f:bd:29:91:77:77:42:4e:66:80: 0c:ce:d2:33:13:8a:51:fa:06:9b:b1:68:28:a8:08:8c:e2:d7: e1:ea:df:38:c0:34:35:29:34:ba:d0:ae:8b:6c:b2:3e:a4:f8: d7:dc:30:8b:77:e1:53:ec:ae:e0:a8:82:6f:ed:61:be:bd:c9: e9:5a:99:db:c2:8d:fa:ff:65:d1:e1:96:67:b1:fa:aa:ac:31: e1:7e:31:46:b5:34:16:10:33:3c:43:4a:6f:80:ca:b2:c5:89: 64:a8:81:51:da:79:9a:1c:cc:47:6c:c5:92:9d:7c:25:d0:f3: 19:42:fe:bf:33:d1:8f:91:70:17:43:2c:a4:02:ef:fa:e2:02: 5c:5e:3b:d2:54:55:19:b9:b7:8e:7e:c4:5a:37:97:bc:9e:88: 87:06:6f:da:08:15:10:37:66:d2:11:38:4b:08:b7:1d:d7:a0: f9:08:87:9f:fd:04:2e:c6:6d:c3:fa:52:23:65:69:0a:07:f6: a6:38:be:58:77:ed:b6:ac:6c:5c:c8:78:70:c9:50:86:42:5b: c6:05:90:34 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt9yzspTqjPzD7urZkkb66iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWQzNTRiYmEwZTA0ZDdlNWFhZDI3NzkyNzg5ZmMyNmRkZDZkZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwODo+xFmsNQo925EtUncfoDdTmL7 DshevpbA5D4OLNt9GggA2ViNhiz0P3aM2uOUzxx03jnxAH3hT0AkHcrw1dxd+Xda Ms+Qkl/52w7F0t5gVYX1SsWVWjLHu8hTTTxNMw/qY5xWlxU9eNj03cpYrC0+wKyU wMNm5CCCiZRN47BD86EWmnN5UE1ZfUIZ4+TOqPO3y94pd+/gylO5Blk7rinI404W grOYaA7NiRQykm2VwQO5+IjmzV4GF+mM1SqnbiQtXxJcIybiFEazMua1paTbbmmS m7BBeBrjOuKo4sR2XQBE+iE/ff4EjD40W856/MoQpgFWF94TVfczp9yLkwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzc5OWYw ZC1hNGYxLTRhNWItOGNjMC0zYTcwMzc4OWIwM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNzk5ZjBk LWE0ZjEtNGE1Yi04Y2MwLTNhNzAzNzg5YjAzYi8xL0t0TlV1NkRnVFg1YXJTZDVK NG44SnQzVzMxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA/YMA0GCSqGSIb3DQEBCwUAA4IBAQCl RPwRBnYMoyUKTYyYyyd7hxU/V6xGpbO762aeRgiKFXOkbYad1txaE3r69G+9KZF3 d0JOZoAMztIzE4pR+gabsWgoqAiM4tfh6t84wDQ1KTS60K6LbLI+pPjX3DCLd+FT 7K7gqIJv7WG+vcnpWpnbwo36/2XR4ZZnsfqqrDHhfjFGtTQWEDM8Q0pvgMqyxYlk qIFR2nmaHMxHbMWSnXwl0PMZQv6/M9GPkXAXQyykAu/64gJcXjvSVFUZubeOfsRa N5e8noiHBm/aCBUQN2bSEThLCLcd16D5CIef/QQuxm3D+lIjZWkKB/amOL5Yd+22 rGxcyHhwyVCGQlvGBZA0 -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:32 2026 by rpki-client