This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer File: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer (raw, json) Hash identifier: c9l9WC86QOKoJgxVB9aVNnfWlYiuR1qP6AoTKG9CjN8= Subject key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F85022AD1A8839C9224194EFD52F3EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51545 IP: 91.217.245.0/24 IP: 185.155.104.0/22 IP: 2a07:92c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:02:2a:d1:a8:83:9c:92:24:19:4e:fd:52:f3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6f:52:78:c0:c0:e2:11:c2:1d:f2:2d:df:0b: b7:39:77:39:f0:15:e1:fa:9b:b9:0d:ea:dd:7d:2d: 29:06:2d:57:dd:a0:94:1d:a3:5a:77:58:90:0e:ba: 87:56:75:4d:f7:ee:05:9c:fc:81:60:49:fa:4a:e0: 83:12:f7:d4:5f:e6:7a:08:95:2f:89:91:6b:dd:3b: 30:f0:49:8b:de:20:7e:e4:fe:d2:55:cb:2b:78:ed: d2:c7:8f:7c:a4:05:64:2d:20:a6:49:9a:15:15:92: c6:8b:66:69:72:1d:ec:63:6f:b8:41:4b:8b:ff:a9: 5e:8c:72:83:a2:02:84:c6:f1:f0:51:12:66:76:47: 0b:1c:03:10:98:c4:67:9d:70:36:e2:bb:ab:eb:75: 27:17:2b:58:e9:d4:cd:53:aa:be:aa:dc:cf:f6:00: d2:33:36:e4:07:9f:bd:79:a0:fd:8f:d9:d4:39:ad: 4f:db:15:95:4e:51:1e:e9:27:fe:72:8b:56:15:47: 18:1d:71:60:ff:49:e2:4d:81:d2:79:88:93:0a:fb: 53:1c:4c:ee:54:77:6f:49:19:25:02:84:c2:e2:fc: 30:6b:e2:4e:7c:ef:f4:78:d3:02:99:3d:00:01:41: 3a:db:a2:54:d7:6e:e5:f0:7d:6f:54:16:8b:bf:52: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.245.0/24 185.155.104.0/22 IPv6: 2a07:92c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51545 Signature Algorithm: sha256WithRSAEncryption 75:24:95:6b:4a:5b:61:85:95:c8:ca:1e:5f:2a:3c:86:68:72: 83:6f:69:3d:6b:cf:40:71:23:d3:62:68:12:d5:03:41:f5:de: b1:2f:cb:eb:67:2c:6d:b9:09:93:c0:ec:6e:b2:6a:c8:18:d8: b6:c8:2e:6e:a0:12:71:79:27:02:d2:00:b3:ca:64:d8:69:5e: 91:1d:56:8a:e6:8e:a5:77:6e:6f:45:2e:01:4c:cb:62:a9:63: a3:15:3d:95:68:ed:f7:51:46:0c:e2:44:56:27:d3:18:a9:ac: 84:04:f1:dd:ae:9b:a2:df:36:c3:45:52:d2:11:04:d0:b9:e3: 02:b8:33:53:90:b8:9d:d3:0f:09:46:f4:c5:27:17:4d:ad:76: 1b:f8:2c:3e:e8:13:38:a9:e3:f1:4f:05:32:27:a3:cc:43:31: c9:de:5e:7a:e1:c2:ae:f3:78:78:89:b7:3e:a1:d3:9c:16:ca: d2:c0:ae:d7:ec:47:4e:4b:40:bf:a6:b4:c4:48:65:c6:73:54: 38:b5:e6:87:c3:a3:f9:a8:ba:85:6d:85:c8:92:c0:39:d4:66: b5:b1:f9:f5:7b:b3:ab:91:57:00:ef:e6:ad:87:45:43:b4:5d: 8e:fe:a1:1f:31:ff:32:c2:25:16:0a:ce:82:94:a9:22:00:b6: 22:b0:96:30 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hQIq0aiDnJIkGU79UvPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjFkYzIwNWUyNGEyM2E1YTA0NTRhMTNmMWQ0YTBjOTYzN2E0MzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA929SeMDA4hHCHfIt3wu3OXc58BXh +pu5DerdfS0pBi1X3aCUHaNad1iQDrqHVnVN9+4FnPyBYEn6SuCDEvfUX+Z6CJUv iZFr3Tsw8EmL3iB+5P7SVcsreO3Sx498pAVkLSCmSZoVFZLGi2Zpch3sY2+4QUuL /6lejHKDogKExvHwURJmdkcLHAMQmMRnnXA24rur63UnFytY6dTNU6q+qtzP9gDS MzbkB5+9eaD9j9nUOa1P2xWVTlEe6Sf+cotWFUcYHXFg/0niTYHSeYiTCvtTHEzu VHdvSRklAoTC4vwwa+JOfO/0eNMCmT0AAUE626JU127l8H1vVBaLv1JTpwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCsdwgXiSiOloEVKE/HUoMljekOdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzQ3NDIy Zi0yZmQwLTRiMzItOTM1NC1kYmM5YTUyMmNkMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvNDc0MjJm LTJmZDAtNGIzMi05MzU0LWRiYzlhNTIyY2QxMi8xL0t4M0NCZUpLSTZXZ1JVb1Q4 ZFNneVdONlE1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9n1AwQCuZtoMA0EAgACMAcDBQMqB5LAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDJWTANBgkqhkiG9w0BAQsFAAOCAQEAdSSV a0pbYYWVyMoeXyo8hmhyg29pPWvPQHEj02JoEtUDQfXesS/L62csbbkJk8DsbrJq yBjYtsgubqAScXknAtIAs8pk2GlekR1WiuaOpXdub0UuAUzLYqljoxU9lWjt91FG DOJEVifTGKmshATx3a6bot82w0VS0hEE0LnjArgzU5C4ndMPCUb0xScXTa12G/gs PugTOKnj8U8FMiejzEMxyd5eeuHCrvN4eIm3PqHTnBbK0sCu1+xHTktAv6a0xEhl xnNUOLXmh8Oj+ai6hW2FyJLAOdRmtbH59Xuzq5FXAO/mrYdFQ7Rdjv6hHzH/MsIl FgrOgpSpIgC2IrCWMA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:13 2026 by rpki-client