This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer File: KyO4dALEaK1icsN77YjlzcbkwGE.cer (raw, json) Hash identifier: M86aZqn7GBwOv5G6bNUtwR5gGS+W+pRXQd+Ok4w66nk= Subject key identifier: 2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC3D6C7CA3185EC1A087BC29388E35 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209192 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3d:6c:7c:a3:18:5e:c1:a0:87:bc:29:38:8e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b23b87402c468ad6272c37bed88e5cdc6e4c061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:35:2a:58:75:d3:83:1d:c4:47:a3:b8:b7: d2:24:c4:7d:a0:c6:96:c0:d1:47:21:95:1c:10:ce: 97:ad:c3:cd:4c:7d:60:33:e4:73:5e:6e:3b:94:2f: 59:89:b1:c9:2b:57:37:a9:45:d2:2a:5e:0e:f6:f8: 50:cd:73:a0:a6:ed:ff:53:06:ba:31:d5:33:b2:6b: 7f:55:ad:bc:c9:3c:6d:57:eb:e5:2a:40:de:3e:52: e1:9a:09:a3:4b:83:60:07:7d:fb:a5:8a:d5:1a:67: 5b:ae:1e:3e:2c:bb:f8:97:9b:d6:f7:97:99:d3:94: 19:c3:fd:1e:a8:e5:e2:74:44:c8:bc:aa:d6:1c:ef: 38:b1:13:d7:33:23:be:85:c4:1f:48:0a:5e:d8:70: 33:b7:64:37:e3:41:52:5a:40:40:2f:f8:94:8a:30: 7e:fb:b6:39:41:db:80:66:e7:ba:e6:35:b1:2a:d8: c3:68:a2:2a:52:b2:91:f1:3f:91:00:30:f6:66:2c: 24:3c:8a:45:5b:11:b5:ef:84:4b:f6:f4:bb:ab:c3: 25:2c:6d:19:4b:7a:bd:42:4c:2f:9e:dd:d1:88:65: fc:2c:36:d6:d9:1b:5f:5a:de:24:2f:11:3f:d2:ab: b6:b6:ba:cc:34:03:eb:6b:4e:1a:8e:ff:60:f7:e1: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209192 Signature Algorithm: sha256WithRSAEncryption 03:1b:dc:f0:e6:e6:c1:43:ae:00:02:92:10:90:8f:66:67:bb: 49:ca:7f:5c:44:64:0f:d3:8a:bc:dd:46:35:2f:29:5f:2d:19: 63:e2:5c:d4:81:ff:aa:c1:3f:4e:97:fc:16:77:69:79:e2:f3: 54:6b:b2:a6:97:c4:da:fb:03:fe:b7:f4:2a:aa:11:92:ff:e2: c3:76:97:7a:1e:0a:9b:89:55:04:18:37:ce:7a:d6:da:57:09: d5:1f:49:24:a9:c4:ed:04:58:e1:05:3d:4f:11:81:2a:9e:80: 87:fd:76:e1:01:83:80:7f:00:05:a1:fc:71:fb:4f:5f:22:38: da:9f:4c:45:85:35:d3:22:47:d3:34:fa:71:9e:75:cd:84:70: 94:6b:d1:86:72:3c:e2:02:61:3a:bd:93:f9:62:7d:1d:8f:13: 7c:46:04:f8:a3:f1:2c:33:0a:a2:5a:2e:06:8b:ef:04:ad:dd: e8:86:73:a4:67:7b:45:6a:e0:ad:5c:60:7b:3e:fb:00:5f:2b: 7a:53:16:51:e2:3d:33:47:e2:ff:68:8b:94:c0:bd:06:ba:05: 54:9b:da:2c:1c:7e:2b:e1:ec:22:b7:a1:2f:32:0a:01:10:6b: 3b:9e:0a:2b:b0:1c:d4:a0:4f:91:16:c8:35:9f:62:2f:65:e9: ff:88:7b:22 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57D1sfKMYXsGgh7wpOI41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjIzYjg3NDAyYzQ2OGFkNjI3MmMzN2JlZDg4ZTVjZGM2ZTRjMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8w1Klh104MdxEejuLfSJMR9oMaW wNFHIZUcEM6XrcPNTH1gM+RzXm47lC9ZibHJK1c3qUXSKl4O9vhQzXOgpu3/Uwa6 MdUzsmt/Va28yTxtV+vlKkDePlLhmgmjS4NgB337pYrVGmdbrh4+LLv4l5vW95eZ 05QZw/0eqOXidETIvKrWHO84sRPXMyO+hcQfSApe2HAzt2Q340FSWkBAL/iUijB+ +7Y5QduAZue65jWxKtjDaKIqUrKR8T+RADD2ZiwkPIpFWxG174RL9vS7q8MlLG0Z S3q9Qkwvnt3RiGX8LDbW2RtfWt4kLxE/0qu2trrMNAPra04ajv9g9+FyiwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCsjuHQCxGitYnLDe+2I5c3G5MBhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzg1NDY2 MC01ZmE2LTQyN2UtYTVlOC02NTRkYThiNDA3MTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvODU0NjYw LTVmYTYtNDI3ZS1hNWU4LTY1NGRhOGI0MDcxNi8xL0t5TzRkQUxFYUsxaWNzTjc3 WWpsemNia3dHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxKDANBgkqhkiG9w0BAQsFAAOCAQEAAxvc8ObmwUOu AAKSEJCPZme7Scp/XERkD9OKvN1GNS8pXy0ZY+Jc1IH/qsE/Tpf8FndpeeLzVGuy ppfE2vsD/rf0KqoRkv/iw3aXeh4Km4lVBBg3znrW2lcJ1R9JJKnE7QRY4QU9TxGB Kp6Ah/124QGDgH8ABaH8cftPXyI42p9MRYU10yJH0zT6cZ51zYRwlGvRhnI84gJh Or2T+WJ9HY8TfEYE+KPxLDMKolouBovvBK3d6IZzpGd7RWrgrVxgez77AF8relMW UeI9M0fi/2iLlMC9BroFVJvaLBx+K+HsIrehLzIKARBrO54KK7Ac1KBPkRbINZ9i L2Xp/4h7Ig== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:13 2026 by rpki-client