This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer File: KygwYXxDyMvImvPLKnTqXdAP5uo.cer (raw, json) Hash identifier: ugHAM8dW7SPbEJ2Kaw0b1GgrYz9GhZ274Z0yu+iA/Ns= Subject key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A27C09052F2F2AAAFF2D2DDC107B91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204758 IP: 185.240.228.0/22 IP: 2a0c:8e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7c:09:05:2f:2f:2a:aa:ff:2d:2d:dc:10:7b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:64:4b:7a:83:13:6c:55:d9:8b:97:63:14: ee:e3:10:dd:c2:1d:c7:67:87:05:cc:55:7c:ff:be: 43:e0:f6:3c:1c:42:f0:80:c7:aa:45:38:14:0d:54: 96:f1:b9:4a:95:1e:8a:28:06:99:8f:a4:8b:7a:cb: e7:a8:11:06:a7:b2:10:46:a3:e0:ab:71:47:29:8d: 61:37:04:c9:30:c4:59:f8:2c:91:9b:ab:c2:a2:09: 32:21:59:ab:92:87:f8:05:16:ea:86:5c:61:5c:5a: 7a:38:8c:3b:6c:e4:47:2c:e1:b1:be:4e:4b:ab:cd: fd:50:a6:4d:6c:18:42:fc:04:7b:bc:3f:a8:30:59: ec:9f:40:d0:69:49:82:eb:06:60:ca:08:a1:bc:47: 7f:42:34:8b:c4:ab:74:70:8a:62:05:ff:41:33:e5: 83:13:5a:03:47:e7:ec:4a:c1:bf:76:d2:c4:d1:e3: a4:29:d8:9c:2a:eb:36:af:6d:82:4e:38:aa:fe:c3: fc:19:88:71:9e:a5:4d:a4:3d:50:a8:3f:85:12:b3: ec:0d:69:f4:7d:65:1a:d7:05:ce:ce:1a:a2:59:1b: 56:67:8d:22:af:1a:b5:33:20:2c:fb:31:1a:3a:40: c8:af:c9:25:2d:5f:a7:05:cf:fd:b2:d5:21:09:8c: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.228.0/22 IPv6: 2a0c:8e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204758 Signature Algorithm: sha256WithRSAEncryption 76:ec:02:96:c0:65:06:3f:a5:0b:c0:b9:ea:09:2c:a8:ab:81: 31:24:63:63:b0:a1:24:36:93:f3:26:91:df:9e:d0:51:28:77: 46:46:e8:26:b1:29:bd:af:d0:fd:ba:a2:44:a9:d1:ca:db:ef: b2:f5:4b:78:10:84:97:80:6d:05:20:07:36:19:9a:8d:36:d1: 35:43:17:97:41:31:83:0e:23:2f:1d:60:7f:7e:dd:d6:9f:0d: 92:0c:6b:1e:c5:af:8f:59:cb:de:ae:8f:89:95:2b:19:69:59: b0:b1:90:c3:d2:3c:4e:bb:b9:ae:95:47:f9:b1:97:16:f5:ec: b5:a3:6a:eb:bd:3c:60:1d:16:98:1c:08:69:89:36:76:44:3d: 24:91:26:27:ed:be:23:4c:c5:cb:a2:58:51:82:a8:09:96:1f: 53:ce:0f:e4:47:1c:cf:a8:5c:e6:2c:87:3a:fa:11:20:1b:b7: a6:a3:7d:50:25:f2:70:01:f4:4a:c8:ad:d6:09:3a:13:73:bf: 77:c7:c6:b7:fd:35:39:1e:4c:e6:4d:4b:b7:d2:12:40:80:d6: c5:bc:d4:aa:14:3f:b5:b6:5c:14:02:11:64:c6:6b:00:cd:d6: b0:39:9e:e3:95:2e:63:5c:c6:3f:cd:e2:45:09:1e:be:47:0f: bc:1a:92:dc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4onwJBS8vKqr/LS3cEHuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjI4MzA2MTdjNDNjOGNiYzg5YWYzY2IyYTc0ZWE1ZGQwMGZlNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApttkS3qDE2xV2YuXYxTu4xDdwh3H Z4cFzFV8/75D4PY8HELwgMeqRTgUDVSW8blKlR6KKAaZj6SLesvnqBEGp7IQRqPg q3FHKY1hNwTJMMRZ+CyRm6vCogkyIVmrkof4BRbqhlxhXFp6OIw7bORHLOGxvk5L q839UKZNbBhC/AR7vD+oMFnsn0DQaUmC6wZgygihvEd/QjSLxKt0cIpiBf9BM+WD E1oDR+fsSsG/dtLE0eOkKdicKus2r22CTjiq/sP8GYhxnqVNpD1QqD+FErPsDWn0 fWUa1wXOzhqiWRtWZ40irxq1MyAs+zEaOkDIr8klLV+nBc/9stUhCYys7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCsoMGF8Q8jLyJrzyyp06l3QD+bqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2M5ZWU4 Yy01NzRkLTRjZjYtYTAwOC0xMWI1MmMyNGExMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvYzllZThj LTU3NGQtNGNmNi1hMDA4LTExYjUyYzI0YTExMi8xL0t5Z3dZWHhEeU12SW12UExL blRxWGRBUDV1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufDkMA0EAgACMAcDBQMqDI6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMf1jANBgkqhkiG9w0BAQsFAAOCAQEAduwClsBlBj+l C8C56gksqKuBMSRjY7ChJDaT8yaR357QUSh3RkboJrEpva/Q/bqiRKnRytvvsvVL eBCEl4BtBSAHNhmajTbRNUMXl0Exgw4jLx1gf37d1p8NkgxrHsWvj1nL3q6PiZUr GWlZsLGQw9I8Tru5rpVH+bGXFvXstaNq6708YB0WmBwIaYk2dkQ9JJEmJ+2+I0zF y6JYUYKoCZYfU84P5Eccz6hc5iyHOvoRIBu3pqN9UCXycAH0Ssit1gk6E3O/d8fG t/01OR5M5k1Lt9ISQIDWxbzUqhQ/tbZcFAIRZMZrAM3WsDme45UuY1zGP83iRQke vkcPvBqS3A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:44 2026 by rpki-client