This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer File: _KHkSHz41KLZYd1iLz51Ab3CSCk.cer (raw, json) Hash identifier: RwX6eTgcNY4SRgpXFwaEsT0brob/VCTT7V2SF0sFigs= Subject key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDAE30021BE39990E0522AB753B47B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 92.42.202.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ae:30:02:1b:e3:99:90:e0:52:2a:b7:53:b4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:92:23:9f:01:01:14:50:1c:94:e4:0f:1e: 4b:ff:40:25:89:81:75:42:12:fa:20:31:27:9d:45: 0c:01:0d:d3:47:f8:43:f7:10:71:c4:a8:42:ee:55: 25:f2:5d:de:47:d3:67:ed:aa:1d:61:c4:0d:db:45: de:21:b9:fc:10:be:1f:b7:93:70:4e:84:4f:c6:55: 44:56:16:aa:e3:e9:dd:d0:c7:57:86:f9:2a:8f:98: 57:37:18:36:c4:ed:ea:a0:71:63:53:25:8f:8d:ce: dc:1c:61:4b:45:6c:25:74:36:cc:6a:44:31:ca:b0: 3f:5a:c8:b7:00:c2:31:cf:ac:6a:36:b1:71:19:3b: 9b:9c:ab:0a:d1:82:f6:50:ee:bd:69:4e:6e:e0:46: b4:dc:4e:e7:46:61:55:4d:3a:b1:b9:dd:b3:40:c0: 22:fa:b1:3c:97:d1:5e:22:d9:8c:d3:18:42:bb:04: 83:d1:cc:ab:ab:ac:9d:db:a1:fd:19:60:d6:85:9c: 68:f4:6c:3e:96:1e:93:3c:65:3c:dd:17:1a:8b:01: 82:9a:79:8f:bf:4e:0c:02:6b:4a:6b:3d:7c:32:e9: 7c:31:7b:23:48:c5:18:3f:83:4a:a1:f6:1b:d9:28: 87:ff:cb:1e:00:32:12:f1:88:ac:ab:c5:75:9c:6f: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.202.0/24 Signature Algorithm: sha256WithRSAEncryption 42:44:fa:3f:62:e1:46:13:c4:c5:f1:c0:0c:66:11:f3:e8:97: fb:f3:79:0b:ce:cd:98:57:c5:cf:37:06:c8:85:f6:f9:c9:e3: 9f:ba:03:99:8a:68:bf:5f:36:4a:b9:e3:87:c0:c7:74:1f:64: 59:4c:84:66:f2:fb:82:c2:5f:7c:7e:35:8b:bb:b6:b1:2c:56: 84:3e:37:c5:b6:be:88:93:7e:b3:f6:77:e3:d4:a2:12:92:6a: b6:4f:7d:21:3b:a9:7e:30:42:65:71:35:5f:46:2a:9c:b5:22: da:f6:b0:7b:83:2a:53:c7:6c:e1:f1:b4:b3:19:b1:84:db:a4: a3:45:f7:a1:ee:e7:ac:1e:a6:10:fd:18:d9:9e:46:07:d3:5d: 15:b9:5a:fb:20:6e:35:9f:9a:35:9f:4e:e8:3f:b9:a7:0c:cb: d2:1f:6b:f6:32:4d:9a:dc:b8:83:e4:39:09:6b:88:24:b6:c5: 39:02:fb:b9:f6:dd:0d:41:6a:cf:fc:ec:c2:7e:f8:37:42:20: c3:35:c8:fa:77:e7:e0:7f:eb:ee:45:71:3d:83:6c:27:ba:7a: 28:f1:62:e0:7e:b7:99:00:de:d8:3e:be:77:07:f7:9a:fd:b2: e6:03:e9:4c:64:29:41:c8:bc:4c:4d:f4:0f:ef:8c:39:f8:63: c7:32:fb:f0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87a4wAhvjmZDgUiq3U7R7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2ExZTQ0ODdjZjhkNGEyZDk2MWRkNjIyZjNlNzUwMWJkYzI0ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp6SI58BARRQHJTkDx5L/0AliYF1 QhL6IDEnnUUMAQ3TR/hD9xBxxKhC7lUl8l3eR9Nn7aodYcQN20XeIbn8EL4ft5Nw ToRPxlVEVhaq4+nd0MdXhvkqj5hXNxg2xO3qoHFjUyWPjc7cHGFLRWwldDbMakQx yrA/Wsi3AMIxz6xqNrFxGTubnKsK0YL2UO69aU5u4Ea03E7nRmFVTTqxud2zQMAi +rE8l9FeItmM0xhCuwSD0cyrq6yd26H9GWDWhZxo9Gw+lh6TPGU83RcaiwGCmnmP v04MAmtKaz18Mul8MXsjSMUYP4NKofYb2SiH/8seADIS8Yisq8V1nG9qJQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPyh5Eh8+NSi2WHdYi8+dQG9wkgpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzY3Mjk3 NC03MmIxLTQ0ZmQtODI2YS0xZTI5MmMwZTk1ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvNjcyOTc0 LTcyYjEtNDRmZC04MjZhLTFlMjkyYzBlOTVmMS8xL19LSGtTSHo0MUtMWllkMWlM ejUxQWIzQ1NDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAXCrKMA0GCSqGSIb3DQEBCwUAA4IBAQBCRPo/ YuFGE8TF8cAMZhHz6Jf783kLzs2YV8XPNwbIhfb5yeOfugOZimi/XzZKueOHwMd0 H2RZTIRm8vuCwl98fjWLu7axLFaEPjfFtr6Ik36z9nfj1KISkmq2T30hO6l+MEJl cTVfRiqctSLa9rB7gypTx2zh8bSzGbGE26SjRfeh7uesHqYQ/RjZnkYH010VuVr7 IG41n5o1n07oP7mnDMvSH2v2Mk2a3LiD5DkJa4gktsU5Avu59t0NQWrP/OzCfvg3 QiDDNcj6d+fgf+vuRXE9g2wnunoo8WLgfreZAN7YPr53B/ea/bLmA+lMZClByLxM TfQP74w5+GPHMvvw -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:36 2026 by rpki-client