This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer File: _KmLHQ7MzE9v8afn24S0uy9VsI0.cer (raw, json) Hash identifier: goQpPJTJLFVJkrD5LAwJY9UwpLM9VisHISYc4Pk9aks= Subject key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B790FFCAF227AA17AC909FCF1F288F9AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49219 AS: 50272 IP: 62.24.32.0/19 IP: 185.41.64.0/22 IP: 185.155.140.0/22 IP: 2a03:1400::/32 IP: 2a07:33c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fc:af:22:7a:a1:7a:c9:09:fc:f1:f2:88:f9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a5:2b:d9:e3:68:4e:f7:fd:7c:1d:d0:5e:39: 44:24:00:36:81:69:d9:5e:52:35:6a:a6:3b:ae:a2: 91:a9:e4:b7:5b:45:16:b8:e2:0f:0e:ee:8d:dd:7e: 73:7f:f3:69:7b:ef:22:e5:23:6e:cc:e3:ae:d2:c0: 28:7e:bc:b5:6c:7f:8b:3d:06:e5:fd:cc:df:98:2b: c5:60:20:eb:30:eb:38:e5:16:ff:c6:4c:33:1b:c6: 5d:92:c0:30:c5:ca:29:9e:9d:a1:73:4b:c6:bc:0d: 81:6c:bf:da:da:84:7b:18:ea:d0:63:9d:bc:b1:ba: 80:c3:a3:f3:07:9e:c4:62:0b:76:8f:4b:87:51:9a: f7:bc:50:94:ee:23:18:c8:73:31:af:64:3f:29:b8: 07:09:a5:67:c5:d3:aa:3c:17:b9:dc:8a:05:b8:f0: 7a:a1:36:39:b3:d5:f2:41:b0:1c:38:1c:31:86:a3: 78:21:84:a8:9f:83:34:e7:a0:81:6e:54:a3:51:45: c2:5b:0d:6c:39:bf:19:a1:02:18:28:fe:68:fe:6e: b2:89:c8:35:da:28:73:13:b7:c4:9d:97:ab:a2:c1: 9c:80:5b:37:74:28:d8:6a:a3:9d:6a:72:19:1e:51: 35:c0:19:6b:89:7e:dd:c7:f5:2f:a1:b8:8f:b7:31: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.24.32.0/19 185.41.64.0/22 185.155.140.0/22 IPv6: 2a03:1400::/32 2a07:33c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49219 50272 Signature Algorithm: sha256WithRSAEncryption 6a:f4:5e:ba:28:74:ef:c8:5e:f3:12:5e:b6:36:61:d4:8e:32: b3:04:b2:23:31:aa:15:11:16:d2:e6:eb:15:4d:0e:30:17:71: 92:e8:13:a1:e3:cd:67:80:42:e1:e9:0f:d7:ed:b9:8d:9f:ab: ac:5d:ca:ed:83:93:63:b8:a4:e0:80:60:3e:40:b6:1e:2a:e0: 40:69:8e:55:43:0f:13:cf:35:a1:b9:8e:ba:f1:d1:bd:b1:a3: e0:d7:89:7b:66:f0:97:1e:fe:de:b1:7e:0a:58:b6:2e:e0:08: 52:6d:93:86:d2:48:b6:8a:1b:4d:ca:ab:a9:24:7d:37:a3:57: 41:d4:fe:7f:0f:c1:63:66:00:59:5c:e1:1b:1d:ec:21:45:42: 17:67:67:c0:39:49:f4:98:84:52:66:68:9c:18:3d:66:f7:d0: e4:20:44:e6:b6:5c:a3:3f:50:f8:ba:88:ba:f0:a8:7f:88:c2: 9e:af:0e:e2:17:83:a7:64:a2:32:59:83:1c:0d:c3:fa:8e:ca: a6:bc:2a:ca:a0:de:a6:11:1d:25:ce:cc:de:7d:68:dc:23:d3: 21:0c:5e:69:7e:64:04:ae:4c:99:10:9d:6b:f7:2b:cf:c4:e6: 19:f0:7a:ac:21:0c:cb:07:0c:71:ff:f5:f0:2c:21:19:70:46: 9e:94:03:a6 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt5D/yvInqheskJ/PHyiPmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2E5OGIxZDBlY2NjYzRmNmZmMWE3ZTdkYjg0YjRiYjJmNTViMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Ur2eNoTvf9fB3QXjlEJAA2gWnZ XlI1aqY7rqKRqeS3W0UWuOIPDu6N3X5zf/Npe+8i5SNuzOOu0sAofry1bH+LPQbl /czfmCvFYCDrMOs45Rb/xkwzG8ZdksAwxcopnp2hc0vGvA2BbL/a2oR7GOrQY528 sbqAw6PzB57EYgt2j0uHUZr3vFCU7iMYyHMxr2Q/KbgHCaVnxdOqPBe53IoFuPB6 oTY5s9XyQbAcOBwxhqN4IYSon4M056CBblSjUUXCWw1sOb8ZoQIYKP5o/m6yicg1 2ihzE7fEnZerosGcgFs3dCjYaqOdanIZHlE1wBlriX7dx/UvobiPtzHYYQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFPypix0OzMxPb/Gn59uEtLsvVbCNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzk3MWU3 My1mYTgzLTQ1NzktODUzMi01OGYwZjMyNWMyYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvOTcxZTcz LWZhODMtNDU3OS04NTMyLTU4ZjBmMzI1YzJiOC8xL19LbUxIUTdNekU5djhhZm4y NFMwdXk5VnNJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQFPhggAwQCuSlAAwQCuZuMMBQEAgACMA4DBQAq AxQAAwUDKgczwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAwEMCAwDEYDANBgkq hkiG9w0BAQsFAAOCAQEAavReuih078he8xJetjZh1I4yswSyIzGqFREW0ubrFU0O MBdxkugToePNZ4BC4ekP1+25jZ+rrF3K7YOTY7ik4IBgPkC2HirgQGmOVUMPE881 obmOuvHRvbGj4NeJe2bwlx7+3rF+Cli2LuAIUm2ThtJItoobTcqrqSR9N6NXQdT+ fw/BY2YAWVzhGx3sIUVCF2dnwDlJ9JiEUmZonBg9ZvfQ5CBE5rZcoz9Q+LqIuvCo f4jCnq8O4heDp2SiMlmDHA3D+o7KprwqyqDephEdJc7M3n1o3CPTIQxeaX5kBK5M mRCda/crz8TmGfB6rCEMywcMcf/18CwhGXBGnpQDpg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:10 2026 by rpki-client