This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer File: kDstfw0D26MMK2Kn71bsuzg0j0Y.cer (raw, json) Hash identifier: tezZ+IiAdARX9cA37/AAOncVj0rKGOmd8bK3n/vHEiY= Subject key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEC2E34CEA4A26BE9150696ACB70E5BA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 18:46:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213893 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:2e:34:ce:a4:a2:6b:e9:15:06:96:ac:b7:0e:5b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 18:46:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:6b:53:17:bb:11:6f:85:85:b2:de:d8:a0: 41:08:57:39:94:07:f6:85:82:4c:60:d3:57:fc:8d: e7:2f:df:76:b9:22:fd:cc:f7:20:6c:17:ab:da:50: 38:21:77:c0:1c:ca:48:74:39:3f:9b:0b:95:74:37: 2c:8a:d1:d4:3c:f8:bf:f3:19:6c:b9:ec:d6:61:85: 4b:79:2c:72:aa:ff:19:0e:96:67:49:34:c8:db:6e: aa:74:ce:63:ee:fd:92:a5:b9:61:33:d3:fa:be:75: 87:ca:35:41:fa:0c:0d:8e:75:0f:a2:38:69:a5:9f: b9:00:60:bb:46:eb:71:ba:8a:9d:ca:c0:17:69:02: b9:9f:e6:bb:27:03:3b:e4:08:dd:09:78:90:6e:a2: 58:20:41:10:97:2f:16:c3:a3:4b:f3:30:d4:6a:90: bb:b9:e6:76:3c:8e:71:d1:d2:95:4f:51:bf:16:a8: 8d:94:d4:15:f0:6f:2a:8c:c5:cb:28:dd:fa:8c:38: 8d:c5:cc:47:8e:c1:53:7d:d5:b5:48:37:71:01:e9: 04:e4:84:4a:c9:3b:34:c5:ae:33:67:3b:27:4b:ef: 49:f3:b1:45:75:42:5f:90:72:64:a8:d3:4a:fd:90: 54:5e:a8:b5:ec:0d:5d:9a:22:d8:60:6d:62:da:0d: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213893 Signature Algorithm: sha256WithRSAEncryption 2d:5a:ee:dd:22:a4:66:8d:23:de:42:bf:2c:c3:0f:ee:b5:b0: fb:f6:c8:6e:b5:c5:64:7a:f0:9e:fc:fa:e4:94:53:44:d4:e6: 55:10:ae:28:5a:f4:0b:69:d5:b6:3a:44:1e:4d:70:13:1b:b2: c9:9c:31:46:4d:12:df:dc:98:a9:88:c1:1a:f4:74:cf:84:e0: d4:2c:44:81:22:a7:1e:78:62:4b:de:7b:97:2c:a6:ec:b7:54: 77:d4:5d:89:0c:99:ba:d1:8a:8d:e7:e4:c8:d9:62:37:3d:09: cc:5f:24:6f:1f:a2:71:79:9f:a8:d4:48:83:05:ba:24:95:47: 0f:e8:8c:6f:e4:f9:a1:74:2e:39:d9:79:1c:38:07:4e:82:48: 57:7b:2c:26:d3:5e:65:68:37:55:da:0b:fb:bf:26:f7:05:fe: 1c:e4:ba:17:30:f7:d9:bd:78:06:bf:0d:66:a6:de:91:23:6c: 56:de:4b:a0:98:37:05:8c:ca:d9:ed:e0:cc:51:88:61:a3:e4: e4:20:a0:b8:d7:46:ef:94:78:74:61:c2:b8:2e:e7:de:db:24: f4:c5:5b:44:f9:c8:a7:3f:19:44:1e:92:80:8e:f8:f4:29:9b: 73:89:c2:f1:7f:37:38:25:69:1c:16:3f:dd:85:7b:f0:2b:d8: 0e:0d:06:07 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvsLjTOpKJr6RUGlqy3DlulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTg0NjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDNiMmQ3ZjBkMDNkYmEzMGMyYjYyYTdlZjU2ZWNiYjM4MzQ4ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuJrUxe7EW+FhbLe2KBBCFc5lAf2 hYJMYNNX/I3nL992uSL9zPcgbBer2lA4IXfAHMpIdDk/mwuVdDcsitHUPPi/8xls uezWYYVLeSxyqv8ZDpZnSTTI226qdM5j7v2SpblhM9P6vnWHyjVB+gwNjnUPojhp pZ+5AGC7RutxuoqdysAXaQK5n+a7JwM75AjdCXiQbqJYIEEQly8Ww6NL8zDUapC7 ueZ2PI5x0dKVT1G/FqiNlNQV8G8qjMXLKN36jDiNxcxHjsFTfdW1SDdxAekE5IRK yTs0xa4zZzsnS+9J87FFdUJfkHJkqNNK/ZBUXqi17A1dmiLYYG1i2g3DWwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJA7LX8NA9ujDCtip+9W7Ls4NI9GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzAyYmQ3 Yy1mZTM5LTQ2ZTktYmY3NS1jMDNjOWZkOGVkYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvMDJiZDdj LWZlMzktNDZlOS1iZjc1LWMwM2M5ZmQ4ZWRjMS8xL2tEc3RmdzBEMjZNTUsyS243 MWJzdXpnMGowWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNDhTANBgkqhkiG9w0BAQsFAAOCAQEALVru3SKkZo0j 3kK/LMMP7rWw+/bIbrXFZHrwnvz65JRTRNTmVRCuKFr0C2nVtjpEHk1wExuyyZwx Rk0S39yYqYjBGvR0z4Tg1CxEgSKnHnhiS957lyym7LdUd9RdiQyZutGKjefkyNli Nz0JzF8kbx+icXmfqNRIgwW6JJVHD+iMb+T5oXQuOdl5HDgHToJIV3ssJtNeZWg3 VdoL+78m9wX+HOS6FzD32b14Br8NZqbekSNsVt5LoJg3BYzK2e3gzFGIYaPk5CCg uNdG75R4dGHCuC7n3tsk9MVbRPnIpz8ZRB6SgI749Cmbc4nC8X83OCVpHBY/3YV7 8CvYDg0GBw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:38 2026 by rpki-client