This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer File: kFFjeaBC33RF5C77NkbR8lpn1QQ.cer (raw, json) Hash identifier: cOFFfbmlOK/vfD078R+1JU2EErtELAmLB4jCDHj2DxI= Subject key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C89C6C04026481A8E65A34D4C0AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198348 IP: 91.233.230.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:9c:6c:04:02:64:81:a8:e6:5a:34:d4:c0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90516379a042df7445e42efb3646d1f25a67d504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:66:d2:22:10:2b:23:60:be:60:08:9e:2b: c6:1c:80:63:b7:b9:a8:1a:3b:61:75:c6:43:d6:98: 8c:4c:26:67:da:3c:e7:b2:af:69:d9:dc:07:89:1c: 18:8d:2e:6e:76:68:f7:cc:e5:e2:9f:2d:69:5c:47: 68:b8:78:14:ca:89:f7:50:2b:3d:18:7a:d6:9e:4a: 06:a6:bd:a2:2e:6a:86:a4:b5:bd:48:77:03:7f:98: 97:a1:52:5e:2c:6c:b4:07:a1:c2:c1:0a:fa:c2:84: 42:9b:90:28:c0:70:80:a7:02:ee:2c:aa:36:12:d5: 20:45:bf:14:98:be:a5:cb:48:65:01:a4:69:9c:69: 6e:6f:65:ad:ea:7e:9c:b6:e3:7e:de:e8:2c:cf:3b: 5d:17:98:09:fb:7b:d9:b8:3c:30:06:af:c7:b8:8b: 38:77:6f:3c:2b:e9:ab:6b:33:f5:6e:28:90:2d:9a: f5:7b:a7:36:53:99:46:fa:b5:02:37:e5:bb:9d:60: 3e:4a:b3:2d:7f:c1:b7:e0:56:e3:1b:e0:96:fc:10: e7:4a:56:8a:c0:4c:4c:c9:47:4d:7c:5b:f2:a5:e0: ae:3a:a4:17:17:da:33:d5:28:8d:d4:47:05:36:a1: 1e:0b:96:70:2a:0b:a9:d6:6d:48:bb:d3:ee:a3:7f: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.230.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198348 Signature Algorithm: sha256WithRSAEncryption 01:ce:a7:c6:c2:5a:56:bd:ab:c5:90:2f:25:e3:85:1e:4a:39: e8:f9:27:75:68:2f:31:28:22:47:58:28:ea:75:91:2d:85:74: 6c:f2:d6:e5:8c:77:5c:a9:73:4c:8f:e4:49:ac:73:a1:48:f2: fe:ec:c0:33:5e:05:f4:fc:06:f0:be:15:a8:9b:2c:81:d9:54: 8d:08:12:88:97:10:33:69:95:1a:95:9a:0c:2b:f4:81:66:1e: b2:2e:24:49:39:2c:5c:45:62:bd:c8:de:2e:af:87:6e:e8:0c: e6:2c:3e:5f:de:c8:45:4d:28:2a:4c:30:0f:41:25:b1:7d:d4: cb:46:75:a2:e1:4f:2a:ba:96:85:02:ac:81:e7:ec:a8:e3:e2: b4:07:f4:96:19:28:7e:e9:b2:60:72:15:e2:8f:b5:47:ec:74: b2:f6:12:23:1a:e3:c2:03:07:73:c1:53:98:a6:b6:89:fa:d6: 9d:ad:99:42:92:33:7e:8b:b2:b2:5a:ee:29:4f:fa:de:8b:39: 57:1e:ca:cf:47:de:fd:09:b6:60:40:fa:46:33:3f:0e:4b:46: 2d:31:61:11:1f:17:87:84:ff:ad:74:c3:8c:63:b3:cd:86:30: a9:50:3d:23:8e:65:60:75:31:7b:3e:eb:77:f9:0a:b9:93:a6: 18:2b:2c:19 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WMicbAQCZIGo5lo01MCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDUxNjM3OWEwNDJkZjc0NDVlNDJlZmIzNjQ2ZDFmMjVhNjdkNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i9m0iIQKyNgvmAInivGHIBjt7mo GjthdcZD1piMTCZn2jznsq9p2dwHiRwYjS5udmj3zOXiny1pXEdouHgUyon3UCs9 GHrWnkoGpr2iLmqGpLW9SHcDf5iXoVJeLGy0B6HCwQr6woRCm5AowHCApwLuLKo2 EtUgRb8UmL6ly0hlAaRpnGlub2Wt6n6ctuN+3ugszztdF5gJ+3vZuDwwBq/HuIs4 d288K+mrazP1biiQLZr1e6c2U5lG+rUCN+W7nWA+SrMtf8G34FbjG+CW/BDnSlaK wExMyUdNfFvypeCuOqQXF9oz1SiN1EcFNqEeC5ZwKgup1m1Iu9Puo3/E1wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJBRY3mgQt90ReQu+zZG0fJaZ9UEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2E1ZDk4 Zi1mYTdlLTQwMWYtODA4Zi00NGE5MWJhMTdiMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvYTVkOThm LWZhN2UtNDAxZi04MDhmLTQ0YTkxYmExN2IwOC8xL2tGRmplYUJDMzNSRjVDNzdO a2JSOGxwbjFRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+nmMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMGzDANBgkqhkiG9w0BAQsFAAOCAQEAAc6nxsJaVr2rxZAvJeOFHko56PkndWgv MSgiR1go6nWRLYV0bPLW5Yx3XKlzTI/kSaxzoUjy/uzAM14F9PwG8L4VqJssgdlU jQgSiJcQM2mVGpWaDCv0gWYesi4kSTksXEVivcjeLq+HbugM5iw+X97IRU0oKkww D0ElsX3Uy0Z1ouFPKrqWhQKsgefsqOPitAf0lhkofumyYHIV4o+1R+x0svYSIxrj wgMHc8FTmKa2ifrWna2ZQpIzfouyslruKU/63os5Vx7Kz0fe/Qm2YED6RjM/DktG LTFhER8Xh4T/rXTDjGOzzYYwqVA9I45lYHUxez7rd/kKuZOmGCssGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:22 2026 by rpki-client