This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer (raw, json) Hash identifier: e4kAIXiLpc+POhsrbd60jZl7+FnGK1fCXPIYEJT7gOM= Subject key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B4A30EE1AC9C4282FE3F66BE7373D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60939 IP: 213.134.24.0/24 IP: 2a13:5880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4a:30:ee:1a:c9:c4:28:2f:e3:f6:6b:e7:37:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:12:01:81:ab:49:f3:64:5c:bd:74:ed:ef: 3e:31:f3:47:95:7e:66:e9:7e:05:8b:c7:d8:e9:b2: 49:db:27:3e:c9:46:94:b8:e4:fc:70:69:e7:c3:8b: 29:80:1a:1a:b1:05:8f:41:98:33:03:a3:fc:9d:5c: 43:9c:cd:3e:39:49:fd:17:c3:88:dc:7f:e8:79:db: c1:0d:a7:18:7f:0c:13:fc:ae:0f:a2:61:5f:ee:e0: dd:a6:6b:4f:d2:be:e9:e2:e2:15:db:6e:e9:14:12: 4f:28:d3:1b:11:a8:15:b7:26:5d:54:ff:e8:07:80: 99:14:22:c8:3a:78:69:77:09:72:8e:1b:cc:85:2d: c8:a1:08:07:67:50:26:4e:0f:29:ee:1b:31:e2:97: 90:81:7d:c4:63:fb:f9:0a:2d:be:f1:7a:88:31:f9: 93:47:52:68:ba:a2:d7:90:5d:c9:30:8e:28:ab:53: d6:6c:26:ba:52:c2:39:08:8c:f0:78:9d:95:56:de: 57:91:68:76:ce:de:0a:90:0a:a5:44:d9:50:58:01: 91:2d:93:7d:f8:a6:61:0e:58:4f:c5:95:8c:6b:16: 55:be:e2:d7:c3:74:ac:6b:ac:33:ec:e2:2f:99:61: 87:82:72:21:bb:24:f5:4c:8d:d8:a2:ff:b2:a3:f1: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.134.24.0/24 IPv6: 2a13:5880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60939 Signature Algorithm: sha256WithRSAEncryption 97:6e:0c:7c:3b:45:2d:6c:9a:36:56:7c:41:c1:60:63:a3:86: 4f:f5:0e:46:0a:18:b3:81:18:28:fa:d5:48:49:24:24:cd:46: 71:2d:69:d7:93:b7:d8:6a:79:0a:30:d8:3e:80:74:7d:fb:fd: cb:69:cb:69:d6:d3:8c:d4:71:44:46:91:87:bd:a4:f4:b4:c9: 9d:c8:5e:c1:4a:50:b9:1d:c1:0a:d1:c5:e6:c3:ff:2e:d2:ca: cf:00:5b:16:57:a2:39:05:81:44:2c:11:b1:2b:7e:b0:6a:6f: 9e:23:e1:e7:2d:4a:f8:32:b8:85:d4:c4:a7:97:ec:0a:a5:1c: 8e:2b:54:02:c2:91:76:5d:8d:6c:b0:31:de:6d:c1:cf:23:a4: 6f:10:a3:99:67:27:76:60:56:cd:ec:d9:eb:f2:75:8e:13:a5: 8f:52:6d:c1:a8:7c:b7:59:3d:69:be:ea:89:e2:68:81:2b:3f: 98:40:0e:ef:65:b3:00:f2:8a:c8:1b:fe:45:e3:d8:a2:bc:ca: f2:48:2f:69:c4:84:e0:4a:92:88:af:c3:88:e3:08:2b:6b:b3: 08:e9:db:13:2a:aa:da:6e:d7:63:a7:58:b9:cd:b2:73:95:75: 91:a3:7f:12:e7:30:a2:2c:29:b7:36:c8:39:17:50:77:d8:59: 9f:2b:80:ee -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6W0ow7hrJxCgv4/Zr5zc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDUxZWJmOGMyOGY4MTdiN2YxNDhiZmM5NWNjMmI1YjRjYjMwMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArboSAYGrSfNkXL107e8+MfNHlX5m 6X4Fi8fY6bJJ2yc+yUaUuOT8cGnnw4spgBoasQWPQZgzA6P8nVxDnM0+OUn9F8OI 3H/oedvBDacYfwwT/K4PomFf7uDdpmtP0r7p4uIV227pFBJPKNMbEagVtyZdVP/o B4CZFCLIOnhpdwlyjhvMhS3IoQgHZ1AmTg8p7hsx4peQgX3EY/v5Ci2+8XqIMfmT R1JouqLXkF3JMI4oq1PWbCa6UsI5CIzweJ2VVt5XkWh2zt4KkAqlRNlQWAGRLZN9 +KZhDlhPxZWMaxZVvuLXw3Ssa6wz7OIvmWGHgnIhuyT1TI3Yov+yo/GTmwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJBR6/jCj4F7fxSL/JXMK1tMswCJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzc5YjU5 Ny02YjBjLTRkMDMtYmY0MC0zMTI0N2YzYTQ1MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvNzliNTk3 LTZiMGMtNGQwMy1iZjQwLTMxMjQ3ZjNhNDUzOS8xL2tGSHItTUtQZ1h0X0ZJdjhs Y3dyVzB5ekFJay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1YYYMA0EAgACMAcDBQMqE1iAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDuCzANBgkqhkiG9w0BAQsFAAOCAQEAl24MfDtFLWya NlZ8QcFgY6OGT/UORgoYs4EYKPrVSEkkJM1GcS1p15O32Gp5CjDYPoB0ffv9y2nL adbTjNRxREaRh72k9LTJnchewUpQuR3BCtHF5sP/LtLKzwBbFleiOQWBRCwRsSt+ sGpvniPh5y1K+DK4hdTEp5fsCqUcjitUAsKRdl2NbLAx3m3BzyOkbxCjmWcndmBW zezZ6/J1jhOlj1Jtwah8t1k9ab7qieJogSs/mEAO72WzAPKKyBv+RePYorzK8kgv acSE4EqSiK/DiOMIK2uzCOnbEyqq2m7XY6dYuc2yc5V1kaN/EucwoiwptzbIORdQ d9hZnyuA7g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:05 2026 by rpki-client