This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer File: kFTGmagd2WKohg8_sLfQM0Pev3Y.cer (raw, json) Hash identifier: yn7JVDbj5n8MD8reoNI4wfTqKzBH7aFVranPF9W2Buw= Subject key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3644277099278BAFD29DBBC7D64051 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49148 IP: 95.130.240.0/21 IP: 185.160.176.0/22 IP: 2a00:b140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:44:27:70:99:27:8b:af:d2:9d:bb:c7:d6:40:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d8:4b:0c:85:8e:84:f4:32:e1:5a:20:da:ec: e5:82:58:b9:df:83:88:4a:15:74:e5:2c:91:90:5f: 6f:5e:29:a8:8b:27:2a:11:93:e2:14:8c:91:a8:0b: 22:29:a9:b1:d5:f5:e5:cf:d7:0f:2f:4c:58:0b:50: c5:99:fa:38:91:8f:0e:90:dd:c9:c7:b2:f9:da:70: b5:38:33:84:4c:dd:b5:d5:80:39:9f:2b:f2:63:cb: 96:ae:69:b4:4f:27:f3:f7:1f:f7:59:30:d0:d0:81: 3c:88:c3:9d:08:fe:e8:e4:5d:a5:3e:7a:c0:ff:ab: 26:b2:ef:df:0b:b7:5e:fe:b1:f2:e2:64:94:e6:19: c0:ea:65:35:37:ce:56:d1:a4:85:d5:80:4c:63:8a: f7:d3:72:94:b2:fc:d5:6a:48:bf:87:58:97:07:bc: be:96:e0:17:94:3c:4b:54:87:bf:6b:da:f1:d3:86: 33:66:5f:a2:5c:7a:10:be:fc:07:bb:66:91:f4:1f: 26:42:ee:af:6d:62:5e:63:a5:45:e8:99:cc:ee:e0: 14:11:7f:08:be:9b:7c:70:22:ba:50:20:a1:ea:a0: 53:8a:81:8c:03:1f:fc:79:15:2c:55:7e:34:5c:d5: ee:13:20:da:d5:78:1c:8f:89:58:2e:68:0f:2b:34: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.240.0/21 185.160.176.0/22 IPv6: 2a00:b140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49148 Signature Algorithm: sha256WithRSAEncryption a8:fb:b9:01:a9:78:33:f5:71:db:f6:8b:1f:1b:6d:8b:f1:04: 5c:eb:79:c4:c1:bf:32:9e:94:ca:17:e5:ab:46:52:cc:33:d1: 1f:e9:26:cc:88:67:60:fd:fb:94:c5:11:29:23:9b:03:75:6a: 2f:56:d8:70:31:ee:0d:45:9f:02:84:56:e0:65:f0:5d:6c:77: b8:cd:3a:ae:08:ad:df:0f:b7:1f:c9:c2:ab:bc:b9:5b:b4:c9: 0a:08:5f:5b:ef:7c:4c:4a:e5:63:c8:1f:f6:7e:7b:35:21:46: 7f:f8:2c:87:0c:53:e3:cd:d7:54:2b:0e:30:39:c8:53:40:72: 9c:a6:be:2b:31:ab:e5:94:65:2c:90:82:a3:52:74:c0:ef:e7: 7d:b7:1f:76:b5:9a:cd:b2:43:97:a0:b4:8c:9b:16:01:28:ac: 7a:bc:41:f3:02:e3:dd:3f:03:f8:69:0d:ca:09:9c:19:b7:bd: f7:f2:71:b7:3f:8b:e4:ba:3f:53:fa:7e:04:ad:b4:5f:0e:09: a3:1c:da:90:96:85:e0:81:de:db:1e:ad:94:bb:3b:70:97:9a: cc:60:1a:d9:fd:45:be:e1:50:58:1e:4e:9a:04:06:03:92:99: f3:12:24:17:b4:64:38:b1:89:15:eb:13:5c:8f:d6:eb:44:15: a3:66:7a:da -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NkQncJkni6/SnbvH1kBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDU0YzY5OWE4MWRkOTYyYTg4NjBmM2ZiMGI3ZDAzMzQzZGViZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNhLDIWOhPQy4Vog2uzlgli534OI ShV05SyRkF9vXimoiycqEZPiFIyRqAsiKamx1fXlz9cPL0xYC1DFmfo4kY8OkN3J x7L52nC1ODOETN211YA5nyvyY8uWrmm0Tyfz9x/3WTDQ0IE8iMOdCP7o5F2lPnrA /6smsu/fC7de/rHy4mSU5hnA6mU1N85W0aSF1YBMY4r303KUsvzVaki/h1iXB7y+ luAXlDxLVIe/a9rx04YzZl+iXHoQvvwHu2aR9B8mQu6vbWJeY6VF6JnM7uAUEX8I vpt8cCK6UCCh6qBTioGMAx/8eRUsVX40XNXuEyDa1Xgcj4lYLmgPKzQ4ewIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJBUxpmoHdliqIYPP7C30DND3r92MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzY5ZWZh MS04Yzk5LTQ4ZjgtOTQzYy0yYjRhMTY1OTQyMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNjllZmEx LThjOTktNDhmOC05NDNjLTJiNGExNjU5NDIxMy8xL2tGVEdtYWdkMldLb2hnOF9z TGZRTTBQZXYzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDX4LwAwQCuaCwMA0EAgACMAcDBQAqALFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC//DANBgkqhkiG9w0BAQsFAAOCAQEAqPu5 Aal4M/Vx2/aLHxtti/EEXOt5xMG/Mp6Uyhflq0ZSzDPRH+kmzIhnYP37lMURKSOb A3VqL1bYcDHuDUWfAoRW4GXwXWx3uM06rgit3w+3H8nCq7y5W7TJCghfW+98TErl Y8gf9n57NSFGf/gshwxT483XVCsOMDnIU0BynKa+KzGr5ZRlLJCCo1J0wO/nfbcf drWazbJDl6C0jJsWASiserxB8wLj3T8D+GkNygmcGbe99/Jxtz+L5Lo/U/p+BK20 Xw4JoxzakJaF4IHe2x6tlLs7cJeazGAa2f1FvuFQWB5OmgQGA5KZ8xIkF7RkOLGJ FesTXI/W60QVo2Z62g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:15 2026 by rpki-client