This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer File: kHpNEpJLU1fjAmev48XMc2QkEVg.cer (raw, json) Hash identifier: wKwrfAEneROttGRkZDjLkqbouBn3DFzl+jmIzlEj90s= Subject key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C687214F9C28CCC18A94F3917071B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211002 IP: 195.69.151.0/24 IP: 2a11:de00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:87:21:4f:9c:28:cc:c1:8a:94:f3:91:70:71:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=907a4d12924b5357e30267afe3c5cc7364241158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:e3:e8:fb:46:ae:85:62:80:18:6e:be:29: 40:74:9a:38:1a:35:95:07:1f:93:3e:cb:f8:d1:16: c6:bf:7a:16:55:db:53:d4:e1:cc:41:48:8e:23:f8: f3:fd:ae:5b:f4:59:55:73:05:0c:9e:3e:80:9a:03: 47:8e:d2:eb:0a:79:f7:a6:a7:a6:9d:93:5f:75:97: a9:ab:e4:2d:a4:9c:53:bf:01:28:8f:58:1f:6e:c4: 77:90:62:06:4d:85:ee:35:27:f6:43:fe:28:b7:d3: 6b:a2:65:f8:7d:a8:61:ea:c2:70:78:74:5b:ec:34: 78:d8:fc:9d:da:a8:cc:5d:e8:fb:cc:24:e7:1f:0e: a9:9d:6f:41:ab:4a:19:39:fe:b4:ae:0f:77:d2:c5: 9b:d0:d2:23:aa:7a:ab:64:de:db:02:27:ad:4d:8d: ad:b3:0a:0e:6f:a6:1d:f0:a0:76:69:f1:bd:78:2b: 11:6e:a8:81:f4:06:b2:3f:c3:a2:50:1c:89:07:7d: 7f:9c:61:31:c6:4b:ab:d9:bd:7c:f8:6f:98:e3:f3: fb:ce:98:c4:54:2c:7e:c9:a0:71:b4:54:be:0a:33: 3f:f3:78:eb:71:21:13:b6:05:e6:97:77:8d:7b:91: d8:93:60:c1:f2:42:9c:59:29:b1:0f:f0:e3:fb:1a: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.151.0/24 IPv6: 2a11:de00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211002 Signature Algorithm: sha256WithRSAEncryption 39:12:f5:17:a9:39:91:f2:e4:e6:14:45:34:44:19:bb:e4:6d: f7:61:6f:45:25:2d:3a:a3:68:42:14:2a:d4:cb:1e:b2:88:55: e6:10:1e:b8:37:fe:63:44:7a:01:c9:de:bd:50:5c:46:34:42: b8:d3:ff:85:96:36:af:03:da:57:32:bc:66:e5:71:14:fe:22: 6c:d0:93:a1:04:0d:42:ca:6b:56:ad:9d:e7:62:a5:2f:8a:8e: fb:43:d9:19:53:8c:04:3a:c1:26:b9:52:69:c4:86:c2:d3:36: 58:d7:e8:58:18:8d:1c:e2:f5:78:1b:41:65:e0:79:a3:d0:b3: 11:19:55:54:2c:84:16:88:32:bb:a3:94:81:bb:ee:8f:e5:94: d5:e8:02:95:9a:4d:23:bc:5c:5e:1f:68:bb:61:f6:fc:90:29: 0b:55:2a:55:8c:b9:57:42:92:53:a0:de:42:1f:a1:1d:ef:4f: bf:60:0d:63:6e:e2:10:88:18:2c:41:69:35:51:7e:fc:c4:e1: d3:71:bb:ad:d7:23:37:ab:f9:25:2d:55:e8:ae:06:62:83:7a: 39:02:dc:7f:10:be:c6:69:c4:6e:73:89:67:5b:86:c8:aa:37: 49:ea:3a:92:49:b1:07:cf:c8:34:cd:f5:7f:f6:ff:b2:f1:8d: b4:4a:0a:82 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xochT5wozMGKlPORcHG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDdhNGQxMjkyNGI1MzU3ZTMwMjY3YWZlM2M1Y2M3MzY0MjQxMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKPj6PtGroVigBhuvilAdJo4GjWV Bx+TPsv40RbGv3oWVdtT1OHMQUiOI/jz/a5b9FlVcwUMnj6AmgNHjtLrCnn3pqem nZNfdZepq+QtpJxTvwEoj1gfbsR3kGIGTYXuNSf2Q/4ot9NromX4fahh6sJweHRb 7DR42Pyd2qjMXej7zCTnHw6pnW9Bq0oZOf60rg930sWb0NIjqnqrZN7bAietTY2t swoOb6Yd8KB2afG9eCsRbqiB9AayP8OiUByJB31/nGExxkur2b18+G+Y4/P7zpjE VCx+yaBxtFS+CjM/83jrcSETtgXml3eNe5HYk2DB8kKcWSmxD/Dj+xq5WQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJB6TRKSS1NX4wJnr+PFzHNkJBFYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2FlZjQ0 Zi1jYmRmLTQxMjAtODRmMS02MjFhMmJiNDBjNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYWVmNDRm LWNiZGYtNDEyMC04NGYxLTYyMWEyYmI0MGM2Ni8xL2tIcE5FcEpMVTFmakFtZXY0 OFhNYzJRa0VWZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw0WXMA0EAgACMAcDBQMqEd4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4OjANBgkqhkiG9w0BAQsFAAOCAQEAORL1F6k5kfLk 5hRFNEQZu+Rt92FvRSUtOqNoQhQq1MsesohV5hAeuDf+Y0R6AcnevVBcRjRCuNP/ hZY2rwPaVzK8ZuVxFP4ibNCToQQNQsprVq2d52KlL4qO+0PZGVOMBDrBJrlSacSG wtM2WNfoWBiNHOL1eBtBZeB5o9CzERlVVCyEFogyu6OUgbvuj+WU1egClZpNI7xc Xh9ou2H2/JApC1UqVYy5V0KSU6DeQh+hHe9Pv2ANY27iEIgYLEFpNVF+/MTh03G7 rdcjN6v5JS1V6K4GYoN6OQLcfxC+xmnEbnOJZ1uGyKo3Seo6kkmxB8/INM31f/b/ svGNtEoKgg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:55 2026 by rpki-client