This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer (raw, json) Hash identifier: xWowuF2CNx3iZEoX5uM9D+LfX7DF+FQvpTdxgIDW5MY= Subject key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C18A1383B496BC32E03E9FDBFF05A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205543 IP: 109.104.99.0/24 IP: 185.214.236.0/22 IP: 2001:678:168::/48 IP: 2a0b:af40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:18:a1:38:3b:49:6b:c3:2e:03:e9:fd:bf:f0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:f4:e0:f5:e4:17:90:77:6c:4f:13:87:87: 7b:87:38:31:41:bf:c0:81:5c:4f:b5:1b:d6:99:e1: 18:e1:f9:90:22:27:38:23:63:9a:48:89:45:91:8a: 13:bd:65:25:32:6f:9b:18:56:c8:ae:5d:78:f9:a9: ba:4d:d3:7e:60:67:d9:bf:c2:27:c2:53:37:d5:6e: 97:de:a6:b3:c0:94:fe:e0:16:62:36:63:4d:c8:f9: 03:4d:e9:ac:a5:bc:c4:e2:e2:79:c0:d9:bb:ec:c8: 2f:d0:bf:c8:49:8b:06:a9:9c:d4:36:b5:5f:b6:45: e3:48:09:95:74:a2:a3:d4:ea:26:f8:da:dc:09:21: 09:bd:60:ab:5b:a0:b5:00:31:56:a0:40:d8:15:9c: bd:1f:98:04:e7:d9:6c:5b:97:8a:8d:e5:e8:ee:77: bc:6e:91:3e:25:29:19:d1:db:fb:08:3d:3d:50:1d: df:8f:85:93:8a:02:c1:50:cb:1f:1d:5b:04:19:51: 6b:d6:71:1d:e1:60:86:ad:8d:7b:75:8e:09:14:2f: 45:01:74:c8:28:e0:9c:dc:08:15:e1:97:5e:c6:5e: f3:e9:cd:76:4e:e0:0d:ff:8f:fa:75:ee:ea:3f:91: e7:59:97:db:ce:35:11:3a:09:59:21:06:72:ad:0b: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.99.0/24 185.214.236.0/22 IPv6: 2001:678:168::/48 2a0b:af40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205543 Signature Algorithm: sha256WithRSAEncryption 94:d9:d0:a4:ab:84:f5:7f:c7:f7:2a:4e:ed:f8:ac:9c:2b:fc: a7:76:ac:a5:2e:61:ef:95:01:30:01:cc:0c:f4:95:c1:af:6d: d5:47:a0:59:c3:c4:b6:cb:26:c4:83:47:73:41:e8:61:c0:0c: 58:0c:d2:b3:e4:b0:ae:c8:c8:15:8a:83:31:53:75:1d:65:de: ca:fa:d2:a8:39:e5:57:83:6b:80:18:4a:a4:93:65:25:59:58: a6:5b:98:19:b6:2d:25:d9:ac:57:10:f9:2c:f5:64:c9:b0:24: cc:cf:a5:28:c6:fc:d3:74:8a:b1:9b:9e:c2:04:47:6f:d3:31: 71:ea:36:06:7e:08:30:a6:b7:64:dd:3f:39:f5:4a:ef:da:4a: 5c:6c:76:06:3e:14:07:68:29:70:a3:d4:6b:d6:fc:08:59:91: 39:c5:f8:db:00:f9:d8:e8:82:8e:83:aa:cd:4b:ec:fe:ad:85: f8:f6:20:d0:f3:3a:93:a4:c7:47:ab:7d:c5:34:c9:39:ab:b5: a6:94:dc:07:9d:cd:4f:ce:b4:ab:d0:09:f2:ef:4e:4b:5a:61: 11:83:12:6c:0d:7c:b0:c9:b6:c8:cf:e8:07:e0:c4:76:d6:91: b7:5d:dc:33:1f:96:49:ab:01:ac:ce:23:f1:cd:e9:35:70:a4: 50:72:e7:09 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt9XBihODtJa8MuA+n9v/BaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDhjNTczYzJkODNjN2Q4ZmQyYTNjZjlhN2Y1MzZmOTI5MjVhM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSn04PXkF5B3bE8Th4d7hzgxQb/A gVxPtRvWmeEY4fmQIic4I2OaSIlFkYoTvWUlMm+bGFbIrl14+am6TdN+YGfZv8In wlM31W6X3qazwJT+4BZiNmNNyPkDTemspbzE4uJ5wNm77Mgv0L/ISYsGqZzUNrVf tkXjSAmVdKKj1Oom+NrcCSEJvWCrW6C1ADFWoEDYFZy9H5gE59lsW5eKjeXo7ne8 bpE+JSkZ0dv7CD09UB3fj4WTigLBUMsfHVsEGVFr1nEd4WCGrY17dY4JFC9FAXTI KOCc3AgV4Zdexl7z6c12TuAN/4/6de7qP5HnWZfbzjUROglZIQZyrQtxtwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFJCMVzwtg8fY/So8+af1NvkpJaO9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzgzYzQx Ni03ZDlkLTQ0N2EtYWRkMS00ZTg1YmZkN2QwNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvODNjNDE2 LTdkOWQtNDQ3YS1hZGQxLTRlODViZmQ3ZDA1OC8xL2tJeFhQQzJEeDlqOUtqejVw X1UyLVNrbG83MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQAbWhjAwQCudbsMBYEAgACMBADBwAgAQZ4AWgD BQMqC69AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMi5zANBgkqhkiG9w0BAQsF AAOCAQEAlNnQpKuE9X/H9ypO7fisnCv8p3aspS5h75UBMAHMDPSVwa9t1UegWcPE tssmxINHc0HoYcAMWAzSs+SwrsjIFYqDMVN1HWXeyvrSqDnlV4NrgBhKpJNlJVlY pluYGbYtJdmsVxD5LPVkybAkzM+lKMb803SKsZuewgRHb9Mxceo2Bn4IMKa3ZN0/ OfVK79pKXGx2Bj4UB2gpcKPUa9b8CFmROcX42wD52OiCjoOqzUvs/q2F+PYg0PM6 k6THR6t9xTTJOau1ppTcB53NT860q9AJ8u9OS1phEYMSbA18sMm2yM/oB+DEdtaR t13cMx+WSasBrM4j8c3pNXCkUHLnCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:42 2026 by rpki-client