This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer (raw, json) Hash identifier: bXkzuU2VyGte0o5ghmhTfgaOEzM5LzINt4Z9GGZ0C20= Subject key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B363C23B99DFF77AA54E82219F6F076 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199441 IP: 185.14.128.0/22 IP: 195.192.236.0/22 IP: 2a03:a240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3c:23:b9:9d:ff:77:aa:54:e8:22:19:f6:f0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90afdcff7de3a65947631f92c67e272767194478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:c2:0f:0d:08:b4:9b:2a:29:33:d7:ea:b5: b2:e4:96:b2:7a:9c:7b:d4:32:f2:c2:d1:4d:0e:5f: 96:f6:cf:33:39:b2:f9:16:7e:a7:da:3d:b9:ee:4b: 97:84:15:c5:a5:8b:56:3d:e8:df:63:87:25:1f:cb: 18:db:df:ab:49:f0:06:f9:57:86:a3:27:19:88:ae: 3c:16:be:51:0f:5d:ba:dc:f5:9b:06:9e:20:ca:17: 98:2f:21:9f:61:f7:1e:f0:30:c0:f7:e9:d4:92:d1: 55:60:67:7c:23:ac:c1:52:ea:f3:ef:59:eb:29:b4: 3d:ad:05:57:89:44:94:41:1f:e2:0c:c0:de:6b:1e: 30:8e:83:43:47:21:ec:ba:f1:e5:0c:f4:54:e5:96: c4:6f:11:83:b9:08:a4:7b:f0:21:75:8d:c8:0b:02: 3d:3e:ba:f2:f0:07:cd:51:b0:fd:a2:7f:50:50:b0: 93:20:5a:e0:28:80:97:09:25:c0:ad:32:c9:f5:41: 06:0f:e7:6b:ef:b7:87:fc:22:a3:0a:af:71:e5:0e: 34:96:3b:da:cc:c1:04:26:57:03:b8:63:e8:89:2b: 98:94:aa:93:6d:fd:d7:d8:61:bf:88:5d:00:19:5a: 67:c6:62:10:26:e2:b8:0d:10:8d:73:66:b2:d4:9b: f5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.128.0/22 195.192.236.0/22 IPv6: 2a03:a240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199441 Signature Algorithm: sha256WithRSAEncryption 6c:b5:e6:9c:09:74:2b:7f:75:6c:f4:bb:33:ca:12:5c:b0:8f: 5e:db:48:94:fa:05:ea:b0:0a:c9:18:ba:11:0d:d0:da:be:10: d6:ff:4a:c2:2d:10:6a:9c:94:df:8b:7d:3c:51:15:00:7f:b2: 82:f6:ed:5e:7c:5c:45:72:ab:74:29:42:1d:ed:3b:b4:ac:f5: 49:86:a6:2e:85:78:97:1f:34:10:e2:31:56:b1:36:44:5c:33: 49:64:3c:b7:c0:91:27:f9:57:85:61:93:bb:fd:09:0c:cc:b6: f9:94:e0:94:0b:ff:4d:d4:00:af:c2:2a:b8:19:c4:29:3f:9d: 20:ce:0e:b9:b0:68:d1:82:2c:cc:66:88:9c:9a:c6:29:9c:32: b3:c6:c0:97:f4:79:28:af:02:ee:71:92:a4:41:6b:42:36:c4: 00:31:90:91:96:6e:a4:07:a9:2a:35:bb:b2:15:86:02:0f:6c: 9c:f7:c7:86:ee:43:86:c0:24:38:b8:e6:f2:e5:1a:81:1e:65: 96:1b:94:68:05:d7:34:fc:c3:02:15:9e:aa:3b:80:54:85:77: e0:67:c6:cc:b2:38:13:45:a6:20:23:ce:1d:38:f3:c6:22:c1: 67:47:42:23:0e:89:2f:f2:36:31:cb:45:dc:42:54:97:ce:00: 14:f2:d9:4b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NjwjuZ3/d6pU6CIZ9vB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGFmZGNmZjdkZTNhNjU5NDc2MzFmOTJjNjdlMjcyNzY3MTk0NDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKzCDw0ItJsqKTPX6rWy5Jayepx7 1DLywtFNDl+W9s8zObL5Fn6n2j257kuXhBXFpYtWPejfY4clH8sY29+rSfAG+VeG oycZiK48Fr5RD1263PWbBp4gyheYLyGfYfce8DDA9+nUktFVYGd8I6zBUurz71nr KbQ9rQVXiUSUQR/iDMDeax4wjoNDRyHsuvHlDPRU5ZbEbxGDuQike/AhdY3ICwI9 Prry8AfNUbD9on9QULCTIFrgKICXCSXArTLJ9UEGD+dr77eH/CKjCq9x5Q40ljva zMEEJlcDuGPoiSuYlKqTbf3X2GG/iF0AGVpnxmIQJuK4DRCNc2ay1Jv18QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJCv3P9946ZZR2MfksZ+JydnGUR4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2UwMGQx ZS00YTE4LTQ5NTYtODJhNC0xOTBhNWM4ZDlkOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvZTAwZDFl LTRhMTgtNDk1Ni04MmE0LTE5MGE1YzhkOWQ5NS8xL2tLX2NfMzNqcGxsSFl4LVN4 bjRuSjJjWlJIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuQ6AAwQCw8DsMA0EAgACMAcDBQAqA6JAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLETANBgkqhkiG9w0BAQsFAAOCAQEAbLXm nAl0K391bPS7M8oSXLCPXttIlPoF6rAKyRi6EQ3Q2r4Q1v9Kwi0QapyU34t9PFEV AH+ygvbtXnxcRXKrdClCHe07tKz1SYamLoV4lx80EOIxVrE2RFwzSWQ8t8CRJ/lX hWGTu/0JDMy2+ZTglAv/TdQAr8IquBnEKT+dIM4OubBo0YIszGaInJrGKZwys8bA l/R5KK8C7nGSpEFrQjbEADGQkZZupAepKjW7shWGAg9snPfHhu5DhsAkOLjm8uUa gR5llhuUaAXXNPzDAhWeqjuAVIV34GfGzLI4E0WmICPOHTjzxiLBZ0dCIw6JL/I2 MctF3EJUl84AFPLZSw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:45 2026 by rpki-client