This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer File: kKfL8X0LoKJqsBpkBgFBEUziudE.cer (raw, json) Hash identifier: 6Eiyt2oEbtxXDxqrzURPDzAAScdvl411KFrmvso1zEQ= Subject key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB413146E2EE4342A4B7CB2C0E1D88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8518 AS: 202756 AS: 206718 IP: 91.102.96.0/21 IP: 94.198.112.0/21 IP: 185.45.56.0/22 IP: 193.111.128.0/21 IP: 195.248.66.0/24 IP: 2a01:538::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:41:31:46:e2:ee:43:42:a4:b7:cb:2c:0e:1d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:8b:cd:d3:16:92:57:cb:eb:ca:3f:34:5d: 81:85:b5:24:c6:04:fc:8e:a4:84:36:ef:a7:ed:f9: e2:08:47:e1:72:3b:80:64:48:08:94:3b:12:bc:79: 07:32:6d:82:ed:84:6e:b4:01:b5:b5:f4:ea:3b:49: f5:db:9e:67:5d:c3:87:3f:4c:77:cd:67:72:8e:b1: a1:f9:fa:4f:71:63:0a:95:a7:04:a8:03:b8:d3:f3: 00:63:f2:74:60:df:77:9d:80:ee:b6:39:fc:2e:2a: 07:ec:d6:38:99:f5:92:8e:ad:86:de:05:3f:31:19: 9a:06:44:9d:95:11:33:b3:d7:4f:a5:91:f9:7e:bc: 8a:ce:47:2e:ac:a4:be:a1:48:69:6e:27:77:b7:f2: 55:f7:f0:23:46:bc:69:84:60:2a:27:08:fa:80:18: f9:93:44:6d:cc:bd:cc:c3:93:0c:ff:05:18:da:02: e4:e8:fe:c2:01:27:72:03:b8:5d:35:74:a5:9d:92: c4:06:f1:62:dd:22:dc:9b:a2:87:95:4b:9a:47:1e: be:db:95:13:36:c2:50:8b:51:2f:bc:0d:16:70:fe: c1:9e:b5:b0:87:a8:55:be:88:70:6a:58:e4:1e:13: e9:9d:aa:54:88:06:39:46:d3:dc:e7:29:13:15:01: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.96.0/21 94.198.112.0/21 185.45.56.0/22 193.111.128.0/21 195.248.66.0/24 IPv6: 2a01:538::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8518 202756 206718 Signature Algorithm: sha256WithRSAEncryption 19:84:fa:f6:7c:b0:35:50:89:22:2e:86:42:c1:6a:c9:ac:ec: 60:77:43:da:67:3f:12:fb:05:b3:21:0f:78:6e:0f:4c:8d:22: 12:a0:13:9a:d9:a9:46:25:2b:51:bd:e4:85:7b:5f:a6:19:a0: 48:1e:6c:21:29:0b:ec:8b:c3:b6:40:c8:4d:3d:b6:30:2f:79: f6:b1:05:08:8c:85:1f:59:74:b4:0f:49:55:68:ca:eb:68:8f: 39:de:e3:19:4c:54:07:df:47:08:d3:b3:6c:40:5f:5e:14:c9: de:56:cf:fa:0d:1c:63:63:9b:15:d5:67:47:32:d4:eb:17:5b: e3:39:71:64:3f:fa:de:5a:87:37:4d:e5:00:6e:c4:cd:ea:d6: 8b:9b:ef:c2:f4:c3:16:c8:bc:d0:ef:ae:86:12:8d:4b:b0:18: 2d:cc:21:a7:6e:97:3d:87:36:c7:0b:32:7b:50:48:d0:d9:ef: 69:ca:32:0f:2c:1a:67:52:e3:0d:3e:46:97:d3:20:61:85:c3: c3:18:3d:fb:f3:02:f4:e6:db:2c:07:8e:15:70:a6:df:aa:96: da:4e:da:4a:d9:5c:4b:b0:a9:43:c2:7c:4a:0c:52:c6:a2:99: dc:2c:53:ca:de:53:87:e3:fd:07:38:f6:d9:96:86:f9:aa:f5: f3:20:58:a1 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt260ExRuLuQ0Kkt8ssDh2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE3Y2JmMTdkMGJhMGEyNmFiMDFhNjQwNjAxNDExMTRjZTJiOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokOLzdMWklfL68o/NF2BhbUkxgT8 jqSENu+n7fniCEfhcjuAZEgIlDsSvHkHMm2C7YRutAG1tfTqO0n1255nXcOHP0x3 zWdyjrGh+fpPcWMKlacEqAO40/MAY/J0YN93nYDutjn8LioH7NY4mfWSjq2G3gU/ MRmaBkSdlREzs9dPpZH5fryKzkcurKS+oUhpbid3t/JV9/AjRrxphGAqJwj6gBj5 k0RtzL3Mw5MM/wUY2gLk6P7CASdyA7hdNXSlnZLEBvFi3SLcm6KHlUuaRx6+25UT NsJQi1EvvA0WcP7BnrWwh6hVvohwaljkHhPpnapUiAY5RtPc5ykTFQFgIwIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFJCny/F9C6CiarAaZAYBQRFM4rnRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzkwZWQ4 ZC1mOTFlLTQ0YjYtYTg0Zi1lZGZiZmVlNzBhZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvOTBlZDhk LWY5MWUtNDRiNi1hODRmLWVkZmJmZWU3MGFmNS8xL2tLZkw4WDBMb0tKcXNCcGtC Z0ZCRVV6aXVkRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDW2ZgAwQDXsZwAwQCuS04AwQDwW+AAwQAw/hC MA0EAgACMAcDBQAqAQU4MCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAiFGAgMDGAQC AwMnfjANBgkqhkiG9w0BAQsFAAOCAQEAGYT69nywNVCJIi6GQsFqyazsYHdD2mc/ EvsFsyEPeG4PTI0iEqATmtmpRiUrUb3khXtfphmgSB5sISkL7IvDtkDITT22MC95 9rEFCIyFH1l0tA9JVWjK62iPOd7jGUxUB99HCNOzbEBfXhTJ3lbP+g0cY2ObFdVn RzLU6xdb4zlxZD/63lqHN03lAG7EzerWi5vvwvTDFsi80O+uhhKNS7AYLcwhp26X PYc2xwsye1BI0NnvacoyDywaZ1LjDT5Gl9MgYYXDwxg9+/MC9ObbLAeOFXCm36qW 2k7aStlcS7CpQ8J8SgxSxqKZ3CxTyt5Th+P9Bzj22ZaG+ar18yBYoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:13 2026 by rpki-client