This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer File: kLCsKbEI83Ixb79OqT4UhzGkxOk.cer (raw, json) Hash identifier: CgfRC76MTeFXcMR7MFJsoRyF5MFwUTJj0vpDUGSBjlQ= Subject key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791137F8AFD1E5B97B6B5D134F891707 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48480 IP: 91.211.48.0/22 IP: 193.107.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:37:f8:af:d1:e5:b9:7b:6b:5d:13:4f:89:17:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:cc:1c:a5:fe:43:70:bc:9e:cb:d5:f3:67: 89:90:70:d8:07:12:b9:bb:84:e1:63:fa:31:20:10: ce:36:1c:c4:51:98:f5:aa:51:33:07:23:b8:f7:f3: 6c:7b:39:7a:97:d6:b3:f0:87:a2:34:a2:b3:87:a9: 39:2f:45:eb:8c:e0:20:80:69:18:c2:66:99:ae:aa: 8b:4e:aa:31:f1:5f:4a:de:bd:2e:6b:ca:90:c6:27: 65:cf:0c:86:22:f4:b8:15:da:c3:70:ad:80:11:eb: 1e:ea:11:72:a8:95:13:94:cf:74:19:03:37:ff:40: 03:6d:14:eb:b3:14:f4:9b:2a:09:de:9c:5c:3c:59: 3d:2d:e6:54:93:1d:2a:fc:c8:08:4e:c8:e2:e5:ce: 1c:18:52:72:40:43:f6:43:1c:ea:e0:44:5b:77:4a: e2:6e:97:4f:7a:11:2e:39:e1:6f:bd:52:6a:5e:e4: b0:b6:9b:0a:5a:9c:fe:c6:f0:e3:50:14:6d:65:bb: 07:10:1c:3e:ae:e3:59:c8:d1:4a:07:82:65:bd:f5: 89:41:99:35:8a:ee:90:a8:78:36:0a:83:46:20:b8: 5c:70:1c:f0:3b:5c:e6:a2:5f:07:15:bc:c7:bd:d5: 00:19:6c:f8:ee:f3:04:42:8f:fe:27:51:f0:0c:5a: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.48.0/22 193.107.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48480 Signature Algorithm: sha256WithRSAEncryption 0a:84:0c:0e:cd:eb:36:d2:62:34:71:3e:39:ab:1f:fb:90:19: 3b:51:17:ca:69:b2:c2:e2:79:5d:10:54:dd:5f:ea:ca:ff:b5: 6a:38:b8:43:11:e2:c3:60:a4:ef:07:6d:78:12:e4:5b:d5:2e: 5d:f2:e4:4b:3b:3a:d7:7b:79:84:32:22:e9:9b:da:ea:6a:cc: 20:44:9a:51:32:c7:2f:6f:ef:5e:4e:e3:6b:db:98:94:40:4e: f1:5f:5e:67:2b:d6:1d:7b:2b:2c:c2:50:28:72:a9:9f:b1:ec: f5:09:9e:db:76:d1:4f:a1:6e:28:c5:05:fb:b4:aa:0f:6e:59: 12:f3:2a:28:71:51:14:2c:44:73:b3:de:4b:7a:45:eb:6c:21: a7:05:54:df:be:ef:a6:94:90:6f:58:39:19:2d:30:b5:d5:00: e1:3b:fd:e3:91:2e:12:d9:24:e8:93:87:ed:33:9c:9f:34:13: 90:a6:53:ff:89:7f:9f:6f:b3:8b:23:14:f7:af:26:60:91:02: 37:47:dd:13:a9:69:f0:42:78:e1:85:9e:c7:a0:80:05:74:e8: 65:c4:fa:a5:a9:42:40:1c:b8:fe:c8:f5:91:ec:b8:8b:48:b9: 3b:54:6c:70:4c:ed:5a:72:03:41:86:fd:96:77:17:5c:ea:47: 55:7f:1e:8b -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5ETf4r9HluXtrXRNPiRcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGIwYWMyOWIxMDhmMzcyMzE2ZmJmNGVhOTNlMTQ4NzMxYTRjNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJPMHKX+Q3C8nsvV82eJkHDYBxK5 u4ThY/oxIBDONhzEUZj1qlEzByO49/Nsezl6l9az8IeiNKKzh6k5L0XrjOAggGkY wmaZrqqLTqox8V9K3r0ua8qQxidlzwyGIvS4FdrDcK2AEese6hFyqJUTlM90GQM3 /0ADbRTrsxT0myoJ3pxcPFk9LeZUkx0q/MgITsji5c4cGFJyQEP2Qxzq4ERbd0ri bpdPehEuOeFvvVJqXuSwtpsKWpz+xvDjUBRtZbsHEBw+ruNZyNFKB4JlvfWJQZk1 iu6QqHg2CoNGILhccBzwO1zmol8HFbzHvdUAGWz47vMEQo/+J1HwDFrdhwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFJCwrCmxCPNyMW+/Tqk+FIcxpMTpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzJmNjMy Yy1iZDU0LTQwMzYtOTBiNi1kMjUzY2QzZTdhMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMmY2MzJj LWJkNTQtNDAzNi05MGI2LWQyNTNjZDNlN2EzNC8xL2tMQ3NLYkVJODNJeGI3OU9x VDRVaHpHa3hPay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW9MwAwQCwWtgMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC9YDANBgkqhkiG9w0BAQsFAAOCAQEACoQMDs3rNtJiNHE+Oasf+5AZ O1EXymmywuJ5XRBU3V/qyv+1aji4QxHiw2Ck7wdteBLkW9UuXfLkSzs613t5hDIi 6Zva6mrMIESaUTLHL2/vXk7ja9uYlEBO8V9eZyvWHXsrLMJQKHKpn7Hs9Qme23bR T6FuKMUF+7SqD25ZEvMqKHFRFCxEc7PeS3pF62whpwVU377vppSQb1g5GS0wtdUA 4Tv945EuEtkk6JOH7TOcnzQTkKZT/4l/n2+ziyMU968mYJECN0fdE6lp8EJ44YWe x6CABXToZcT6palCQBy4/sj1key4i0i5O1RscEztWnIDQYb9lncXXOpHVX8eiw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:53 2026 by rpki-client