This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer (raw, json) Hash identifier: Hi6ROWzjtJ99395PnQtoutDqWdD3BvoyPzuIxFX+Adk= Subject key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC8DD26570510B9B5089672B650D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202392 IP: 194.62.148.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c8:dd:26:57:05:10:b9:b5:08:96:72:b6:50:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90c3cae86555687324319d1226938c703ee4edc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2a:f1:98:25:c1:4c:7c:b5:ae:7d:ec:d7:07: b5:61:cd:36:c7:46:08:fb:a7:7f:fd:0b:69:0f:33: 71:fa:65:2f:ad:cd:c7:59:6d:75:28:37:84:83:fa: 1c:5b:9e:c2:56:53:40:77:91:fb:54:c5:75:68:87: 90:65:e6:b0:2c:7a:2c:44:35:45:f1:21:2d:00:26: e2:bd:d5:a9:37:6a:e1:96:1e:bc:4b:64:3a:5c:82: 28:b8:b4:5b:b7:ed:c6:0d:9a:f7:00:f7:bb:66:e0: 07:05:21:c2:71:55:04:64:2e:d0:c6:40:e6:eb:c6: a7:7f:07:05:48:03:14:14:a6:32:1a:52:66:ae:c4: cb:64:58:ae:8b:38:14:ff:70:5c:2d:bf:28:e2:eb: bf:ca:be:4d:d0:40:eb:f5:b6:ac:0b:86:a3:bd:5c: fc:dc:92:0b:3f:5a:d2:c6:c1:34:5a:f2:99:d2:61: e9:3f:bc:fd:9c:63:e6:ca:ef:20:2e:d0:e9:79:74: 88:df:56:2b:b9:22:b8:82:3e:31:3a:46:a7:a2:c6: 1c:7d:76:63:2b:0f:a7:56:75:e4:74:d4:40:c3:15: 9c:0e:85:ff:e9:c5:8b:87:d3:cf:58:4d:dd:a3:35: ee:c2:6c:f1:72:5b:89:96:53:9b:c4:9f:42:5f:8e: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.148.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202392 Signature Algorithm: sha256WithRSAEncryption a5:0e:bc:78:0a:b5:81:12:c1:b2:14:a7:57:99:90:6e:5f:98: 01:b1:20:1d:48:94:97:ba:c7:e8:2c:a5:c6:28:c8:ae:43:da: 4e:67:5a:24:ce:ab:b2:7f:da:e4:22:06:4b:a1:10:3e:e8:26: d2:0b:32:67:12:df:a5:2b:0f:ed:e2:7d:8e:a9:58:52:b5:3f: aa:0d:b9:fe:ea:b8:e9:f5:2f:68:cc:b4:f3:56:d2:56:ef:6f: dc:a6:a3:fa:70:f1:a1:0a:2f:72:83:96:03:55:05:8e:e0:3a: 70:56:5e:cc:db:24:55:de:ac:39:de:65:67:4d:12:85:fa:61: 56:32:43:60:c8:c1:39:f6:e0:84:46:b4:46:50:67:f9:30:e7: 4f:82:41:7a:a6:ae:d6:88:7b:b3:85:5b:56:e1:4b:5e:ae:41: bd:0e:d4:ea:03:b3:8e:41:6d:5a:8d:7d:81:a4:5d:66:7e:ba: 1e:3d:68:9b:5c:90:80:be:05:5a:d7:54:63:ca:ac:6b:9c:3e: bd:27:04:b5:8f:f4:1b:fe:f2:96:99:3a:d6:a6:42:15:2b:a5: a0:dc:33:47:7e:74:70:4a:34:e8:8c:f2:58:16:cf:51:01:5c: 00:f9:85:70:d2:ef:a9:90:c2:67:a1:e4:91:95:6e:c0:e9:5c: e9:78:4b:fa -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WsjdJlcFELm1CJZytlDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGMzY2FlODY1NTU2ODczMjQzMTlkMTIyNjkzOGM3MDNlZTRlZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SrxmCXBTHy1rn3s1we1Yc02x0YI +6d//QtpDzNx+mUvrc3HWW11KDeEg/ocW57CVlNAd5H7VMV1aIeQZeawLHosRDVF 8SEtACbivdWpN2rhlh68S2Q6XIIouLRbt+3GDZr3APe7ZuAHBSHCcVUEZC7QxkDm 68anfwcFSAMUFKYyGlJmrsTLZFiuizgU/3BcLb8o4uu/yr5N0EDr9basC4ajvVz8 3JILP1rSxsE0WvKZ0mHpP7z9nGPmyu8gLtDpeXSI31YruSK4gj4xOkanosYcfXZj Kw+nVnXkdNRAwxWcDoX/6cWLh9PPWE3dozXuwmzxcluJllObxJ9CX45bqwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJDDyuhlVWhzJDGdEiaTjHA+5O3BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzY0ZGIy NC1iYzM2LTRjYTEtYWIwMi1iMTM5YjJhM2ZlNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvNjRkYjI0 LWJjMzYtNGNhMS1hYjAyLWIxMzliMmEzZmU0OS8xL2tNUEs2R1ZWYUhNa01aMFNK cE9NY0Q3azdjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwj6UMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMWmDANBgkqhkiG9w0BAQsFAAOCAQEApQ68eAq1gRLBshSnV5mQbl+YAbEgHUiU l7rH6CylxijIrkPaTmdaJM6rsn/a5CIGS6EQPugm0gsyZxLfpSsP7eJ9jqlYUrU/ qg25/uq46fUvaMy081bSVu9v3Kaj+nDxoQovcoOWA1UFjuA6cFZezNskVd6sOd5l Z00ShfphVjJDYMjBOfbghEa0RlBn+TDnT4JBeqau1oh7s4VbVuFLXq5BvQ7U6gOz jkFtWo19gaRdZn66Hj1om1yQgL4FWtdUY8qsa5w+vScEtY/0G/7ylpk61qZCFSul oNwzR350cEo06IzyWBbPUQFcAPmFcNLvqZDCZ6HkkZVuwOlc6XhL+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:29 2026 by rpki-client