This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer File: kP2KrhtuFZovqPA9ejGIoeGAcqA.cer (raw, json) Hash identifier: qU/LNvYQOrY0atj0lSuNJ9Fpon3Y9WG9vmlrw253cmQ= Subject key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC85F4BB1B8FE9E62CEA3A1034F714F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212073 IP: 91.209.16.0/24 IP: 2a0f:c440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5f:4b:b1:b8:fe:9e:62:ce:a3:a1:03:4f:71:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:02:ab:98:52:e0:45:5e:a5:97:54:79:f9: 49:97:96:c5:16:af:0a:7b:90:a1:10:42:02:a4:f1: 5f:79:c8:b2:b6:d2:fe:b3:cf:7b:0a:f8:ad:eb:f0: e7:e0:9b:fc:75:a0:3a:1b:35:96:ef:8c:01:47:9d: ad:3d:a3:26:44:f2:cf:20:a5:a5:b4:5f:a5:3d:7e: 63:1e:2a:00:88:d4:a9:96:d1:84:23:fa:9f:58:ca: 94:95:45:63:7f:11:e7:35:de:03:b9:d4:ba:46:f1: 19:81:f6:37:10:8c:8d:31:93:44:f1:3e:87:b3:04: e2:7d:b5:64:53:d1:05:b2:d4:9a:9b:45:28:9c:b7: af:16:ce:10:e4:f1:cf:96:7b:a5:8d:03:41:79:99: 62:8b:cf:1c:ef:7c:00:8d:5c:8d:52:db:95:d4:2e: 17:ac:d6:a8:c2:8a:d5:b7:d3:68:fe:cb:c0:55:7f: d1:f4:7c:1f:59:8f:9c:71:49:2e:28:69:e4:db:cb: 13:70:7c:56:79:72:10:20:94:b1:48:f3:57:15:dc: ec:fa:53:d0:db:34:f5:95:11:39:23:73:51:a0:fb: 63:fd:d6:b0:36:f3:84:cb:10:3d:64:23:a4:15:f6: 27:6f:83:d1:a6:66:e1:e9:57:26:03:80:ae:44:91: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.16.0/24 IPv6: 2a0f:c440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212073 Signature Algorithm: sha256WithRSAEncryption a3:2f:0b:7a:bc:d7:c4:01:6d:28:20:98:9f:86:18:fd:80:74: 68:b1:8c:69:17:6d:c4:93:3f:e5:d1:ff:01:36:3b:f4:6c:28: 99:ba:6f:30:52:2b:bc:12:e0:5d:59:13:56:07:38:d5:67:30: 07:a8:ac:d5:54:38:e5:f1:b2:fb:4d:1e:f5:a4:b7:07:2a:4f: 32:cc:8f:42:93:36:8c:c5:61:67:9d:22:ca:77:b9:fd:ee:a0: 11:87:f9:b5:d0:31:a5:f7:f4:9e:fc:cc:1c:11:55:d1:76:02: 38:35:4f:01:30:e0:41:20:cd:40:79:c1:cd:62:6b:ca:41:81: 85:a7:2f:5e:84:5a:53:f0:88:c6:89:e4:5f:b1:18:4c:9f:03: 3b:ec:19:fe:84:10:89:7d:26:54:f4:92:74:31:96:0a:89:23: 5b:42:b5:15:8f:79:65:8d:36:89:41:e3:dd:fb:cb:a6:b7:8e: bb:16:cb:c2:82:38:d6:4c:01:61:b8:f7:32:77:1d:e1:82:f6: 0a:14:27:40:2d:a0:99:81:37:a9:6e:04:e3:f4:e3:08:ad:88: 27:a8:28:05:8a:06:56:62:e4:97:8f:be:0d:2e:74:c7:a8:dc: 2d:38:9e:92:9e:5f:b0:3d:d4:ec:ce:27:c0:3f:90:e4:52:91: 00:d4:1c:18 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yF9Lsbj+nmLOo6EDT3FPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZkOGFhZTFiNmUxNTlhMmZhOGYwM2Q3YTMxODhhMWUxODA3MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/4Cq5hS4EVepZdUeflJl5bFFq8K e5ChEEICpPFfeciyttL+s897Cvit6/Dn4Jv8daA6GzWW74wBR52tPaMmRPLPIKWl tF+lPX5jHioAiNSpltGEI/qfWMqUlUVjfxHnNd4DudS6RvEZgfY3EIyNMZNE8T6H swTifbVkU9EFstSam0UonLevFs4Q5PHPlnuljQNBeZlii88c73wAjVyNUtuV1C4X rNaoworVt9No/svAVX/R9HwfWY+ccUkuKGnk28sTcHxWeXIQIJSxSPNXFdzs+lPQ 2zT1lRE5I3NRoPtj/dawNvOEyxA9ZCOkFfYnb4PRpmbh6VcmA4CuRJEbAQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJD9iq4bbhWaL6jwPXoxiKHhgHKgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzVkZmM3 Ni1lN2ViLTRkMzUtOGFkNy03OTkzNTkxMTEzZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvNWRmYzc2 LWU3ZWItNGQzNS04YWQ3LTc5OTM1OTExMTNlNC8xL2tQMktyaHR1RlpvdnFQQTll akdJb2VHQWNxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9EQMA0EAgACMAcDBQMqD8RAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8aTANBgkqhkiG9w0BAQsFAAOCAQEAoy8LerzXxAFt KCCYn4YY/YB0aLGMaRdtxJM/5dH/ATY79GwombpvMFIrvBLgXVkTVgc41WcwB6is 1VQ45fGy+00e9aS3BypPMsyPQpM2jMVhZ50iyne5/e6gEYf5tdAxpff0nvzMHBFV 0XYCODVPATDgQSDNQHnBzWJrykGBhacvXoRaU/CIxonkX7EYTJ8DO+wZ/oQQiX0m VPSSdDGWCokjW0K1FY95ZY02iUHj3fvLpreOuxbLwoI41kwBYbj3Mncd4YL2ChQn QC2gmYE3qW4E4/TjCK2IJ6goBYoGVmLkl4++DS50x6jcLTiekp5fsD3U7M4nwD+Q 5FKRANQcGA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:09 2026 by rpki-client