This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer (raw, json) Hash identifier: 5hqgkVkr5F9HVk/GUHARDqVr6Ecqv02qTw0xq1x7Zzg= Subject key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A28D7B066D44163F907F943D856546 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200727 IP: 185.98.68.0/22 IP: 2a00:7bc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8d:7b:06:6d:44:16:3f:90:7f:94:3d:85:65:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=913836859c6ce1869340edf1f273709b8094d9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:0b:b8:3c:b0:a8:74:ea:aa:5d:71:87:4e: e5:61:99:0b:58:f1:b8:64:e0:2b:b3:fa:dd:00:d8: 2e:7e:09:8e:39:a9:0a:da:eb:cb:f6:4a:8e:dd:56: 63:ea:13:f6:06:6e:bb:4e:fe:7b:78:b6:b1:4e:d0: fe:a5:e4:ba:e4:cd:f5:82:85:63:01:28:f0:58:a1: 2a:f7:92:15:b2:8f:6b:0e:63:9a:9f:2c:cf:18:a6: fb:79:9f:50:eb:67:2b:ae:77:7d:60:b2:c1:36:0f: 53:fa:22:24:40:60:07:66:fb:8b:81:38:75:9a:90: 4e:e8:db:6d:e8:3c:bb:91:2b:a1:2f:20:cc:9d:3b: 3a:cd:9b:61:de:58:ef:01:ce:74:d4:b2:b2:52:cc: 35:d7:00:9f:22:d3:13:a2:b0:f2:8e:ab:b2:fc:ae: f4:06:54:b7:96:1b:04:b4:7e:0d:4f:30:60:79:51: d7:3b:12:85:16:ad:9f:28:33:0c:67:f2:cc:f1:3e: bf:de:f4:0e:9e:3d:18:9a:8c:f0:0c:2a:54:46:00: c2:34:0f:a1:1e:67:a9:0e:4b:70:64:64:e7:24:f7: 03:fd:a9:98:09:cd:63:56:be:87:3b:d0:fc:5c:71: fa:91:be:dc:52:1b:99:1c:44:1d:fd:89:3d:cb:04: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.68.0/22 IPv6: 2a00:7bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200727 Signature Algorithm: sha256WithRSAEncryption 46:58:17:75:3a:36:57:dc:04:92:05:ab:49:6c:38:a2:41:54: 11:3f:f8:6d:29:20:a8:1b:f4:ea:aa:18:aa:4a:bc:00:83:05: 11:11:6f:0f:a5:fa:a6:5b:c6:34:0a:23:b7:1b:6d:9d:d2:48: 1e:f2:2c:98:c3:6b:14:17:fe:8a:0e:7e:00:83:af:28:9e:32: 14:3f:6d:32:80:8d:24:c6:77:e9:21:81:e8:cf:df:21:88:5b: f7:f1:8f:5e:11:48:b9:10:0f:48:13:00:0b:bf:54:06:b8:03: f3:bb:b9:d5:ac:c2:5a:a8:df:69:75:ab:87:36:8c:c8:80:4b: 3f:43:da:bc:e3:77:d5:87:62:b8:59:02:d8:38:a0:01:2c:e6: a2:6b:35:dd:43:af:a2:32:fe:74:2a:42:03:66:f6:08:a4:ba: 65:01:6b:b2:cb:5f:a4:4d:d0:22:8d:9f:d1:26:5c:3e:7c:47: 77:5f:75:4a:72:b8:4a:d4:7d:13:ed:9b:08:35:ad:e3:f9:bf: 32:ca:76:65:18:ca:cf:b1:84:25:bf:60:87:1f:46:d2:ef:8d: 98:59:18:e7:5b:99:87:ad:c2:40:f2:c6:c0:62:60:6f:76:d8: b1:fb:a5:c8:1f:87:3a:b3:d3:a0:0d:17:bc:0b:6a:00:87:2b: 5a:d3:ba:ce -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4oo17Bm1EFj+Qf5Q9hWVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTM4MzY4NTljNmNlMTg2OTM0MGVkZjFmMjczNzA5YjgwOTRkOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZgLuDywqHTqql1xh07lYZkLWPG4 ZOArs/rdANgufgmOOakK2uvL9kqO3VZj6hP2Bm67Tv57eLaxTtD+peS65M31goVj ASjwWKEq95IVso9rDmOanyzPGKb7eZ9Q62crrnd9YLLBNg9T+iIkQGAHZvuLgTh1 mpBO6Ntt6Dy7kSuhLyDMnTs6zZth3ljvAc501LKyUsw11wCfItMTorDyjquy/K70 BlS3lhsEtH4NTzBgeVHXOxKFFq2fKDMMZ/LM8T6/3vQOnj0YmozwDCpURgDCNA+h HmepDktwZGTnJPcD/amYCc1jVr6HO9D8XHH6kb7cUhuZHEQd/Yk9ywRMmQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJE4NoWcbOGGk0Dt8fJzcJuAlNnUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2U4ZjM0 NC1lZGIyLTQ0MDAtYjNjYS01MjdhYzU0YzIzNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZThmMzQ0 LWVkYjItNDQwMC1iM2NhLTUyN2FjNTRjMjM1Ny8xL2tUZzJoWnhzNFlhVFFPM3g4 bk53bTRDVTJkUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWJEMA0EAgACMAcDBQAqAHvAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMQFzANBgkqhkiG9w0BAQsFAAOCAQEARlgXdTo2V9wE kgWrSWw4okFUET/4bSkgqBv06qoYqkq8AIMFERFvD6X6plvGNAojtxttndJIHvIs mMNrFBf+ig5+AIOvKJ4yFD9tMoCNJMZ36SGB6M/fIYhb9/GPXhFIuRAPSBMAC79U BrgD87u51azCWqjfaXWrhzaMyIBLP0PavON31YdiuFkC2DigASzmoms13UOvojL+ dCpCA2b2CKS6ZQFrsstfpE3QIo2f0SZcPnxHd191SnK4StR9E+2bCDWt4/m/Msp2 ZRjKz7GEJb9ghx9G0u+NmFkY51uZh63CQPLGwGJgb3bYsfulyB+HOrPToA0XvAtq AIcrWtO6zg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:02 2026 by rpki-client