This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer File: kYKD14XMiO-FIIYqwWHye1YwvBQ.cer (raw, json) Hash identifier: AmQjfN+MKudb8l6YexDBBV9Aw2q5DBAWRGM4SxxSHhI= Subject key identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D1DBFF5A7BDA34385EF55C7E35D03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202739 IP: 2001:678:1e0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:bf:f5:a7:bd:a3:43:85:ef:55:c7:e3:5d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=918283d785cc88ef8520862ac161f27b5630bc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:3c:11:dc:07:6c:a6:33:44:40:ae:e5:d5: c2:ec:6d:94:12:43:ce:21:eb:16:ce:da:77:5d:a4: c3:a6:1d:03:0f:4b:a9:a4:db:ad:b5:be:26:6b:bd: b0:2c:91:b2:9d:b1:6d:8f:78:14:b3:63:13:26:db: cf:1a:0f:36:ea:49:b8:db:1d:39:aa:6e:35:9f:98: f4:7c:b1:80:79:43:eb:a8:43:0d:ce:26:e6:fb:3d: 46:ae:30:5c:6f:04:c9:e2:68:48:0b:18:f5:26:19: fe:89:8a:46:65:b2:fc:ca:a4:d8:24:d4:69:02:d1: d0:11:9f:c3:bb:02:cf:1b:bb:69:b0:cb:b4:3d:00: df:e7:b4:43:70:e8:0c:15:7b:2d:aa:ed:fa:86:eb: 5a:11:a1:a0:4e:cd:8d:5a:03:d1:3c:df:92:2c:d6: c8:c9:e2:9b:57:93:08:2a:f7:d8:5b:45:8c:57:51: 70:ca:f2:3a:38:c7:a9:eb:65:45:15:e1:5a:cd:0f: 6e:ec:34:88:d2:09:17:61:b5:0e:b5:1b:0e:cf:29: 73:37:21:4e:d3:e0:a5:0a:40:0b:81:ca:05:b2:72: 87:17:e8:e2:82:a7:31:83:53:a5:82:bc:c4:e1:d7: 05:df:29:c5:ac:8f:f5:6c:1e:54:c8:a5:0d:de:4a: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1e0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202739 Signature Algorithm: sha256WithRSAEncryption 21:ec:84:3d:d6:6e:8e:94:a9:03:37:62:e6:67:34:88:6f:cb: 95:5b:28:e3:a3:14:0b:57:0f:3c:66:e9:50:57:cf:fa:f9:16: 52:81:60:8a:3c:3d:c1:5a:8b:22:c7:98:bf:9b:4d:3e:43:7c: 76:86:a3:f7:f2:fc:a2:be:45:62:95:d8:44:78:56:26:30:8e: 23:d8:86:fc:b9:a5:d1:2b:e6:e8:93:04:c7:e2:5e:11:76:84: ab:39:52:41:b2:e6:7b:94:35:0b:e4:89:15:f0:bf:b6:6d:82: 89:94:39:bc:5b:28:96:ef:8a:61:75:5d:db:3c:57:17:1a:38: 34:00:5b:7e:c2:39:1a:c7:cf:d7:fa:cc:5a:ed:d4:e0:36:cc: fa:b3:2c:69:9b:a2:a5:8b:39:cf:ce:ba:ab:7d:72:50:31:6f: 85:1c:8e:5f:5d:4b:2c:74:5a:a8:a8:b2:77:73:7d:8a:4c:65: e1:41:e3:26:36:a3:54:32:a6:76:7e:f4:0a:01:68:56:67:17: 04:13:57:10:5f:6e:23:b2:a8:40:c5:39:bc:60:5a:21:36:20: bf:d6:bd:88:b6:8e:21:2f:af:a0:00:31:57:d0:7f:08:60:5d: 4b:43:ad:23:a4:b0:09:08:6a:0c:4a:ad:49:b2:c9:06:39:bb: 5f:7a:f6:bf -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9XR2/9ae9o0OF71XH410DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTgyODNkNzg1Y2M4OGVmODUyMDg2MmFjMTYxZjI3YjU2MzBiYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs108EdwHbKYzRECu5dXC7G2UEkPO IesWztp3XaTDph0DD0uppNuttb4ma72wLJGynbFtj3gUs2MTJtvPGg826km42x05 qm41n5j0fLGAeUPrqEMNzibm+z1GrjBcbwTJ4mhICxj1Jhn+iYpGZbL8yqTYJNRp AtHQEZ/DuwLPG7tpsMu0PQDf57RDcOgMFXstqu36hutaEaGgTs2NWgPRPN+SLNbI yeKbV5MIKvfYW0WMV1FwyvI6OMep62VFFeFazQ9u7DSI0gkXYbUOtRsOzylzNyFO 0+ClCkALgcoFsnKHF+jigqcxg1OlgrzE4dcF3ynFrI/1bB5UyKUN3krbeQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJGCg9eFzIjvhSCGKsFh8ntWMLwUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2NjYTQ3 Ni1hM2M4LTRhNjUtOGMwYy1mMzIyNjBlMDU3MDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvY2NhNDc2 LWEzYzgtNGE2NS04YzBjLWYzMjI2MGUwNTcwMC8xL2tZS0QxNFhNaU8tRklJWXF3 V0h5ZTFZd3ZCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAHgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMX8zANBgkqhkiG9w0BAQsFAAOCAQEAIeyEPdZujpSpAzdi5mc0iG/LlVso 46MUC1cPPGbpUFfP+vkWUoFgijw9wVqLIseYv5tNPkN8doaj9/L8or5FYpXYRHhW JjCOI9iG/Lml0Svm6JMEx+JeEXaEqzlSQbLme5Q1C+SJFfC/tm2CiZQ5vFsolu+K YXVd2zxXFxo4NABbfsI5GsfP1/rMWu3U4DbM+rMsaZuipYs5z866q31yUDFvhRyO X11LLHRaqKiyd3N9ikxl4UHjJjajVDKmdn70CgFoVmcXBBNXEF9uI7KoQMU5vGBa ITYgv9a9iLaOIS+voAAxV9B/CGBdS0OtI6SwCQhqDEqtSbLJBjm7X3r2vw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:31 2026 by rpki-client