This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer (raw, json) Hash identifier: WcLo+Vzk2N5MvPOICjCmgO8otQ9hQ+bjWc6EWgSy/c4= Subject key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B1CEF68865BDF1243FAA018951530 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200977 IP: 185.90.240.0/23 IP: 2a05:e5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1c:ef:68:86:5b:df:12:43:fa:a0:18:95:15:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9194b857c037a7d7cb0575e35823e5e28032bda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:26:a5:62:12:a6:7d:05:f7:d7:63:51:72:bf: bc:5d:3e:89:01:87:3e:cb:b1:08:cb:41:08:c1:d1: 56:1d:94:66:70:3e:2b:11:ba:eb:ab:43:76:a3:8d: 9b:c2:e4:3a:6a:fb:3d:20:fc:8a:e6:c6:a0:e8:62: 2d:03:48:3b:82:bf:71:ce:fb:90:e7:55:ad:40:d5: 9f:c9:85:0a:ee:38:1d:71:63:8c:7e:4c:12:30:ca: d4:32:d8:37:fb:3c:b3:ff:5f:d6:71:f0:12:7d:10: e6:e2:8e:2d:c9:a5:f1:58:2d:6f:f6:92:6b:df:1d: 2b:bd:0c:f1:c3:ff:5e:11:7f:be:25:31:ef:49:6f: 9d:ef:6f:79:f1:62:ce:b6:32:ed:46:31:bf:33:23: 41:01:04:d9:1f:bb:cf:e5:f9:be:38:ab:8f:6b:f6: c9:f7:be:4e:2c:cb:cf:b9:e5:90:e9:b6:62:b9:79: 21:a0:45:5c:da:81:38:19:4b:7d:43:81:8d:16:fd: b3:dc:04:4a:62:3e:50:ac:29:92:61:09:3e:1b:60: 84:8c:56:37:4a:a3:ba:dd:57:a3:db:2a:1f:1b:44: 32:5d:87:23:17:c6:76:9d:8f:ed:c8:7e:67:80:7a: a5:5e:d7:df:1e:86:c5:f5:13:de:80:71:4e:21:4c: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.240.0/23 IPv6: 2a05:e5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200977 Signature Algorithm: sha256WithRSAEncryption 94:96:7c:33:20:38:95:a2:7a:4e:69:a0:2f:4c:af:b5:1f:b8: 6c:6b:7a:e8:f2:eb:42:92:52:c8:42:7c:3c:e9:4d:7d:84:64: de:49:ee:34:4b:63:a6:09:72:14:a0:95:f9:a2:23:de:4c:b0: bc:6e:70:09:c8:72:53:c6:66:e3:ed:c9:7e:b4:3c:50:27:d1: 4b:0d:b3:24:0f:83:5b:a3:d1:3a:8d:be:06:e3:02:72:89:6c: 0a:24:6e:14:05:20:d2:a2:28:f9:22:86:84:23:bb:25:34:79: 46:34:9f:22:4f:6b:1d:d3:8f:df:da:f3:a1:f2:70:b8:35:0b: 3b:f9:24:06:fe:90:b4:54:e3:2a:e1:06:64:ce:67:1a:52:dc: 01:a3:88:8d:b4:99:35:a8:d6:5c:44:dd:d1:72:19:45:fa:a6: 40:6e:5e:5f:8a:8d:00:bc:94:e2:5a:7a:f3:c6:4e:dd:28:e3: ab:61:16:30:a2:29:8a:d2:59:36:de:94:41:d5:e6:1e:6e:54: 72:88:7c:51:61:87:80:ff:c9:59:0f:0c:99:7b:ec:b6:cb:89: 61:79:cb:1a:80:43:b3:ac:f0:38:53:45:84:f8:a1:d1:61:09: 38:92:a2:66:77:98:e8:16:0a:f0:73:82:d5:9b:56:8f:2b:6c: e2:5a:25:94 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9WxzvaIZb3xJD+qAYlRUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTk0Yjg1N2MwMzdhN2Q3Y2IwNTc1ZTM1ODIzZTVlMjgwMzJiZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SalYhKmfQX312NRcr+8XT6JAYc+ y7EIy0EIwdFWHZRmcD4rEbrrq0N2o42bwuQ6avs9IPyK5sag6GItA0g7gr9xzvuQ 51WtQNWfyYUK7jgdcWOMfkwSMMrUMtg3+zyz/1/WcfASfRDm4o4tyaXxWC1v9pJr 3x0rvQzxw/9eEX++JTHvSW+d72958WLOtjLtRjG/MyNBAQTZH7vP5fm+OKuPa/bJ 975OLMvPueWQ6bZiuXkhoEVc2oE4GUt9Q4GNFv2z3ARKYj5QrCmSYQk+G2CEjFY3 SqO63Vej2yofG0QyXYcjF8Z2nY/tyH5ngHqlXtffHobF9RPegHFOIUy6HwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJGUuFfAN6fXywV141gj5eKAMr2jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzM3YWM1 OS04NTI5LTRhYzktYmE0ZS0zYmY3ZDc3NzQ5YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMzdhYzU5 LTg1MjktNGFjOS1iYTRlLTNiZjdkNzc3NDlhYi8xL2taUzRWOEEzcDlmTEJYWGpX Q1BsNG9BeXZhTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuVrwMA0EAgACMAcDBQMqBeXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRETANBgkqhkiG9w0BAQsFAAOCAQEAlJZ8MyA4laJ6 TmmgL0yvtR+4bGt66PLrQpJSyEJ8POlNfYRk3knuNEtjpglyFKCV+aIj3kywvG5w CchyU8Zm4+3JfrQ8UCfRSw2zJA+DW6PROo2+BuMCcolsCiRuFAUg0qIo+SKGhCO7 JTR5RjSfIk9rHdOP39rzofJwuDULO/kkBv6QtFTjKuEGZM5nGlLcAaOIjbSZNajW XETd0XIZRfqmQG5eX4qNALyU4lp688ZO3Sjjq2EWMKIpitJZNt6UQdXmHm5Ucoh8 UWGHgP/JWQ8MmXvstsuJYXnLGoBDs6zwOFNFhPih0WEJOJKiZneY6BYK8HOC1ZtW jyts4lollA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:21 2026 by rpki-client