This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer File: kaBxUIM4JgVRpV8B_QcI_fXggoc.cer (raw, json) Hash identifier: crpWBaQbaU7TvDx53Sq8z/Exu6RPyHiNLIKE0hE51H8= Subject key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759308A485029283F6B42CB0DE27AA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8466 -- 8467 IP: 185.83.244.0/22 IP: 2a05:9ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:30:8a:48:50:29:28:3f:6b:42:cb:0d:e2:7a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91a071508338260551a55f01fd0708fdf5e08287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:46:53:22:d5:10:09:bf:b5:34:84:86:e0: 9f:b6:fb:b4:3c:09:79:82:7b:f9:fb:7b:9b:a9:93: fa:d8:c4:74:97:13:5f:73:af:cd:cf:d9:70:d2:8e: 85:8d:ea:43:f2:ed:b3:7b:29:e6:ee:9c:7b:61:4b: 43:8b:9a:93:ca:66:21:2b:d4:58:57:25:48:bf:35: c3:48:c1:40:41:25:35:01:a7:46:4f:ed:6a:aa:35: 85:39:96:cb:b6:4b:a3:5d:66:e6:dd:96:47:9c:a9: 04:49:66:ba:8c:c3:52:b7:af:f3:51:28:91:9d:68: ae:74:e1:e7:00:de:b8:a4:5e:f9:30:94:74:93:25: ca:3c:79:d7:12:34:41:1f:b0:02:05:77:5e:86:e4: 52:d1:44:d7:a0:7a:7e:58:ae:61:c2:d6:fa:ea:eb: eb:11:45:53:19:5e:cb:7a:9d:b0:e3:b9:55:69:2d: b9:0a:e6:96:ed:a4:e6:4c:19:1f:40:5f:96:b0:ef: a1:d6:ca:f9:7e:31:fd:32:6a:ea:30:73:a9:f5:3d: a0:4f:d3:ae:1f:82:bc:7a:68:b6:7c:32:f6:87:93: 44:0f:71:65:2a:f7:b9:5c:fe:61:08:6a:b7:59:25: 8e:f8:c5:b0:70:8d:c5:d0:7e:38:28:77:ad:28:42: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.244.0/22 IPv6: 2a05:9ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8466-8467 Signature Algorithm: sha256WithRSAEncryption 6f:d4:0e:f5:21:1f:ed:50:ff:52:23:1c:7c:09:de:bb:c0:bf: dd:6a:1c:62:bb:33:39:b9:fd:5f:f7:8f:52:a8:f4:60:1b:0f: 7f:db:33:f0:6a:62:28:73:fd:8d:9d:10:0d:0a:a3:d2:86:16: ce:42:c7:d2:7e:d0:fb:ce:a1:5e:35:77:d3:16:17:af:46:07: 87:6a:cc:01:27:f4:3f:03:fd:8e:c3:e4:90:13:97:ad:5d:c3: b7:87:54:ab:ba:5d:ca:48:27:b2:ea:f0:00:7c:18:80:2c:3b: a2:6c:d9:61:0b:d0:90:e8:db:0d:dc:a1:ee:36:2d:e1:8d:e1: 71:b5:f9:f6:e1:7c:9f:7d:e6:68:76:b3:34:09:b5:49:c2:5c: 86:55:74:ba:02:0a:b2:34:e7:a1:eb:6a:e1:17:b3:39:3f:fd: 04:67:c9:df:ec:f2:c2:69:00:c1:5c:bc:e7:fc:3d:41:6b:ed: 0c:95:55:97:01:94:e7:aa:a5:b3:64:cc:5c:38:55:8c:b3:ca: a1:35:ad:ae:08:65:0d:9d:fd:b1:ba:ba:8c:d1:c2:ed:86:e5: af:31:f6:4c:6c:1f:ff:33:7f:19:96:d5:18:0e:e3:f8:be:0d: 53:67:f6:3a:44:ab:2c:b3:fb:42:cf:41:97:e8:d1:5f:d8:eb: 63:1d:5c:4e -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3WTCKSFApKD9rQssN4nqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWEwNzE1MDgzMzgyNjA1NTFhNTVmMDFmZDA3MDhmZGY1ZTA4Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwhGUyLVEAm/tTSEhuCftvu0PAl5 gnv5+3ubqZP62MR0lxNfc6/Nz9lw0o6FjepD8u2zeynm7px7YUtDi5qTymYhK9RY VyVIvzXDSMFAQSU1AadGT+1qqjWFOZbLtkujXWbm3ZZHnKkESWa6jMNSt6/zUSiR nWiudOHnAN64pF75MJR0kyXKPHnXEjRBH7ACBXdehuRS0UTXoHp+WK5hwtb66uvr EUVTGV7Lep2w47lVaS25CuaW7aTmTBkfQF+WsO+h1sr5fjH9MmrqMHOp9T2gT9Ou H4K8emi2fDL2h5NED3FlKve5XP5hCGq3WSWO+MWwcI3F0H44KHetKEIRIwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFJGgcVCDOCYFUaVfAf0HCP314IKHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzE1Y2M1 Mi01MWVlLTQ2MGUtOWFlYi1lZTU1NTliMzY1OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMTVjYzUy LTUxZWUtNDYwZS05YWViLWVlNTU1OWIzNjU4Yi8xL2thQnhVSU00SmdWUnBWOEJf UWNJX2ZYZ2dvYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVP0MA0EAgACMAcDBQMqBZ7AMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAowCAICIRICAiETMA0GCSqGSIb3DQEBCwUAA4IBAQBv1A71 IR/tUP9SIxx8Cd67wL/dahxiuzM5uf1f949SqPRgGw9/2zPwamIoc/2NnRANCqPS hhbOQsfSftD7zqFeNXfTFhevRgeHaswBJ/Q/A/2Ow+SQE5etXcO3h1Srul3KSCey 6vAAfBiALDuibNlhC9CQ6NsN3KHuNi3hjeFxtfn24XyffeZodrM0CbVJwlyGVXS6 AgqyNOeh62rhF7M5P/0EZ8nf7PLCaQDBXLzn/D1Ba+0MlVWXAZTnqqWzZMxcOFWM s8qhNa2uCGUNnf2xurqM0cLthuWvMfZMbB//M38ZltUYDuP4vg1TZ/Y6RKsss/tC z0GX6NFf2OtjHVxO -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:06 2026 by rpki-client