This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer File: kaEXOnDkH0WTVHZpraIvDX9o81Q.cer (raw, json) Hash identifier: Z8niKUjbN8JqTUdYS5EuTqYkDIUgRu7dKRFlpm+NL/k= Subject key identifier: 91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E379F81E809B889BD33818537C7F96A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209509 IP: 152.89.176.0/22 IP: 2a09:3340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9f:81:e8:09:b8:89:bd:33:81:85:37:c7:f9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91a1173a70e41f4593547669ada22f0d7f68f354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:a7:1d:5b:11:02:6b:b7:11:7d:32:70:35: 28:46:d9:04:e5:ff:15:e5:68:77:70:7f:6d:bc:9a: e0:93:47:c9:4a:52:82:95:99:19:a5:55:22:b8:2a: 4e:58:5b:b8:af:3a:b8:77:dd:d1:f3:ff:57:53:a2: 69:17:0b:17:7c:c3:a2:54:0e:57:ce:f6:1d:26:33: 06:c7:50:15:a9:53:be:61:17:b2:c5:3c:6d:19:86: 78:cd:15:65:b1:64:dc:17:ff:94:b9:a3:1a:c9:51: 2f:78:d0:f2:bb:1c:67:c1:49:24:c8:4a:4f:ea:8b: 6f:3f:56:21:8b:01:d7:6e:cd:ab:1b:81:6b:d7:8c: 45:87:8c:e7:77:42:03:3b:48:37:bb:f4:b9:f7:48: 0f:da:99:82:89:ce:f9:d6:54:eb:72:fe:e9:36:4d: 08:45:a9:03:ed:4f:e7:d6:15:50:97:d9:a9:5e:f6: 77:94:29:76:55:ec:d8:fc:19:db:97:c4:2c:6f:98: dd:ca:c7:a6:3e:11:56:23:1d:6e:f2:c6:7c:bc:77: fe:24:a9:7d:0a:b5:d0:54:88:77:43:05:2a:a9:ff: ff:99:7f:93:3e:a2:fa:35:89:c9:67:d8:e8:19:1d: fb:ec:cc:df:5b:58:97:b0:4f:7e:f6:1c:be:90:b4: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.176.0/22 IPv6: 2a09:3340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209509 Signature Algorithm: sha256WithRSAEncryption 57:6a:28:01:71:6d:ee:24:7d:f3:e6:68:ac:a4:c0:cc:e7:7b: 71:f6:70:0b:30:74:cb:f8:53:2e:48:5d:c2:27:f3:d7:d3:a7: db:ed:d3:da:ac:b0:50:09:bc:5f:a1:33:fd:61:cd:26:cc:51: ee:69:2b:07:f1:2d:81:11:16:52:1a:82:d3:4d:34:ae:b7:67: be:e2:46:96:d2:e5:e2:b6:53:2d:16:b3:e2:76:07:7d:8c:48: 50:6f:60:59:57:7f:f2:b5:fd:91:4a:89:33:df:5e:fb:fa:e5: 80:de:dc:f7:e1:c9:b8:36:42:1e:0b:1a:2e:f9:9d:8e:98:99: ff:ba:05:84:e8:c9:2f:a4:a1:e4:32:7f:19:7c:7f:e9:29:11: c8:65:58:1a:82:c9:0e:00:fa:fd:16:e8:22:c4:e4:d7:c1:c9: a1:e6:47:29:4e:0d:28:36:49:18:b1:b1:29:14:0d:18:a8:c6: 14:5c:97:07:d8:aa:2c:b0:4e:22:99:6b:d4:a8:41:d2:6e:da: df:ae:28:af:8b:0f:f5:1d:77:9b:32:2e:17:57:20:3b:96:fb: d6:bc:2b:f6:05:74:59:75:7a:84:ce:2d:d6:11:3d:fa:5a:0d: 4b:e9:5b:9c:13:7e:25:87:0c:b1:99:8d:79:59:b6:cb:14:9d: 4c:d6:1c:8c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N5+B6Am4ib0zgYU3x/lqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWExMTczYTcwZTQxZjQ1OTM1NDc2NjlhZGEyMmYwZDdmNjhmMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2GnHVsRAmu3EX0ycDUoRtkE5f8V 5Wh3cH9tvJrgk0fJSlKClZkZpVUiuCpOWFu4rzq4d93R8/9XU6JpFwsXfMOiVA5X zvYdJjMGx1AVqVO+YReyxTxtGYZ4zRVlsWTcF/+UuaMayVEveNDyuxxnwUkkyEpP 6otvP1YhiwHXbs2rG4Fr14xFh4znd0IDO0g3u/S590gP2pmCic751lTrcv7pNk0I RakD7U/n1hVQl9mpXvZ3lCl2VezY/Bnbl8Qsb5jdysemPhFWIx1u8sZ8vHf+JKl9 CrXQVIh3QwUqqf//mX+TPqL6NYnJZ9joGR377MzfW1iXsE9+9hy+kLTtlwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJGhFzpw5B9Fk1R2aa2iLw1/aPNUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzM0ZTUz Zi02NzU5LTRjZjUtOTgwMS01ZDYzMGUyMDNmZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMzRlNTNm LTY3NTktNGNmNS05ODAxLTVkNjMwZTIwM2ZkNS8xL2thRVhPbkRrSDBXVFZIWnBy YUl2RFg5bzgxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCmFmwMA0EAgACMAcDBQMqCTNAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMyZTANBgkqhkiG9w0BAQsFAAOCAQEAV2ooAXFt7iR9 8+ZorKTAzOd7cfZwCzB0y/hTLkhdwifz19On2+3T2qywUAm8X6Ez/WHNJsxR7mkr B/EtgREWUhqC0000rrdnvuJGltLl4rZTLRaz4nYHfYxIUG9gWVd/8rX9kUqJM99e +/rlgN7c9+HJuDZCHgsaLvmdjpiZ/7oFhOjJL6Sh5DJ/GXx/6SkRyGVYGoLJDgD6 /RboIsTk18HJoeZHKU4NKDZJGLGxKRQNGKjGFFyXB9iqLLBOIplr1KhB0m7a364o r4sP9R13mzIuF1cgO5b71rwr9gV0WXV6hM4t1hE9+loNS+lbnBN+JYcMsZmNeVm2 yxSdTNYcjA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:48 2026 by rpki-client