This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kbDB4HajRpZoEluN05XzBN-i55Q.cer File: kbDB4HajRpZoEluN05XzBN-i55Q.cer (raw, json) Hash identifier: vTXkN5gLeg3vXLtq4K+hC0fgMBo//862b8Rvkq8Jjkk= Subject key identifier: 91:B0:C1:E0:76:A3:46:96:68:12:5B:8D:D3:95:F3:04:DF:A2:E7:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15363CA63E098F37CF6E97F0610BF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211743 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:36:3c:a6:3e:09:8f:37:cf:6e:97:f0:61:0b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91b0c1e076a3469668125b8dd395f304dfa2e794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:7a:b2:8a:f9:26:0e:69:2a:4f:02:76:f2: d1:c2:53:b1:d5:1f:85:8d:25:75:95:49:9c:06:f6: ac:40:6d:ab:e6:a5:8c:1c:50:44:09:cb:71:6b:8e: dd:99:96:d6:ce:dc:6e:08:32:db:07:6b:fd:5d:9b: 94:35:10:0b:44:77:13:e4:0b:46:f5:5e:8e:fc:d6: 19:b5:5c:48:d2:58:32:f1:9a:35:1f:b8:a8:4a:59: 70:9b:f4:d2:40:2c:8d:c2:8e:20:a6:f2:cf:d3:04: ba:9a:3e:a4:26:50:2a:d8:86:40:bf:de:f3:17:68: 9b:62:dd:96:9d:a1:d6:0d:1b:ee:99:8e:3f:45:c0: 5e:82:7c:84:fe:03:bc:8f:cd:dc:ee:d9:b7:43:a1: 70:3a:1c:5e:73:db:07:f8:96:dd:26:11:5b:6a:04: 40:a2:7e:1b:a4:28:b5:e0:30:bb:73:a5:c2:6c:c6: a0:90:32:04:d8:e6:0a:98:1e:48:83:da:a9:a7:70: 03:a7:3a:9b:2b:0b:6b:89:fb:dd:df:c6:ad:28:da: 89:b4:6c:55:34:40:03:b3:72:7e:fd:f3:d5:00:28: ca:40:0f:83:1e:c1:73:22:ea:b0:07:05:48:55:0b: c4:fe:82:02:6d:0d:7b:73:63:ed:3a:c2:1a:de:d1: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:C1:E0:76:A3:46:96:68:12:5B:8D:D3:95:F3:04:DF:A2:E7:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211743 Signature Algorithm: sha256WithRSAEncryption 13:b5:c3:aa:b4:61:cc:0d:e4:f4:a3:99:3f:10:6c:ff:9c:22: ba:6a:f5:bd:ab:f1:10:62:a5:2f:aa:83:d1:b7:ac:66:6b:ba: ae:cc:57:1d:ea:59:33:04:37:6d:a2:ee:06:19:1a:48:48:17: 05:34:09:f6:ed:10:59:14:0a:68:76:3e:b3:fa:dd:bc:54:0f: 65:33:03:13:64:d4:a3:31:1f:25:0d:c6:f4:9d:f6:86:70:48: 3a:e4:3b:67:97:46:c7:32:fd:15:7b:2e:de:30:17:0c:44:a5: 10:e2:a9:56:92:df:3f:da:f0:a2:82:a0:d7:91:ca:e1:d3:7e: 58:50:a4:7c:cb:27:6b:58:ac:5f:59:79:58:56:94:01:0d:c0: a3:b7:b7:b2:da:ef:f9:2d:2c:08:f1:c3:c7:dd:ac:5d:dd:23: 31:95:d0:a4:71:53:55:c8:4f:fb:1f:9b:d5:ab:c4:bc:93:fa: 2f:9b:9b:de:8f:2b:00:6d:eb:7c:27:33:d4:50:17:83:db:d7: 60:f0:59:19:94:4d:01:50:cc:28:5f:1c:7d:0b:08:a5:d9:27: f0:3e:ed:e8:88:eb:e7:dd:13:b1:fe:7e:91:6c:f0:99:18:a9: 04:73:09:92:47:6f:b6:05:e6:4c:98:61:40:a8:8b:59:b9:be: 58:f1:d1:43 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FTY8pj4JjzfPbpfwYQvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWIwYzFlMDc2YTM0Njk2NjgxMjViOGRkMzk1ZjMwNGRmYTJlNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRt6sor5Jg5pKk8CdvLRwlOx1R+F jSV1lUmcBvasQG2r5qWMHFBECctxa47dmZbWztxuCDLbB2v9XZuUNRALRHcT5AtG 9V6O/NYZtVxI0lgy8Zo1H7ioSllwm/TSQCyNwo4gpvLP0wS6mj6kJlAq2IZAv97z F2ibYt2WnaHWDRvumY4/RcBegnyE/gO8j83c7tm3Q6FwOhxec9sH+JbdJhFbagRA on4bpCi14DC7c6XCbMagkDIE2OYKmB5Ig9qpp3ADpzqbKwtrifvd38atKNqJtGxV NEADs3J+/fPVACjKQA+DHsFzIuqwBwVIVQvE/oICbQ17c2PtOsIa3tHUOwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJGwweB2o0aWaBJbjdOV8wTfoueUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzc1Yzk2 NC0zNTRlLTQ2YTMtYjM5ZS1lZDgyMzc5Y2ZhMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNzVjOTY0 LTM1NGUtNDZhMy1iMzllLWVkODIzNzljZmEzMi8xL2tiREI0SGFqUnBab0VsdU4w NVh6Qk4taTU1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7HzANBgkqhkiG9w0BAQsFAAOCAQEAE7XDqrRhzA3k 9KOZPxBs/5wiumr1vavxEGKlL6qD0besZmu6rsxXHepZMwQ3baLuBhkaSEgXBTQJ 9u0QWRQKaHY+s/rdvFQPZTMDE2TUozEfJQ3G9J32hnBIOuQ7Z5dGxzL9FXsu3jAX DESlEOKpVpLfP9rwooKg15HK4dN+WFCkfMsna1isX1l5WFaUAQ3Ao7e3strv+S0s CPHDx92sXd0jMZXQpHFTVchP+x+b1avEvJP6L5ub3o8rAG3rfCcz1FAXg9vXYPBZ GZRNAVDMKF8cfQsIpdkn8D7t6Ijr590Tsf5+kWzwmRipBHMJkkdvtgXmTJhhQKiL Wbm+WPHRQw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:25 2026 by rpki-client