This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer (raw, json) Hash identifier: DMNVzP1jTI06iMywriwyAYk0MhSb2syBtRBl0SZVKeY= Subject key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDE4EA4C8F5E4DEAB0A3066822397C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59740 IP: 185.58.252.0/22 IP: 2a02:6660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e4:ea:4c:8f:5e:4d:ea:b0:a3:06:68:22:39:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9b:cd:5e:5c:69:f6:b4:2e:93:87:15:ce:bf: a5:3b:d1:8c:d2:21:0b:e1:c4:6c:c3:aa:d0:82:6d: b3:1c:cb:0c:e3:6e:72:98:80:d8:ff:88:ab:05:ce: 7d:5c:5a:f5:81:80:61:11:40:fb:b1:e3:ef:02:64: c6:88:b4:5c:84:b1:93:c5:92:9b:86:59:a2:e8:47: 3d:36:b4:ab:06:62:f7:53:5b:78:e3:56:46:74:e5: f5:24:6d:8c:1c:f9:74:50:01:32:80:62:44:11:f9: 64:ce:8e:81:ba:d0:37:11:19:94:51:0e:2a:85:44: e6:e1:f8:b8:66:10:cc:c7:6c:df:67:e9:3b:bc:cf: 26:31:15:04:62:3e:01:b7:f0:6e:ac:3a:c6:cc:31: 48:fb:e6:bc:df:05:81:c7:b6:a2:0f:a8:0e:f1:58: 87:e8:df:0b:57:04:1f:25:dc:56:85:8b:5d:d6:1f: b6:08:32:15:1d:f7:ad:02:07:ea:66:0b:19:05:61: f6:30:53:7f:5a:b7:0b:d4:07:75:39:f0:a3:7f:eb: ca:d0:69:b1:4b:0a:e7:d8:dd:b6:6c:ed:98:a1:2d: bb:f0:d5:0f:8b:d5:e6:42:7b:a6:9b:6a:66:fc:6b: 7d:8b:e3:17:cd:37:01:a3:cf:d3:66:bd:5d:33:12: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.58.252.0/22 IPv6: 2a02:6660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59740 Signature Algorithm: sha256WithRSAEncryption 15:bd:88:d9:73:a0:f2:cc:ae:3e:71:2a:b2:07:96:67:5d:01: 87:c1:9b:e9:ff:5a:cf:23:eb:f8:ff:ca:5f:d9:54:6a:08:a8: 97:21:6f:57:5f:98:df:8c:bc:8b:0b:71:a5:ec:ed:7c:46:3a: 6b:43:44:87:18:cc:8d:51:7b:7b:f7:62:f1:24:e5:b3:46:8e: dd:a6:cf:f8:4f:ed:9f:5f:ee:5a:01:41:6a:16:78:f3:7d:51: 22:a2:95:f2:0f:d6:74:da:35:e6:80:af:ff:83:df:74:cb:8a: fc:f6:c5:d1:69:08:83:fe:5f:76:55:20:49:59:f3:44:0d:6d: ee:b2:6d:be:73:e2:a7:2d:d0:c9:1c:92:9c:3c:d1:d9:b5:6f: 7e:78:c5:97:b0:f5:6c:71:5c:7a:fd:01:6a:0e:7f:e8:76:33: d7:15:b4:a0:5e:77:a6:23:1f:1e:dd:e8:9a:76:0f:9a:2f:89: 25:73:b3:4b:f9:95:5c:f5:23:d2:50:fe:4a:ca:6a:34:14:0f: 11:86:14:5c:8b:2a:45:3e:e8:26:93:57:25:a0:9a:2e:01:05: 22:32:a1:bd:79:b6:98:f3:71:62:d4:94:70:2e:2f:cc:73:a1: 2c:50:8a:2a:40:0a:d2:2b:9f:f8:1e:5a:8e:6d:91:a2:65:2c: 07:f2:0c:2d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87eTqTI9eTeqwowZoIjl8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWNkNGM2YzEyNjBmYzlhN2M4OTRiZjZhYmU3N2E2ZWVjZmVjMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZvNXlxp9rQuk4cVzr+lO9GM0iEL 4cRsw6rQgm2zHMsM425ymIDY/4irBc59XFr1gYBhEUD7sePvAmTGiLRchLGTxZKb hlmi6Ec9NrSrBmL3U1t441ZGdOX1JG2MHPl0UAEygGJEEflkzo6ButA3ERmUUQ4q hUTm4fi4ZhDMx2zfZ+k7vM8mMRUEYj4Bt/BurDrGzDFI++a83wWBx7aiD6gO8ViH 6N8LVwQfJdxWhYtd1h+2CDIVHfetAgfqZgsZBWH2MFN/WrcL1Ad1OfCjf+vK0Gmx Swrn2N22bO2YoS278NUPi9XmQnumm2pm/Gt9i+MXzTcBo8/TZr1dMxLF5QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJHNTGwSYPyafIlL9qvnem7s/sBuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2U1YjMw MS0wYzMzLTQ4YjQtODQ3Yi1lOThlZTIzODExNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvZTViMzAx LTBjMzMtNDhiNC04NDdiLWU5OGVlMjM4MTE0Ni8xL2tjMU1iQkpnX0pwOGlVdjJx LWQ2YnV6LXdHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTr8MA0EAgACMAcDBQAqAmZgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDpXDANBgkqhkiG9w0BAQsFAAOCAQEAFb2I2XOg8syu PnEqsgeWZ10Bh8Gb6f9azyPr+P/KX9lUagiolyFvV1+Y34y8iwtxpeztfEY6a0NE hxjMjVF7e/di8STls0aO3abP+E/tn1/uWgFBahZ4831RIqKV8g/WdNo15oCv/4Pf dMuK/PbF0WkIg/5fdlUgSVnzRA1t7rJtvnPipy3QyRySnDzR2bVvfnjFl7D1bHFc ev0Bag5/6HYz1xW0oF53piMfHt3omnYPmi+JJXOzS/mVXPUj0lD+SspqNBQPEYYU XIsqRT7oJpNXJaCaLgEFIjKhvXm2mPNxYtSUcC4vzHOhLFCKKkAK0iuf+B5ajm2R omUsB/IMLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:16 2026 by rpki-client