This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer File: kdTzrA50tq60hL0U9ocdmjBCK30.cer (raw, json) Hash identifier: oU7y1yJL1Px38H6aFz1rauzfVWZGGrLNsVuNdB8fJzg= Subject key identifier: 91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF23F629FEB53BD2BF41EF039B4A506 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207091 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:3f:62:9f:eb:53:bd:2b:f4:1e:f0:39:b4:a5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:ce:1a:d4:9c:cf:0d:05:93:8e:5c:3b:40: 4c:71:bb:12:46:ec:16:36:ce:d8:40:35:23:26:7a: a4:77:8c:f5:25:cf:df:d8:14:63:b8:b7:1f:e4:99: cd:b5:df:ef:33:1b:c8:80:1e:3c:7c:2e:f9:c9:65: 1c:73:61:a3:91:46:4f:3e:0d:ef:58:e4:ed:8f:21: eb:57:5b:75:53:f3:f9:14:fb:2f:5f:4c:d9:1d:29: e0:d3:5f:29:f9:b4:f6:2f:ee:8a:70:d3:10:06:9c: 61:06:96:72:7c:fa:d6:f3:7e:30:f9:54:ec:c4:3c: 3a:e8:e7:1b:5e:02:f1:56:93:2f:95:7b:a3:90:bb: c0:d2:e1:06:33:2a:c1:1b:10:4a:4e:2a:ad:18:1a: 11:a3:0a:8b:5b:76:62:c6:aa:f4:25:76:8f:41:28: 95:b6:3b:90:76:04:0f:93:01:97:d3:14:7e:51:f2: 73:e9:e3:d9:60:94:c8:4e:ec:34:f4:8f:e2:19:c7: 5a:9f:e1:7e:81:a7:36:f8:82:9e:11:26:a4:65:c2: 64:50:2f:c4:be:d2:6e:f9:b8:8b:ec:a6:3c:6e:63: e1:6d:4e:f6:f7:a4:6d:87:f6:2e:6b:96:b3:9d:3d: f0:c4:f8:d4:e3:47:61:c5:d3:4a:87:35:59:5c:23: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207091 Signature Algorithm: sha256WithRSAEncryption 5d:7a:23:23:96:b1:ec:da:88:e4:ba:22:6b:39:2b:b0:a5:79: 05:8c:41:d3:5a:02:04:6c:3e:0d:ea:3d:b3:a7:60:92:97:2a: 67:c8:6b:c0:a4:77:c2:bb:55:af:44:e5:39:80:e2:07:ad:6e: 08:3e:89:16:58:be:4f:d4:63:42:1b:16:0c:a1:3f:0b:db:fd: be:69:ed:39:1c:3a:fe:e9:27:f0:ab:b4:11:f8:b8:33:48:55: 0c:87:16:93:16:2c:2f:5b:00:01:a8:25:0d:4a:6f:12:1d:67: 93:51:72:70:54:22:c8:8d:2f:bc:59:85:4e:45:ea:e1:4b:74: 4b:dc:c5:8f:96:d0:b3:ef:24:56:30:e7:86:78:ec:6b:34:8b: 59:ff:61:c5:dd:8d:09:7e:02:cc:2c:c8:3d:c1:53:cf:89:a8: ce:9d:1d:f2:89:be:03:fb:6f:0b:e7:89:ff:ef:91:70:90:28: 3f:c3:1a:ff:a8:01:ff:77:e4:0a:e5:e6:18:cc:a6:69:e3:14: bf:97:9a:4d:68:4e:77:24:22:82:8a:0e:e6:51:a1:f0:d7:93: 18:52:a0:6b:fb:b3:c5:b0:97:07:62:27:20:c0:91:11:58:cf: 71:88:f1:0f:18:14:76:94:b0:48:31:05:b0:fe:d8:14:49:2a: aa:94:06:3b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8j9in+tTvSv0HvA5tKUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWQ0ZjNhYzBlNzRiNmFlYjQ4NGJkMTRmNjg3MWQ5YTMwNDIyYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+TOGtSczw0Fk45cO0BMcbsSRuwW Ns7YQDUjJnqkd4z1Jc/f2BRjuLcf5JnNtd/vMxvIgB48fC75yWUcc2GjkUZPPg3v WOTtjyHrV1t1U/P5FPsvX0zZHSng018p+bT2L+6KcNMQBpxhBpZyfPrW834w+VTs xDw66OcbXgLxVpMvlXujkLvA0uEGMyrBGxBKTiqtGBoRowqLW3Zixqr0JXaPQSiV tjuQdgQPkwGX0xR+UfJz6ePZYJTITuw09I/iGcdan+F+gac2+IKeESakZcJkUC/E vtJu+biL7KY8bmPhbU7296Rth/Yua5aznT3wxPjU40dhxdNKhzVZXCOIEwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJHU86wOdLautIS9FPaHHZowQit9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzhkMGM2 OC02MWE1LTRhZTEtYTgzMS1hYTEwNDczMmY1NzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvOGQwYzY4 LTYxYTUtNGFlMS1hODMxLWFhMTA0NzMyZjU3My8xL2tkVHpyQTUwdHE2MGhMMFU5 b2NkbWpCQ0szMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMo8zANBgkqhkiG9w0BAQsFAAOCAQEAXXojI5ax7NqI 5LoiazkrsKV5BYxB01oCBGw+Deo9s6dgkpcqZ8hrwKR3wrtVr0TlOYDiB61uCD6J Fli+T9RjQhsWDKE/C9v9vmntORw6/ukn8Ku0Efi4M0hVDIcWkxYsL1sAAaglDUpv Eh1nk1FycFQiyI0vvFmFTkXq4Ut0S9zFj5bQs+8kVjDnhnjsazSLWf9hxd2NCX4C zCzIPcFTz4mozp0d8om+A/tvC+eJ/++RcJAoP8Ma/6gB/3fkCuXmGMymaeMUv5ea TWhOdyQigooO5lGh8NeTGFKga/uzxbCXB2InIMCREVjPcYjxDxgUdpSwSDEFsP7Y FEkqqpQGOw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:19 2026 by rpki-client