This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer File: kebTJCJXspZbYnj_jBfhb_PwiyE.cer (raw, json) Hash identifier: 4MFXWkN/Lz1u4FJvpaNTS7TQAkYlDQMUSDVAo5NRcrA= Subject key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15AFB3C81F0500729BE22DB361415B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204732 IP: 185.242.68.0/22 IP: 2a0c:c280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:af:b3:c8:1f:05:00:72:9b:e2:2d:b3:61:41:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:9a:9e:17:64:40:28:5c:0c:45:2f:38:eb: f4:9a:55:59:5f:0a:ad:f5:79:88:13:b7:09:5b:ea: 46:f8:71:be:9b:a6:3f:ec:a9:19:b5:32:b1:20:4a: 9e:b9:23:41:e0:f3:6a:ec:64:c3:e3:6c:8c:5f:87: 64:b4:a3:d0:b3:62:77:26:17:6b:f4:ee:01:87:10: d2:7a:d5:40:85:1c:b1:ca:93:c1:3c:a7:49:62:a6: 94:a7:a2:1a:fb:c6:ae:1d:28:fa:4f:38:a2:47:d0: 8f:9c:41:cc:a8:9c:77:aa:ef:dc:d5:40:42:a5:f2: bf:dd:a4:41:60:3d:be:a0:e0:d2:87:69:c7:a6:fa: b7:f7:b1:a1:20:8a:30:52:2f:69:39:de:2c:cf:da: d4:ab:28:c9:df:63:77:9b:d5:8e:e3:29:2f:d9:f6: ed:33:23:0b:b8:6a:02:88:a1:bb:01:5c:e1:8e:1b: 3a:34:ee:cd:f6:d6:59:c2:df:3a:69:a4:a9:bf:9b: 3f:c0:50:39:e0:b9:8e:47:8b:46:24:2d:d8:2d:01: fb:93:e7:3e:37:f2:99:2d:be:33:b0:ed:fe:97:4c: 6a:7c:61:bd:e9:68:8a:aa:f5:4a:20:e1:64:ef:54: e4:a7:fe:09:25:27:5b:e0:9f:74:71:51:a8:24:13: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.68.0/22 IPv6: 2a0c:c280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204732 Signature Algorithm: sha256WithRSAEncryption 33:96:a1:a9:e5:04:af:4e:1d:45:39:5a:11:7e:95:4e:b9:f8: 71:e8:04:73:bf:bd:56:e6:8d:2a:63:44:34:59:d4:09:74:e0: 15:28:1a:93:6f:5a:ea:55:2f:72:6f:92:e5:48:e7:e0:e1:cf: 91:04:a2:c2:73:66:79:b4:1e:5b:9b:03:03:47:ac:b5:5f:3f: 6d:d6:ec:fa:9e:f3:88:2b:52:82:9f:af:8a:dc:61:91:80:c3: 8b:87:05:da:0b:a8:84:1d:d1:94:a1:6b:96:a5:47:e9:5a:bf: c3:1b:1a:2f:c8:0f:95:f5:a9:f3:33:bc:5f:8f:ff:5b:7f:10: e8:7c:00:e8:0f:8f:aa:3b:8a:ea:5c:dd:2f:a8:86:42:ac:2c: 60:55:fd:6c:18:96:8d:de:f9:19:64:5b:e9:e3:2f:2c:06:1d: 8e:1a:2e:3a:0b:8f:e5:0c:e6:fa:30:e8:cf:6f:6e:50:a7:d7: 9a:ff:a4:cf:eb:ae:11:7b:23:91:3a:c8:01:db:90:d1:46:84: ac:bc:d5:49:41:68:97:ac:bd:b0:9c:72:98:ee:b1:1b:3e:ce: aa:b3:54:6d:37:23:9f:06:18:e7:80:67:c0:7c:bc:ed:a3:70: 50:81:f9:35:e0:17:5f:7c:69:ae:b0:2b:b5:68:da:0d:46:b0: 12:cc:43:ba -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/Fa+zyB8FAHKb4i2zYUFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWU2ZDMyNDIyNTdiMjk2NWI2Mjc4ZmY4YzE3ZTE2ZmYzZjA4YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta6anhdkQChcDEUvOOv0mlVZXwqt 9XmIE7cJW+pG+HG+m6Y/7KkZtTKxIEqeuSNB4PNq7GTD42yMX4dktKPQs2J3Jhdr 9O4BhxDSetVAhRyxypPBPKdJYqaUp6Ia+8auHSj6TziiR9CPnEHMqJx3qu/c1UBC pfK/3aRBYD2+oODSh2nHpvq397GhIIowUi9pOd4sz9rUqyjJ32N3m9WO4ykv2fbt MyMLuGoCiKG7AVzhjhs6NO7N9tZZwt86aaSpv5s/wFA54LmOR4tGJC3YLQH7k+c+ N/KZLb4zsO3+l0xqfGG96WiKqvVKIOFk71Tkp/4JJSdb4J90cVGoJBNPYQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJHm0yQiV7KWW2J4/4wX4W/z8IshMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzBjMGY2 MS1iNjljLTQ2NTctOTg2Ny03ZTc0YTZhOThlY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvMGMwZjYx LWI2OWMtNDY1Ny05ODY3LTdlNzRhNmE5OGVjZC8xL2tlYlRKQ0pYc3BaYllual9q QmZoYl9Qd2l5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufJEMA0EAgACMAcDBQMqDMKAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfvDANBgkqhkiG9w0BAQsFAAOCAQEAM5ahqeUEr04d RTlaEX6VTrn4cegEc7+9VuaNKmNENFnUCXTgFSgak29a6lUvcm+S5Ujn4OHPkQSi wnNmebQeW5sDA0estV8/bdbs+p7ziCtSgp+vitxhkYDDi4cF2guohB3RlKFrlqVH 6Vq/wxsaL8gPlfWp8zO8X4//W38Q6HwA6A+PqjuK6lzdL6iGQqwsYFX9bBiWjd75 GWRb6eMvLAYdjhouOguP5Qzm+jDoz29uUKfXmv+kz+uuEXsjkTrIAduQ0UaErLzV SUFol6y9sJxymO6xGz7OqrNUbTcjnwYY54BnwHy87aNwUIH5NeAXX3xprrArtWja DUawEsxDug== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:38 2026 by rpki-client