This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer File: kfWJGibPpDaiPn4f-XZki-5573c.cer (raw, json) Hash identifier: YcDKWh7+2eXBFI5wXIwBIyN2oOevoFPPUe5DcD9CXW8= Subject key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791008EBD67EE04F1A9EDB907BB42BD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203108 IP: 185.144.220.0/22 IP: 2a07:5b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:08:eb:d6:7e:e0:4f:1a:9e:db:90:7b:b4:2b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:1c:e7:3f:ab:31:d2:c4:48:5b:a2:5d:77: eb:84:5d:d0:f0:5f:d1:8d:17:9a:4d:56:42:2b:2f: 2f:ed:31:c6:45:bf:d5:76:76:d8:aa:16:8f:90:88: ba:3a:9a:08:c4:52:b0:5a:1d:58:c1:6b:ce:dc:14: fa:c0:f9:a0:b1:10:25:8c:e9:b6:47:6c:1e:0d:75: 54:f8:ba:6c:08:89:aa:9f:e6:ea:ad:12:12:72:10: 9b:f6:26:32:c6:f1:f6:67:ac:f8:51:c9:f1:e6:11: 1d:ee:6b:68:8e:1d:37:48:73:08:03:8e:6f:7a:4b: 87:da:21:7a:08:77:5e:de:6e:24:e4:b1:c1:22:3b: 7a:1b:2b:71:5f:52:e1:66:86:b6:c8:cc:2a:d8:ae: 7c:0c:95:99:e2:a3:06:85:78:17:2e:b7:5c:10:47: 82:af:87:c8:53:80:13:74:8f:ee:5b:b4:fc:17:bb: 41:71:be:79:10:11:34:8c:8c:54:97:68:af:8e:2a: ba:6a:18:bb:bf:1a:a9:01:ca:64:06:a0:bf:34:db: 02:14:11:ec:e0:1b:da:26:af:f2:11:3a:e0:f8:be: 9a:c9:f8:3a:20:b6:b3:6f:e4:6e:82:60:9d:0b:94: 64:d9:30:33:1f:54:a9:27:d8:c3:75:89:30:65:42: 7e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.220.0/22 IPv6: 2a07:5b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203108 Signature Algorithm: sha256WithRSAEncryption 52:d5:2f:b0:87:54:27:f6:98:5b:fd:5c:6f:74:b1:bc:ec:88: fc:d0:8e:82:67:55:c8:1b:e7:92:7f:17:dc:4c:85:dc:27:54: 92:4b:65:1e:ed:b9:4b:96:ec:9d:fd:a4:40:5c:fe:08:a8:59: a9:21:41:5f:c8:89:cb:12:13:8c:04:de:7e:81:a4:5a:c0:f1: f1:ee:d8:fd:dd:d0:cc:42:10:cc:51:12:c3:84:89:0a:36:42: b2:59:bb:60:27:45:0c:20:3d:2f:b0:af:82:b1:16:f7:ea:b6: 0d:28:25:aa:29:7c:87:2e:21:f6:00:e5:fc:16:d4:d4:d8:d5: a2:20:04:2a:4d:94:0c:a1:ea:da:6b:34:bd:ae:a6:89:fb:25: 2d:96:8b:69:c8:fa:a2:74:35:ef:d5:11:71:1e:b5:72:77:d1: 09:b8:b1:5d:e6:4a:71:e9:f5:16:ae:18:87:6b:b0:f6:bb:40: 83:14:c6:46:e1:c5:cd:bd:14:1c:44:a3:58:ee:8a:d5:ad:cb: 61:26:e4:b4:90:eb:87:8c:58:5d:fa:e4:fd:b5:69:2e:b8:fb: 8e:1f:d2:a1:76:25:28:df:91:e9:1f:fc:71:9a:e2:0c:f6:29: 1d:62:0e:65:e8:a7:c0:0e:1b:98:36:ca:ef:f8:80:81:24:47: cc:ff:56:60 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EAjr1n7gTxqe25B7tCvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWY1ODkxYTI2Y2ZhNDM2YTIzZTdlMWZmOTc2NjQ4YmVlNzllZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Ac5z+rMdLESFuiXXfrhF3Q8F/R jReaTVZCKy8v7THGRb/VdnbYqhaPkIi6OpoIxFKwWh1YwWvO3BT6wPmgsRAljOm2 R2weDXVU+LpsCImqn+bqrRISchCb9iYyxvH2Z6z4Ucnx5hEd7mtojh03SHMIA45v ekuH2iF6CHde3m4k5LHBIjt6GytxX1LhZoa2yMwq2K58DJWZ4qMGhXgXLrdcEEeC r4fIU4ATdI/uW7T8F7tBcb55EBE0jIxUl2ivjiq6ahi7vxqpAcpkBqC/NNsCFBHs 4BvaJq/yETrg+L6ayfg6ILazb+RugmCdC5Rk2TAzH1SpJ9jDdYkwZUJ+ZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJH1iRomz6Q2oj5+H/l2ZIvuee93MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzdmMWI3 NC1jOGQ3LTRhMGQtOGEzOS1kYWE3MzkwYjViYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvN2YxYjc0 LWM4ZDctNGEwZC04YTM5LWRhYTczOTBiNWJhNy8xL2tmV0pHaWJQcERhaVBuNGYt WFpraS01NTczYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZDcMA0EAgACMAcDBQMqB1sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZZDANBgkqhkiG9w0BAQsFAAOCAQEAUtUvsIdUJ/aY W/1cb3SxvOyI/NCOgmdVyBvnkn8X3EyF3CdUkktlHu25S5bsnf2kQFz+CKhZqSFB X8iJyxITjATefoGkWsDx8e7Y/d3QzEIQzFESw4SJCjZCslm7YCdFDCA9L7CvgrEW 9+q2DSglqil8hy4h9gDl/BbU1NjVoiAEKk2UDKHq2ms0va6mifslLZaLacj6onQ1 79URcR61cnfRCbixXeZKcen1Fq4Yh2uw9rtAgxTGRuHFzb0UHESjWO6K1a3LYSbk tJDrh4xYXfrk/bVpLrj7jh/SoXYlKN+R6R/8cZriDPYpHWIOZeinwA4bmDbK7/iA gSRHzP9WYA== -----END CERTIFICATE-----Generated at Tue Feb 3 01:51:17 2026 by rpki-client