This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer File: kfX87b24TdUvxncNfM_T_GaE-kE.cer (raw, json) Hash identifier: NoB4HMhB+8PImmTiBV5pBSgbd4EsPY15ZDPufFy4A10= Subject key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E181BC14B0047031631C9A7238755 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208866 IP: 45.82.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:18:1b:c1:4b:00:47:03:16:31:c9:a7:23:87:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:44:63:0b:6f:a2:23:c6:ec:7c:0c:e8:a9:c2: f3:ce:78:cc:fc:7e:bb:0e:4c:ef:4d:77:8a:ee:21: 7b:77:ab:58:6c:55:d5:5f:cf:b8:e5:a0:a4:c7:f6: b1:db:94:be:ad:32:cd:e5:50:5b:ab:01:d5:4f:57: df:0f:8d:d9:8f:64:ac:13:c2:aa:47:03:88:80:f2: 7b:4b:10:05:bd:dd:9f:7e:db:19:c2:a9:e4:c7:1d: 95:31:c9:99:a3:d6:0b:9b:89:6b:53:be:9e:f2:7c: 12:33:01:90:4f:72:21:8e:e6:19:26:a7:ae:d5:83: 97:b1:b5:66:39:94:d0:94:57:4d:be:90:c3:65:78: ca:bf:7d:e4:04:f8:20:46:00:82:a2:c7:d1:e5:9f: 78:3c:0e:84:5b:7b:3c:0a:53:fa:6c:11:4e:6d:ef: 8f:64:35:34:0b:28:6c:e6:f7:82:77:9f:61:ba:59: 72:b3:97:86:8d:b7:de:b7:64:73:d3:71:e8:90:c2: ca:16:0f:04:58:ec:00:2a:ac:9c:b5:1e:be:01:cb: ca:28:70:93:df:50:f8:d3:19:cd:0e:bb:20:15:69: f6:a1:fd:74:93:d1:e8:27:25:71:16:52:5d:7c:cf: 17:3e:fe:75:17:03:06:b7:db:ca:fa:55:28:9d:df: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.60.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208866 Signature Algorithm: sha256WithRSAEncryption 13:ef:f0:83:da:9c:4e:64:f2:8d:51:9f:db:94:82:f0:48:8b: 64:8d:42:f8:93:40:c4:20:08:30:1e:0c:f6:86:0f:35:66:9b: 57:22:58:83:3c:dc:a2:95:76:cf:ad:9c:22:73:d4:89:f6:5e: 11:21:19:39:5e:f9:18:a1:aa:d5:88:69:29:4b:58:89:58:2a: 25:9e:80:94:17:23:07:2c:a7:2b:d1:63:ee:ec:88:fb:6d:68: 1c:01:9b:5d:85:ef:c8:3c:34:eb:f2:b3:b6:0f:19:a0:7b:40: ee:d3:d2:bd:7c:26:57:30:ef:28:5f:fa:7c:be:7d:c8:63:89: b5:3e:1f:04:5d:5c:8e:68:ee:e9:dd:af:0a:2d:51:c2:40:3e: 92:6e:12:3f:91:32:31:49:3b:ee:bc:b7:71:92:2b:dd:74:88: 26:a1:dd:01:93:d6:30:c9:96:1c:16:f5:ee:62:ca:51:6f:61: f9:e2:e6:d5:e6:b8:d7:40:89:e6:20:51:27:9d:dc:e2:60:85: d1:f9:3b:15:21:0e:97:53:62:e2:10:c3:ad:97:80:52:7e:ce: a9:e0:c9:99:63:ab:e1:9f:07:74:9f:8a:c1:ed:a4:3e:11:56: 9e:9a:25:66:98:01:9d:c2:94:c0:bf:24:f9:e1:67:8d:6f:cf: 7e:d1:31:13 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fhgbwUsARwMWMcmnI4dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWY1ZmNlZGJkYjg0ZGQ1MmZjNjc3MGQ3Y2NmZDNmYzY2ODRmYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ERjC2+iI8bsfAzoqcLzznjM/H67 DkzvTXeK7iF7d6tYbFXVX8+45aCkx/ax25S+rTLN5VBbqwHVT1ffD43Zj2SsE8Kq RwOIgPJ7SxAFvd2fftsZwqnkxx2VMcmZo9YLm4lrU76e8nwSMwGQT3IhjuYZJqeu 1YOXsbVmOZTQlFdNvpDDZXjKv33kBPggRgCCosfR5Z94PA6EW3s8ClP6bBFObe+P ZDU0Cyhs5veCd59hullys5eGjbfet2Rz03HokMLKFg8EWOwAKqyctR6+AcvKKHCT 31D40xnNDrsgFWn2of10k9HoJyVxFlJdfM8XPv51FwMGt9vK+lUond+b4QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJH1/O29uE3VL8Z3DXzP0/xmhPpBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzlhMDk4 MS0wYWQ4LTQ4YTUtYmZlYy04Y2M5ODMzNjExZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWEwOTgx LTBhZDgtNDhhNS1iZmVjLThjYzk4MzM2MTFlNi8xL2tmWDg3YjI0VGRVdnhuY05m TV9UX0dhRS1rRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVI8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMv4jANBgkqhkiG9w0BAQsFAAOCAQEAE+/wg9qcTmTyjVGf25SC8EiLZI1C+JNA xCAIMB4M9oYPNWabVyJYgzzcopV2z62cInPUifZeESEZOV75GKGq1YhpKUtYiVgq JZ6AlBcjByynK9Fj7uyI+21oHAGbXYXvyDw06/Kztg8ZoHtA7tPSvXwmVzDvKF/6 fL59yGOJtT4fBF1cjmju6d2vCi1RwkA+km4SP5EyMUk77ry3cZIr3XSIJqHdAZPW MMmWHBb17mLKUW9h+eLm1ea410CJ5iBRJ53c4mCF0fk7FSEOl1Ni4hDDrZeAUn7O qeDJmWOr4Z8HdJ+Kwe2kPhFWnpolZpgBncKUwL8k+eFnjW/PftExEw== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:35 2026 by rpki-client