This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer File: kffw_3S3yfrqKXjtlehAmEkE3NY.cer (raw, json) Hash identifier: cPN+uUxFmC8XhvhOFMLZON3v8b7LVzXCVoVO5BmyUf8= Subject key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79105B072B1871FF82FAB654D01F1924 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200141 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5b:07:2b:18:71:ff:82:fa:b6:54:d0:1f:19:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:4a:39:de:27:3c:fd:69:75:11:10:35:14: e8:b5:a7:73:d9:ba:4a:78:87:67:79:d1:e3:81:d2: 4c:72:c8:e0:a0:7c:14:2c:37:78:e3:da:06:a8:d8: 4e:9d:22:d9:94:ac:d5:59:61:bf:b6:3b:39:e5:5a: 41:9b:6f:e1:f4:98:fa:3b:cb:c5:7d:53:9b:76:f6: f5:0e:ef:3d:e6:81:e1:c7:69:00:2c:8c:b0:78:44: ff:c6:af:72:7b:59:33:46:e1:6c:4b:f2:72:ca:ad: 88:7e:5d:77:9b:2a:d0:4a:8d:22:7f:8c:d2:93:02: 8b:08:a3:6d:fc:3c:7f:12:16:31:0b:f5:bf:63:db: 4d:71:05:8d:38:6c:3f:4d:ec:62:e6:4d:63:c1:90: 81:10:74:d3:1b:bd:03:e9:b9:30:10:03:ed:61:35: a6:07:1f:f3:d0:85:15:ca:5f:75:5c:84:0a:f7:97: 00:9b:2f:93:e0:47:10:de:9a:ff:69:d5:83:92:47: 2d:e9:8d:bb:d2:fc:6d:f5:92:2d:8f:1c:f8:81:62: 4d:95:60:83:9c:b1:44:9a:86:c9:fb:8f:88:53:60: bf:df:05:a3:93:b5:22:34:4a:ee:64:c0:92:5d:3c: 9b:49:e3:da:fb:51:e7:8b:fd:8b:42:c5:a2:20:46: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200141 Signature Algorithm: sha256WithRSAEncryption af:da:19:4b:61:15:d9:9e:d0:de:e2:18:5f:67:71:1c:09:56: 7a:26:d2:6f:bf:79:f6:f4:bd:9b:75:24:88:40:69:76:a5:12: f6:b7:30:25:4f:6a:4e:b2:7d:2a:96:69:ac:5b:28:20:0e:79: 00:17:50:93:16:16:07:43:6e:9e:96:45:3e:12:40:4a:e5:f0: 35:c3:e2:8b:79:8d:03:de:36:8d:10:c0:45:db:43:30:ef:24: 8c:ee:24:f7:54:f4:1f:06:0f:8a:c9:fb:b5:b8:4b:36:6a:1f: c6:86:0d:de:ae:3e:e6:3f:c0:3c:ad:44:52:ba:0a:8d:b9:4e: b0:18:34:3b:0d:2d:c2:2c:60:04:6d:71:d0:d1:4f:7e:65:c7: f9:72:ae:b9:8e:7a:e7:1f:af:ae:15:70:0f:d9:29:a0:2c:f4: b2:41:9b:65:34:ec:cd:9b:7c:bf:24:dd:26:3f:91:95:c8:ad: e5:57:2f:58:9e:7d:10:28:4d:2b:aa:e9:6c:82:02:7a:0b:ea: d3:35:3b:70:bf:dd:5b:f3:c0:a1:ba:03:21:ce:da:9c:d3:4f: 3e:6f:a2:fd:6f:55:a7:0b:8b:c3:61:9b:11:6d:03:44:de:e5: 2d:82:1a:48:b3:e5:c0:42:aa:5e:76:ca:7d:27:3b:d0:e0:a2: 2b:6f:47:fa -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EFsHKxhx/4L6tlTQHxkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWY3ZjBmZjc0YjdjOWZhZWEyOTc4ZWQ5NWU4NDA5ODQ5MDRkY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAratKOd4nPP1pdREQNRTotadz2bpK eIdnedHjgdJMcsjgoHwULDd449oGqNhOnSLZlKzVWWG/tjs55VpBm2/h9Jj6O8vF fVObdvb1Du895oHhx2kALIyweET/xq9ye1kzRuFsS/Jyyq2Ifl13myrQSo0if4zS kwKLCKNt/Dx/EhYxC/W/Y9tNcQWNOGw/Texi5k1jwZCBEHTTG70D6bkwEAPtYTWm Bx/z0IUVyl91XIQK95cAmy+T4EcQ3pr/adWDkkct6Y270vxt9ZItjxz4gWJNlWCD nLFEmobJ+4+IU2C/3wWjk7UiNEruZMCSXTybSePa+1Hni/2LQsWiIEbIjQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJH38P90t8n66il47ZXoQJhJBNzWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzE3NGMz ZS1mYTViLTQ5ZDEtOWQyMS1lMmJkMmU0YzUyMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMTc0YzNl LWZhNWItNDlkMS05ZDIxLWUyYmQyZTRjNTIzMi8xL2tmZndfM1MzeWZycUtYanRs ZWhBbUVrRTNOWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMNzTANBgkqhkiG9w0BAQsFAAOCAQEAr9oZS2EV2Z7Q 3uIYX2dxHAlWeibSb7959vS9m3UkiEBpdqUS9rcwJU9qTrJ9KpZprFsoIA55ABdQ kxYWB0NunpZFPhJASuXwNcPii3mNA942jRDARdtDMO8kjO4k91T0HwYPisn7tbhL NmofxoYN3q4+5j/APK1EUroKjblOsBg0Ow0twixgBG1x0NFPfmXH+XKuuY565x+v rhVwD9kpoCz0skGbZTTszZt8vyTdJj+Rlcit5VcvWJ59EChNK6rpbIICegvq0zU7 cL/dW/PAoboDIc7anNNPPm+i/W9VpwuLw2GbEW0DRN7lLYIaSLPlwEKqXnbKfSc7 0OCiK29H+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:25 2026 by rpki-client