This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer File: kg6KqqAOJVZRVcWbjMO42BuhSSA.cer (raw, json) Hash identifier: LOfR4EA5m4lDB4qChW9bgVHgRaeRTscenZ8BEOskdd0= Subject key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB538F2973973E48B996FF540D807F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8684 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:53:8f:29:73:97:3e:48:b9:96:ff:54:0d:80:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:46:58:59:e2:3e:8a:26:f4:7e:9e:0c:ed: 48:5e:e1:4a:c2:63:ca:34:70:1f:e3:8e:86:52:6a: 5b:66:a9:ad:e9:7e:73:3c:d1:c6:e1:fd:0b:2a:83: 8e:2f:1c:36:61:e9:31:9b:0b:73:da:e9:74:06:0e: d8:e9:85:bb:f9:f2:23:e9:ce:1a:16:4e:f7:31:02: a2:53:70:ef:f0:78:ad:94:1e:45:f8:60:79:e3:8e: 7a:e2:be:4b:c3:33:5c:ab:36:a3:65:bd:44:62:71: 8c:48:84:c7:c8:fe:f8:5b:59:2d:27:5c:bb:4d:83: b7:ba:ec:f9:42:28:a9:e3:83:84:24:e3:46:e2:00: 7d:1c:0b:ac:28:54:3a:f2:bc:5e:58:77:72:12:9a: d2:72:c4:80:01:e0:3a:f0:3a:9a:f4:12:18:4b:68: 5c:aa:c5:b2:3b:3d:be:f4:e8:58:df:04:6b:42:57: 8f:a2:8e:f4:a2:c9:1f:a0:83:91:05:fd:e5:4c:8f: 4f:89:d3:4e:6c:5a:8a:46:03:cc:d0:04:ae:b6:98: 7a:7a:14:a6:83:6a:c1:e7:46:78:5d:22:ff:58:83: 06:7e:34:79:d3:94:fb:36:c1:05:ac:b1:bc:9f:2b: 43:7c:10:2d:96:f8:bb:d5:8f:b1:e9:2f:34:27:ee: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 8684 Signature Algorithm: sha256WithRSAEncryption 64:2d:54:31:61:19:5b:8b:46:24:3f:fc:94:5d:07:e5:73:e3: cc:08:17:a2:05:0a:6b:ff:ac:84:07:a4:bc:d3:42:f9:73:ff: 82:df:21:b6:3d:b1:4e:a6:93:65:97:c9:60:28:48:05:9e:d8: 38:28:20:75:ed:c4:8b:78:dd:e6:03:a2:98:9e:d7:c9:b1:b3: a7:0e:fe:13:ce:a0:20:71:0d:4a:7d:1c:53:17:09:db:82:25: 87:bb:50:44:7f:1d:c9:19:aa:70:d7:f9:e8:b1:a6:3e:81:13: c4:27:7f:0a:83:82:fc:79:36:41:67:29:d8:9b:08:db:58:92: c2:28:fa:d4:27:ce:e9:fe:13:cd:dd:0f:4b:e1:68:9e:85:6b: 34:8a:7d:e0:ff:c1:5e:ce:c7:42:a2:0b:4e:d9:4a:19:83:44: 2c:08:18:64:7b:bd:62:bf:91:01:36:e1:2b:7d:45:c2:5c:e8: 3e:47:04:6c:13:f7:ec:41:20:ea:4a:3a:2f:1e:aa:f1:f9:fb: 99:55:11:16:07:60:c8:76:1d:4b:40:f8:4f:95:30:ac:4b:a6: 5e:c2:66:ef:5f:2c:e3:38:98:43:96:5c:54:22:97:32:2e:10: 5d:91:6b:77:ad:38:40:7a:cc:bb:24:d2:b5:b7:e8:6b:27:20: e2:ac:3d:9c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt9y1OPKXOXPki5lv9UDYB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjBlOGFhYWEwMGUyNTU2NTE1NWM1OWI4Y2MzYjhkODFiYTE0OTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqNGWFniPoom9H6eDO1IXuFKwmPK NHAf446GUmpbZqmt6X5zPNHG4f0LKoOOLxw2Yekxmwtz2ul0Bg7Y6YW7+fIj6c4a Fk73MQKiU3Dv8HitlB5F+GB544564r5LwzNcqzajZb1EYnGMSITHyP74W1ktJ1y7 TYO3uuz5Qiip44OEJONG4gB9HAusKFQ68rxeWHdyEprScsSAAeA68Dqa9BIYS2hc qsWyOz2+9OhY3wRrQlePoo70oskfoIORBf3lTI9PidNObFqKRgPM0ASutph6ehSm g2rB50Z4XSL/WIMGfjR505T7NsEFrLG8nytDfBAtlvi71Y+x6S80J+4jlQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFJIOiqqgDiVWUVXFm4zDuNgboUkgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzFmYzI2 NC04ODVmLTQ5ZTQtODQ1MS04MWFjZmUxNzVkZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvMWZjMjY0 LTg4NWYtNDllNC04NDUxLTgxYWNmZTE3NWRmNy8xL2tnNktxcUFPSlZaUlZjV2Jq TU80MkJ1aFNTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAiHsMA0GCSqGSIb3DQEBCwUAA4IBAQBkLVQxYRlbi0Yk P/yUXQflc+PMCBeiBQpr/6yEB6S800L5c/+C3yG2PbFOppNll8lgKEgFntg4KCB1 7cSLeN3mA6KYntfJsbOnDv4TzqAgcQ1KfRxTFwnbgiWHu1BEfx3JGapw1/nosaY+ gRPEJ38Kg4L8eTZBZynYmwjbWJLCKPrUJ87p/hPN3Q9L4WiehWs0in3g/8FezsdC ogtO2UoZg0QsCBhke71iv5EBNuErfUXCXOg+RwRsE/fsQSDqSjovHqrx+fuZVREW B2DIdh1LQPhPlTCsS6ZewmbvXyzjOJhDllxUIpcyLhBdkWt3rThAesy7JNK1t+hr JyDirD2c -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:50 2026 by rpki-client