This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer File: kgm43V6nJYkIN4Zh8rqe-JrToLE.cer (raw, json) Hash identifier: uLqRbi4mJykLlIlnKOV5KNjm6/w2OsXN1EHfLPNNMYA= Subject key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED46DDAF0C6734DB70DCFBC61FCE88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211939 IP: 2001:678:1050::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:46:dd:af:0c:67:34:db:70:dc:fb:c6:1f:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:e0:a1:e8:73:04:76:b0:e8:d9:8a:64:b1: 29:29:e6:02:f0:cd:a6:5d:8c:b7:c8:45:72:a4:05: cc:f6:45:89:9e:8b:28:df:21:e1:d8:c0:d5:5c:85: 4e:b3:d0:a3:fc:d8:f1:a5:b0:87:03:cb:39:d2:ab: 6e:a8:4b:44:b4:85:ff:69:b6:7f:c7:6d:3b:68:8b: 86:01:4d:16:78:ba:b4:ba:4b:b8:3d:12:a3:5a:78: b8:bb:62:cf:e7:55:ae:84:8a:9b:42:21:75:84:2b: 78:95:45:0e:49:2c:5a:1d:77:6b:61:51:70:24:c7: 19:d6:f9:8b:0c:9b:e8:25:94:41:79:3c:c9:38:5d: 69:ff:3d:ca:c8:ef:d9:4e:c1:76:5b:40:69:63:32: 95:7f:15:1a:e5:9d:1b:07:39:dd:94:3b:9f:96:46: 76:3d:d1:34:86:ef:fd:41:39:4f:5b:da:b7:0b:89: 94:f1:ca:9c:53:6e:83:1b:67:df:33:19:9d:1f:9e: 8e:6d:00:68:58:63:43:e4:d7:31:a7:b3:54:62:74: d6:c0:12:ec:ae:ee:4c:bd:e5:4b:99:c5:53:e3:c5: 3a:0d:c5:a7:6e:c3:2e:fc:45:c2:71:f4:78:2a:e9: a5:05:7e:b6:be:96:f3:d4:00:a7:bf:73:1a:49:13: 17:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1050::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211939 Signature Algorithm: sha256WithRSAEncryption 38:8a:73:f8:cd:ad:2a:84:8c:c7:db:4c:34:0e:b8:6e:6a:9c: 08:7d:64:cb:7c:36:f6:99:62:5d:b9:8c:21:0e:b9:cf:91:51: 8c:34:19:ab:db:cf:76:8f:d9:0f:23:48:1e:0b:d7:0e:0c:42: cc:06:5b:14:07:93:0b:8b:99:5d:32:2d:2a:e4:e4:86:c4:8f: ee:61:0b:22:39:59:a6:2a:f8:25:e3:a8:d4:83:15:41:fe:75: a8:07:8b:fe:8f:7c:83:07:5a:65:c3:0f:cc:5b:36:27:bd:95: ee:fc:be:a7:ba:fc:af:34:ac:2b:5e:89:e2:86:aa:65:df:e3: 1f:15:f9:a2:40:37:c0:20:ec:d9:29:f5:d0:7b:64:43:5b:ad: d1:1e:19:9a:38:84:0f:01:3d:6b:05:a4:0a:cc:bf:22:07:77: 6a:b5:84:3b:7c:80:82:d2:79:93:b4:06:8f:45:41:1f:a7:02: fe:19:56:81:26:72:34:e4:64:22:c8:29:1b:ca:3c:c2:a8:e4: 9c:44:fd:6c:34:97:15:7c:e7:36:27:03:c8:07:9d:47:e6:36: a1:d7:f9:cd:dd:78:50:ad:74:d5:e0:14:d7:59:e6:cf:b8:23: ff:f9:ba:d6:06:a1:92:26:fb:1b:94:45:d3:e3:0d:be:90:ef: 0d:91:9f:d7 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt57UbdrwxnNNtw3PvGH86IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjA5YjhkZDVlYTcyNTg5MDgzNzg2NjFmMmJhOWVmODlhZDNhMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7/goehzBHaw6NmKZLEpKeYC8M2m XYy3yEVypAXM9kWJnoso3yHh2MDVXIVOs9Cj/NjxpbCHA8s50qtuqEtEtIX/abZ/ x207aIuGAU0WeLq0uku4PRKjWni4u2LP51WuhIqbQiF1hCt4lUUOSSxaHXdrYVFw JMcZ1vmLDJvoJZRBeTzJOF1p/z3KyO/ZTsF2W0BpYzKVfxUa5Z0bBzndlDuflkZ2 PdE0hu/9QTlPW9q3C4mU8cqcU26DG2ffMxmdH56ObQBoWGND5Ncxp7NUYnTWwBLs ru5MveVLmcVT48U6DcWnbsMu/EXCcfR4KumlBX62vpbz1ACnv3MaSRMX1wIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJIJuN1epyWJCDeGYfK6nvia06CxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzY4OGRh NS1kMjM4LTQ3Y2UtYjJlOC04OTBmZmVhOGQwYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNjg4ZGE1 LWQyMzgtNDdjZS1iMmU4LTg5MGZmZWE4ZDBiYy8xL2tnbTQzVjZuSllrSU40Wmg4 cnFlLUpyVG9MRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM74zANBgkqhkiG9w0BAQsFAAOCAQEAOIpz+M2tKoSMx9tMNA64bmqcCH1k y3w29pliXbmMIQ65z5FRjDQZq9vPdo/ZDyNIHgvXDgxCzAZbFAeTC4uZXTItKuTk hsSP7mELIjlZpir4JeOo1IMVQf51qAeL/o98gwdaZcMPzFs2J72V7vy+p7r8rzSs K16J4oaqZd/jHxX5okA3wCDs2Sn10HtkQ1ut0R4ZmjiEDwE9awWkCsy/Igd3arWE O3yAgtJ5k7QGj0VBH6cC/hlWgSZyNORkIsgpG8o8wqjknET9bDSXFXznNicDyAed R+Y2odf5zd14UK101eAU11nmz7gj//m61gahkib7G5RF0+MNvpDvDZGf1w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:15 2026 by rpki-client