This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer File: khjNJev3TLGwBLAe5QVQP_8kbWE.cer (raw, json) Hash identifier: TMs6lRVAIpmi28I8wFbJpR4MO7WJjLTZg9puCpb2wdI= Subject key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC80BF90965B6E31910A16183BDB759 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48327 AS: 51583 IP: 31.135.32.0/19 IP: 91.219.88.0/22 IP: 91.228.246.0/23 IP: 94.232.104.0/21 IP: 185.32.120.0/22 IP: 193.104.224.0/22 IP: 193.242.202.0/23 IP: 2a00:c220::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0b:f9:09:65:b6:e3:19:10:a1:61:83:bd:b7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9218cd25ebf74cb1b004b01ee505503fff246d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:3b:70:b2:76:2a:95:a7:2c:8d:fe:cb:73: 33:27:18:ac:02:c2:87:a3:85:0d:83:f2:5a:93:3f: 47:48:85:33:f3:50:0c:71:fe:71:37:a8:cd:c0:c4: d6:8b:28:86:70:05:bf:69:bf:34:9b:b7:64:52:0e: b0:99:dd:ca:d7:80:5a:3e:8b:b0:aa:e7:89:65:04: c3:7e:c8:0b:19:af:31:c0:c4:73:f1:de:6a:c3:f5: 30:ef:05:d1:09:c7:a9:49:aa:57:9d:86:dc:2b:c7: 6e:b6:80:9d:bb:06:06:df:10:ab:54:7b:3b:2a:be: a7:9f:82:3c:69:87:f1:6b:e9:25:29:54:c0:07:e2: 92:26:9f:33:c3:32:ad:d7:11:89:ee:fb:4d:22:56: eb:ac:e5:d0:15:58:90:89:11:28:49:1b:2c:98:47: f2:55:0c:cb:8e:0b:32:77:61:ba:93:57:3b:a5:f0: f2:97:2e:a0:cf:04:1f:15:d3:64:0e:04:33:a8:2c: c5:93:4a:00:85:33:48:49:1f:2d:d5:de:ec:4f:a1: 0c:38:c5:f6:d3:47:9b:5e:89:2b:9e:8e:de:68:66: 83:bc:9b:c7:30:ee:95:75:a8:10:6d:e2:1c:e8:da: 77:77:e1:f0:3f:9d:34:48:dd:36:b8:c1:15:79:99: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.32.0/19 91.219.88.0/22 91.228.246.0/23 94.232.104.0/21 185.32.120.0/22 193.104.224.0/22 193.242.202.0/23 IPv6: 2a00:c220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48327 51583 Signature Algorithm: sha256WithRSAEncryption 34:5b:b7:df:4c:cf:48:6e:f2:31:80:bf:96:d6:38:d6:a1:b0: 45:31:53:b4:2a:47:99:4b:cf:17:78:ad:84:b1:a1:66:83:71: 25:8f:74:40:bc:fd:36:96:ca:51:1f:e4:3e:9e:e4:31:0a:33: f1:12:01:e5:65:86:d0:62:61:12:71:1d:df:0e:49:92:46:61: 9c:db:9a:4a:40:0b:d2:ec:0e:30:26:51:44:52:d9:81:2d:b4: eb:83:df:d9:45:f9:8e:bd:c5:49:0a:ed:e8:ca:15:83:4b:60: 46:32:7b:8c:c4:ba:ec:95:94:6d:44:70:80:94:d1:7f:b9:21: b6:f5:b6:18:0e:59:33:24:65:1f:d0:cc:9b:ed:04:19:92:d3: 50:3f:d6:86:15:c3:c5:b0:65:6f:69:d8:72:55:fa:06:95:6f: c0:8f:87:21:06:44:19:ef:f1:d9:32:ca:d7:c2:d9:5e:ef:a8: d6:a1:71:2f:d0:90:88:95:c7:ab:9b:bb:e4:50:00:5e:d8:a2: 4a:14:0c:85:1b:a0:82:66:c9:68:ca:68:88:b0:3e:b9:79:9d: b9:8b:bf:32:78:e4:5d:63:d2:fc:4f:6e:ee:19:2f:4d:40:5b: e0:1a:80:31:b5:29:aa:0f:0c:70:b0:95:12:64:06:66:eb:57: d9:b8:45:2a -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt6yAv5CWW24xkQoWGDvbdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjE4Y2QyNWViZjc0Y2IxYjAwNGIwMWVlNTA1NTAzZmZmMjQ2ZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1U7cLJ2KpWnLI3+y3MzJxisAsKH o4UNg/Jakz9HSIUz81AMcf5xN6jNwMTWiyiGcAW/ab80m7dkUg6wmd3K14BaPouw queJZQTDfsgLGa8xwMRz8d5qw/Uw7wXRCcepSapXnYbcK8dutoCduwYG3xCrVHs7 Kr6nn4I8aYfxa+klKVTAB+KSJp8zwzKt1xGJ7vtNIlbrrOXQFViQiREoSRssmEfy VQzLjgsyd2G6k1c7pfDyly6gzwQfFdNkDgQzqCzFk0oAhTNISR8t1d7sT6EMOMX2 00ebXokrno7eaGaDvJvHMO6VdagQbeIc6Np3d+HwP500SN02uMEVeZmSiQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFJIYzSXr90yxsASwHuUFUD//JG1hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzQ2ZTIy My02ZDIzLTQ3OTUtOTUyNS1iYzg3N2NlOTA2MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNDZlMjIz LTZkMjMtNDc5NS05NTI1LWJjODc3Y2U5MDYxYS8xL2toak5KZXYzVExHd0JMQWU1 UVZRUF84a2JXRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQFH4cgAwQCW9tYAwQBW+T2AwQDXuhoAwQCuSB4 AwQCwWjgAwQBwfLKMA0EAgACMAcDBQAqAMIgMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwC8xwIDAMl/MA0GCSqGSIb3DQEBCwUAA4IBAQA0W7ffTM9IbvIxgL+W1jjW obBFMVO0KkeZS88XeK2EsaFmg3Elj3RAvP02lspRH+Q+nuQxCjPxEgHlZYbQYmES cR3fDkmSRmGc25pKQAvS7A4wJlFEUtmBLbTrg9/ZRfmOvcVJCu3oyhWDS2BGMnuM xLrslZRtRHCAlNF/uSG29bYYDlkzJGUf0Myb7QQZktNQP9aGFcPFsGVvadhyVfoG lW/Aj4chBkQZ7/HZMsrXwtle76jWoXEv0JCIlcerm7vkUABe2KJKFAyFG6CCZslo ymiIsD65eZ25i78yeORdY9L8T27uGS9NQFvgGoAxtSmqDwxwsJUSZAZm61fZuEUq -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:14 2026 by rpki-client