This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer File: kiBfWmTqH7CQrSbc_bGM77mqvY0.cer (raw, json) Hash identifier: VKxpD+ZD2scWxJIDDVscnTslWjaH55YXVf2+0kBxvxk= Subject key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5605A0B211920740E9F8561DA320C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41320 IP: 195.26.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:60:5a:0b:21:19:20:74:0e:9f:85:61:da:32:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:29:3b:72:b6:d2:25:1e:28:be:59:04:d8:20: 3e:33:fb:be:13:a0:a8:01:36:dd:b5:bb:92:68:fd: cd:95:5c:77:36:11:ee:96:99:b2:59:c3:f4:a0:f6: bd:d4:51:7e:cd:32:3d:61:26:4f:27:1e:8c:29:55: 27:2f:d5:3e:cf:4e:4d:86:52:c7:79:03:df:2c:c0: f8:ec:7a:45:63:76:b8:ce:a5:e2:a0:57:8d:2e:95: 8f:1c:91:9b:31:14:a6:ad:32:29:ed:21:fb:67:ac: 1f:f1:ad:a2:39:78:24:4a:8e:eb:9b:f2:dc:bc:7c: 96:ec:76:10:17:15:80:5b:bd:fe:d2:bb:0c:06:33: fa:c7:ac:4d:12:11:c5:ab:7d:75:b4:33:fe:3b:43: 80:ce:0d:02:55:79:9e:89:c8:5e:33:d3:42:68:82: bc:ab:3a:29:51:0c:ba:c5:8a:28:fd:c9:b8:5c:8b: 61:e5:05:0c:83:31:a8:94:ed:c4:c6:f3:9a:54:66: d1:32:57:83:55:05:a0:00:ab:31:c3:15:08:95:8f: 54:40:7a:f6:76:d9:63:54:6c:2f:cf:b9:96:9a:1d: 91:2a:d3:3f:f2:17:7d:2f:ce:ac:57:78:48:83:5e: 27:86:ce:dc:95:a4:eb:3f:d3:3b:c1:96:bb:58:0e: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.26.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41320 Signature Algorithm: sha256WithRSAEncryption 44:0a:7e:a1:b5:64:42:2c:73:65:e3:ef:f1:e0:84:bf:04:e7: 77:b1:06:50:33:50:59:7b:0b:0b:23:be:1f:49:0d:76:f4:48: ec:dc:b1:05:d6:7e:a0:67:98:55:69:75:a2:7f:3d:62:90:cd: 0d:d0:f1:f4:58:2d:29:dc:21:ea:2a:da:d3:cf:0d:ac:92:5b: d7:3b:cc:23:65:7a:bd:7a:c2:a7:5e:a3:e6:3a:06:8f:90:d2: 80:2d:e8:08:23:38:41:6d:90:88:86:37:31:72:71:84:1f:a9: 30:60:64:bf:5b:b1:e3:3c:c4:be:08:86:7a:5f:80:1c:81:f5: f1:3b:10:9d:ad:3e:56:8f:61:d8:fa:35:4f:43:a6:29:3c:a7: 75:39:ca:fd:6c:60:39:d9:02:c9:7a:59:b5:5a:86:aa:d9:cd: eb:44:a9:ff:fb:1a:5d:c2:11:2c:d8:4f:4f:30:bc:f1:23:54: 87:f3:e4:97:09:b9:e1:13:1d:fb:d6:33:da:5d:dc:7c:a0:0f: c8:ee:b5:a6:12:2a:35:9d:dd:9a:9b:3a:2e:b8:38:da:27:72: 74:f3:98:fa:b5:37:0d:79:aa:ef:e2:c4:30:d5:5c:b2:35:4c: b6:a6:00:25:ba:46:df:ae:cf:a0:d7:2f:ce:45:e4:e9:15:3a: e3:80:0a:4f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pWBaCyEZIHQOn4Vh2jIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjIwNWY1YTY0ZWExZmIwOTBhZDI2ZGNmZGIxOGNlZmI5YWFiZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Sk7crbSJR4ovlkE2CA+M/u+E6Co ATbdtbuSaP3NlVx3NhHulpmyWcP0oPa91FF+zTI9YSZPJx6MKVUnL9U+z05NhlLH eQPfLMD47HpFY3a4zqXioFeNLpWPHJGbMRSmrTIp7SH7Z6wf8a2iOXgkSo7rm/Lc vHyW7HYQFxWAW73+0rsMBjP6x6xNEhHFq311tDP+O0OAzg0CVXmeicheM9NCaIK8 qzopUQy6xYoo/cm4XIth5QUMgzGolO3ExvOaVGbRMleDVQWgAKsxwxUIlY9UQHr2 dtljVGwvz7mWmh2RKtM/8hd9L86sV3hIg14nhs7claTrP9M7wZa7WA4nZQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJIgX1pk6h+wkK0m3P2xjO+5qr2NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzY1MjI2 Ny1lYTEzLTQ4OTItOWZmYS0wOWMxYjczMzZhNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNjUyMjY3 LWVhMTMtNDg5Mi05ZmZhLTA5YzFiNzMzNmE1MS8xL2tpQmZXbVRxSDdDUXJTYmNf YkdNNzdtcXZZMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwxpcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwChaDANBgkqhkiG9w0BAQsFAAOCAQEARAp+obVkQixzZePv8eCEvwTnd7EGUDNQ WXsLCyO+H0kNdvRI7NyxBdZ+oGeYVWl1on89YpDNDdDx9FgtKdwh6ira088NrJJb 1zvMI2V6vXrCp16j5joGj5DSgC3oCCM4QW2QiIY3MXJxhB+pMGBkv1ux4zzEvgiG el+AHIH18TsQna0+Vo9h2Po1T0OmKTyndTnK/WxgOdkCyXpZtVqGqtnN60Sp//sa XcIRLNhPTzC88SNUh/Pklwm54RMd+9Yz2l3cfKAPyO61phIqNZ3dmps6Lrg42idy dPOY+rU3DXmq7+LEMNVcsjVMtqYAJbpG367PoNcvzkXk6RU644AKTw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:39 2026 by rpki-client