This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer File: kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer (raw, json) Hash identifier: DnQtD41zYsZAArv96m52QUQdSvAxzc5dSGP3SFSeyMc= Subject key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9881D6C061663458F4A783E3116A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.229.207.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:98:81:d6:c0:61:66:34:58:f4:a7:83:e3:11:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:83:52:19:e0:f6:3e:82:c3:50:63:fa:09: 79:b7:5d:03:f8:f2:00:25:28:a3:da:cf:7c:0f:ae: ce:3a:7a:b8:60:bd:c1:d7:6b:8f:a7:3a:9f:90:ef: d5:e8:be:ed:a7:e6:4d:dc:b3:62:f1:a6:00:40:9a: 71:13:d8:84:3b:cb:dd:94:8e:63:29:b6:0e:73:1c: 9f:10:5d:f8:1c:84:c6:f4:8d:85:9b:e0:14:1a:09: 42:dc:35:ca:64:74:e4:0c:93:b6:f0:99:38:55:9c: fe:2a:d1:ca:1a:4d:34:6a:6e:0a:29:a3:49:21:59: 86:c8:64:92:dc:93:f4:89:5d:6d:ff:09:61:67:4a: 2d:2b:5e:6b:91:d2:a6:48:3d:27:47:3e:ef:16:4d: 6a:80:e4:a4:83:43:f4:c6:ac:a6:5c:ae:d6:2e:c1: b6:45:b5:6a:c4:51:66:fb:c9:29:c3:30:50:d2:e1: b8:de:fd:63:6f:93:7b:44:c5:f9:1f:42:f6:86:ca: d5:d1:df:a9:b2:cb:e1:27:f6:c9:87:62:aa:a3:e0: bc:cb:c6:12:0d:98:7a:b0:53:ce:66:4c:31:6f:87: a6:42:7a:bf:cd:23:15:49:0e:5f:37:c0:3c:a5:d8: 3e:af:dd:4d:8b:21:23:7f:70:fc:13:92:5d:8d:8d: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.207.0/24 Signature Algorithm: sha256WithRSAEncryption a7:21:ea:84:f0:65:3c:7b:bb:a2:d2:a2:d4:77:ff:d7:24:83: fe:9b:af:5f:31:02:f0:78:64:19:12:a6:42:ec:3b:a0:89:07: 58:0f:48:d4:94:80:33:8d:67:fe:df:d8:30:95:60:bc:d1:37: 78:44:ee:c5:de:3b:b9:fb:82:bf:6b:2c:ff:b1:75:93:5e:91: 49:76:ae:c5:53:29:9a:75:3a:1e:2a:2e:85:2c:62:08:34:27: 47:72:eb:a8:a6:e9:b1:45:d0:c0:02:c2:29:11:de:f3:47:3c: 8c:16:b7:aa:b3:b0:39:0d:07:b1:b3:69:e8:b3:55:a8:97:7c: fd:d3:53:8a:39:d6:ec:a7:d9:77:e2:3c:9a:64:c5:e4:c8:51: b4:bc:16:b0:a5:f9:0f:a8:45:38:54:e7:bf:11:cd:ff:46:e4: db:b3:b1:6e:c7:4d:8c:78:85:2c:52:4a:9d:da:d0:9d:49:1a: 84:f4:37:22:e2:27:01:7c:5a:71:88:ee:a5:18:3f:ec:00:b1: d9:f6:0d:d2:cf:13:3b:32:87:92:9b:cb:11:f0:1d:85:89:4c: a8:14:61:49:b8:8f:bc:ee:67:f6:46:f9:33:96:51:91:d5:11: 37:a4:79:bc:03:41:3c:a7:96:fc:98:78:eb:0c:b3:4a:b6:b5: c0:16:e8:77 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt265iB1sBhZjRY9KeD4xFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjIwODVjZmYzNjU3ZmEyYWVjNmY5MWQ5MWJiZjBjZDRkZDI0NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBeDUhng9j6Cw1Bj+gl5t10D+PIA JSij2s98D67OOnq4YL3B12uPpzqfkO/V6L7tp+ZN3LNi8aYAQJpxE9iEO8vdlI5j KbYOcxyfEF34HITG9I2Fm+AUGglC3DXKZHTkDJO28Jk4VZz+KtHKGk00am4KKaNJ IVmGyGSS3JP0iV1t/wlhZ0otK15rkdKmSD0nRz7vFk1qgOSkg0P0xqymXK7WLsG2 RbVqxFFm+8kpwzBQ0uG43v1jb5N7RMX5H0L2hsrV0d+pssvhJ/bJh2Kqo+C8y8YS DZh6sFPOZkwxb4emQnq/zSMVSQ5fN8A8pdg+r91NiyEjf3D8E5JdjY0q9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJIghc/zZX+irsb5HZG78M1N0kQYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2VkODE0 NzdlLTUxMGItNGQzNy1hMjI5LWVkNGU4OGZiZTY1YS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ4 MTQ3N2UtNTEwYi00ZDM3LWEyMjktZWQ0ZTg4ZmJlNjVhLzAvOTIyMDg1Q0ZGMzY1 N0ZBMkFFQzZGOTFEOTFCQkYwQ0Q0REQyNDQxOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ALnlzzANBgkqhkiG9w0BAQsFAAOCAQEApyHqhPBlPHu7otKi1Hf/1ySD/puvXzEC 8HhkGRKmQuw7oIkHWA9I1JSAM41n/t/YMJVgvNE3eETuxd47ufuCv2ss/7F1k16R SXauxVMpmnU6HiouhSxiCDQnR3LrqKbpsUXQwALCKRHe80c8jBa3qrOwOQ0HsbNp 6LNVqJd8/dNTijnW7KfZd+I8mmTF5MhRtLwWsKX5D6hFOFTnvxHN/0bk27OxbsdN jHiFLFJKndrQnUkahPQ3IuInAXxacYjupRg/7ACx2fYN0s8TOzKHkpvLEfAdhYlM qBRhSbiPvO5n9kb5M5ZRkdURN6R5vANBPKeW/Jh46wyzSra1wBbodw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:30 2026 by rpki-client