This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer (raw, json) Hash identifier: yX61xU5zVjNZ2NJ20MzSJVjTRjZ9jLfiNcJY7Au2Lv8= Subject key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA35B8C7DDC7E4938AD6B30BC4404 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206978 IP: 149.249.12.0/22 IP: 185.196.29.0/24 IP: 2a03:e440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a3:5b:8c:7d:dc:7e:49:38:ad:6b:30:bc:44:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92214a90d4095fd26765cc0e4df899e8c46c06df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:3e:c3:f2:80:63:49:1c:cf:5a:a9:b0:c7: 5b:dd:9d:52:a0:67:f4:0c:22:61:ed:dc:67:f2:c5: 6c:93:e8:e4:44:fd:ec:38:7a:e2:d9:b5:2a:94:44: ac:c3:19:c6:a2:37:cd:cc:ac:61:e7:f2:12:68:b7: 05:8f:84:9a:81:62:b6:cb:1c:fd:be:e8:b0:3d:ec: 4c:06:b7:d8:db:e9:ae:6c:c9:32:49:ad:9e:d2:75: 2b:d5:75:12:8a:66:cf:ea:ef:22:99:f2:34:a5:5b: 00:03:02:e3:7b:66:a0:ec:c5:ab:73:1c:d2:02:60: c2:60:f9:5e:b8:bd:49:20:5d:5a:34:1c:4a:2a:33: f9:4c:d6:0c:77:37:81:89:99:91:f7:52:dd:ce:b7: 63:4b:03:c2:a8:50:bb:1a:04:da:7a:b3:d8:41:39: 28:1f:c3:73:61:08:53:a6:12:f6:62:55:e0:de:ea: 8a:a6:e8:70:e2:39:c2:09:d5:8b:9a:d2:45:cf:48: c5:96:76:dc:69:f3:ab:5c:41:4e:90:f0:bf:9f:c4: 8f:6c:05:c5:f2:09:c3:88:e6:1f:e5:1e:47:16:b1: 0c:53:76:67:ab:9a:67:a3:c2:2a:82:55:66:96:c2: 98:50:c2:4e:49:27:55:fb:48:54:8d:00:97:42:90: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.12.0/22 185.196.29.0/24 IPv6: 2a03:e440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206978 Signature Algorithm: sha256WithRSAEncryption aa:d4:36:71:74:1a:40:c4:06:3b:18:9c:3c:34:d6:25:af:c8: 2e:17:ab:ed:a0:4e:11:f0:30:f8:d5:7a:be:9e:e2:66:91:dd: 55:6a:c5:2b:b3:04:ee:99:29:35:a7:49:0e:ee:05:65:bc:0c: b0:35:73:a8:a9:1e:26:51:a3:79:f3:b6:3b:3c:51:74:63:70: 69:d7:72:f4:8c:33:22:0d:5f:c0:1f:30:bf:78:6b:01:5f:95: d0:81:76:94:d7:14:e8:f7:a9:04:c2:88:94:8d:7b:d6:91:f0: 38:60:45:7f:c4:4f:62:80:6e:f1:a2:f4:ed:d7:6d:36:e4:58: d7:86:66:87:b0:69:da:b7:ae:39:5f:21:0b:2f:b3:34:a6:84: a2:f4:59:45:39:7d:78:f4:5c:b8:26:af:ba:2c:c3:ca:63:9c: 03:c9:b8:06:77:00:e7:6b:3c:5a:82:98:34:81:99:e0:a5:4a: 7d:36:0c:47:e5:6c:b0:40:07:22:bd:51:4f:a9:e1:f5:2c:60: 99:36:5c:fd:06:8c:95:54:94:64:f9:a2:b5:0b:bb:cb:bd:37: 4e:cb:04:56:93:00:2c:84:5d:4f:e1:14:52:95:28:d2:77:7a: 01:44:b9:c4:94:9e:c2:95:78:21:f4:dd:8b:d1:a3:ed:41:41: 0a:a3:5a:06 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57KNbjH3cfkk4rWswvEQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjIxNGE5MGQ0MDk1ZmQyNjc2NWNjMGU0ZGY4OTllOGM0NmMwNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy8+w/KAY0kcz1qpsMdb3Z1SoGf0 DCJh7dxn8sVsk+jkRP3sOHri2bUqlESswxnGojfNzKxh5/ISaLcFj4SagWK2yxz9 vuiwPexMBrfY2+mubMkySa2e0nUr1XUSimbP6u8imfI0pVsAAwLje2ag7MWrcxzS AmDCYPleuL1JIF1aNBxKKjP5TNYMdzeBiZmR91LdzrdjSwPCqFC7GgTaerPYQTko H8NzYQhTphL2YlXg3uqKpuhw4jnCCdWLmtJFz0jFlnbcafOrXEFOkPC/n8SPbAXF 8gnDiOYf5R5HFrEMU3Znq5pno8IqglVmlsKYUMJOSSdV+0hUjQCXQpA+KwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJIhSpDUCV/SZ2XMDk34mejEbAbfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzlhZTlh ZC02YThjLTQ3Y2ItYmRkMS01N2Q4MDMwYjYxZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvOWFlOWFk LTZhOGMtNDdjYi1iZGQxLTU3ZDgwMzBiNjFlMS8xL2tpRktrTlFKWDlKblpjd09U ZmlaNk1Sc0J0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQClfkMAwQAucQdMA0EAgACMAcDBQMqA+RAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMogjANBgkqhkiG9w0BAQsFAAOCAQEAqtQ2 cXQaQMQGOxicPDTWJa/ILher7aBOEfAw+NV6vp7iZpHdVWrFK7ME7pkpNadJDu4F ZbwMsDVzqKkeJlGjefO2OzxRdGNwaddy9IwzIg1fwB8wv3hrAV+V0IF2lNcU6Pep BMKIlI171pHwOGBFf8RPYoBu8aL07ddtNuRY14Zmh7Bp2reuOV8hCy+zNKaEovRZ RTl9ePRcuCavuizDymOcA8m4BncA52s8WoKYNIGZ4KVKfTYMR+VssEAHIr1RT6nh 9SxgmTZc/QaMlVSUZPmitQu7y703TssEVpMALIRdT+EUUpUo0nd6AUS5xJSewpV4 IfTdi9Gj7UFBCqNaBg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:25 2026 by rpki-client