This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer File: kiGxuiPNnBINnmfHS16SkKcq3SA.cer (raw, json) Hash identifier: 2T7hToUib7F2kmr+B7cQplX0aDsg3UxRkmVdcyYNDjk= Subject key identifier: 92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3643385B186B861389A9C54D3822B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205705 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:43:38:5b:18:6b:86:13:89:a9:c5:4d:38:22:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9221b1ba23cd9c120d9e67c74b5e9290a72add20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:f0:46:7d:0c:bd:53:8e:7a:ea:af:7d:b0: 32:03:8b:8d:1e:5c:b9:57:d7:97:8d:eb:72:9b:6a: 3c:08:e1:46:6a:ee:5c:e2:0f:8c:94:c9:cf:40:79: 39:6c:34:20:44:ff:d1:aa:ed:5c:cd:66:fe:79:5b: c7:76:0b:a9:73:6b:6d:60:14:6f:76:cc:45:06:d8: 2b:19:5c:24:18:a9:bd:a2:04:f6:70:dd:2e:be:c1: 51:58:0c:54:24:fd:9a:f4:94:68:ff:05:8b:df:3c: 64:ea:26:ff:33:07:67:2a:e3:8f:21:f6:95:47:43: 1d:40:35:eb:04:56:ce:a3:e3:47:f9:43:32:1c:35: 3e:a4:3e:b6:c7:8d:25:ac:66:06:7a:34:44:3c:67: 57:85:cf:eb:48:91:2f:70:8c:04:00:41:ec:e1:2e: 82:16:92:01:85:9a:66:de:c0:86:d3:5c:ec:2f:92: e2:a2:8a:b3:d4:79:b3:a7:d2:d0:50:11:0a:0a:a7: 08:31:c2:41:7a:c8:0f:42:ce:d9:1b:e2:99:73:66: 73:4a:c8:70:03:8c:2b:92:02:67:1b:40:d7:4c:9a: 09:26:0c:93:f4:a4:30:18:b3:8f:82:97:b6:0b:7a: b5:9f:52:d1:25:53:bc:ba:62:f9:49:25:9f:44:7e: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205705 Signature Algorithm: sha256WithRSAEncryption 10:a9:9d:d9:b6:c4:e9:ef:51:1e:97:5b:66:b9:92:50:6a:78: ce:ba:63:ee:35:f5:75:b1:57:7b:4e:b3:be:97:b3:ab:27:c5: 78:b6:7f:57:a5:91:62:64:ee:63:d2:ff:21:4b:56:06:86:83: bf:7d:90:74:28:60:70:09:63:78:86:08:02:a2:34:c1:47:c2: d6:27:b4:63:fa:39:60:97:2d:f0:fa:15:e6:71:fe:75:42:4a: 26:d9:93:36:0f:ef:de:65:81:67:72:42:13:ab:3c:6d:a5:12: f1:22:6e:78:0e:2a:1f:67:a0:7e:e6:c1:30:ce:87:55:df:b0: d3:0c:25:1e:2d:56:54:80:63:7b:95:69:33:a4:06:e3:06:4a: 19:54:bb:e3:79:2e:b3:9e:3a:c1:b4:28:49:a0:08:08:35:19: 07:34:cf:d5:47:2f:06:01:03:6a:70:b5:13:03:db:23:f8:cd: f4:56:b7:b7:a1:07:78:38:a3:4a:a4:dc:f0:ff:02:26:35:02: e1:54:1f:84:53:34:9d:7d:75:87:d9:e3:09:49:28:e8:aa:83: b5:48:d3:85:1b:4d:67:09:2e:4d:f2:c1:8b:0f:41:60:e8:04: b9:7e:a9:0c:83:0a:39:08:2f:ca:81:db:4a:1e:a8:0b:99:cd: 1f:cd:30:1b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NkM4WxhrhhOJqcVNOCK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjIxYjFiYTIzY2Q5YzEyMGQ5ZTY3Yzc0YjVlOTI5MGE3MmFkZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlevwRn0MvVOOeuqvfbAyA4uNHly5 V9eXjetym2o8COFGau5c4g+MlMnPQHk5bDQgRP/Rqu1czWb+eVvHdgupc2ttYBRv dsxFBtgrGVwkGKm9ogT2cN0uvsFRWAxUJP2a9JRo/wWL3zxk6ib/MwdnKuOPIfaV R0MdQDXrBFbOo+NH+UMyHDU+pD62x40lrGYGejREPGdXhc/rSJEvcIwEAEHs4S6C FpIBhZpm3sCG01zsL5Liooqz1Hmzp9LQUBEKCqcIMcJBesgPQs7ZG+KZc2ZzSshw A4wrkgJnG0DXTJoJJgyT9KQwGLOPgpe2C3q1n1LRJVO8umL5SSWfRH7n4QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJIhsbojzZwSDZ5nx0tekpCnKt0gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzBjZWQ1 OC01YjFkLTQyZTMtOGRhNi0zZGI3ZmU4ZjY3ODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMGNlZDU4 LTViMWQtNDJlMy04ZGE2LTNkYjdmZThmNjc4My8xL2tpR3h1aVBObkJJTm5tZkhT MTZTa0tjcTNTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMjiTANBgkqhkiG9w0BAQsFAAOCAQEAEKmd2bbE6e9R HpdbZrmSUGp4zrpj7jX1dbFXe06zvpezqyfFeLZ/V6WRYmTuY9L/IUtWBoaDv32Q dChgcAljeIYIAqI0wUfC1ie0Y/o5YJct8PoV5nH+dUJKJtmTNg/v3mWBZ3JCE6s8 baUS8SJueA4qH2egfubBMM6HVd+w0wwlHi1WVIBje5VpM6QG4wZKGVS743kus546 wbQoSaAICDUZBzTP1UcvBgEDanC1EwPbI/jN9Fa3t6EHeDijSqTc8P8CJjUC4VQf hFM0nX11h9njCUko6KqDtUjThRtNZwkuTfLBiw9BYOgEuX6pDIMKOQgvyoHbSh6o C5nNH80wGw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:49 2026 by rpki-client