This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer File: kkMni6ptm9TkNnEE4aCxhMufstw.cer (raw, json) Hash identifier: qU6HzR7fS53s+1HxTe9seiWlBWe4TM+v+NEZ6Zb2OpY= Subject key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B92C39DA77C22D887E4637EC9F90C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44049 IP: 91.199.13.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:c3:9d:a7:7c:22:d8:87:e4:63:7e:c9:f9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:15:73:d9:7f:82:56:a4:d4:3e:47:0f:16: bf:c0:d1:c1:5f:ad:b5:7f:c9:0f:18:8e:c1:23:ac: 3a:58:87:2e:44:55:c0:e7:8f:12:0e:b4:18:82:73: 44:c5:8d:3b:b4:da:a1:5e:09:ee:95:e9:47:e4:4d: 8e:85:d1:9d:ca:e6:37:6d:5a:5d:72:30:54:e4:53: b5:68:83:e6:d6:06:92:e1:b6:2f:66:1a:0f:34:e9: 41:c5:47:2f:d3:9d:20:86:fb:de:5b:6b:23:e7:7f: 4a:57:06:ea:bf:6a:ac:0b:7c:b0:3b:54:7e:03:b5: d3:23:16:03:7e:95:c3:dc:7f:6f:3e:81:b2:a8:e5: 42:db:40:c5:2f:f7:d9:9a:d5:74:28:61:c2:96:66: 92:40:18:c6:b8:00:86:b3:7c:bf:e1:1f:c8:a9:4b: 60:3b:2e:e3:cd:c3:6d:35:20:c9:87:99:b8:c5:70: db:44:39:ca:46:d2:96:c3:1e:16:fe:81:4d:0d:a5: c9:99:ad:b1:43:9e:4f:fa:1c:29:62:0c:1b:3f:93: 71:71:d8:99:78:81:3c:88:40:a5:50:c0:81:05:a2: 0b:04:cd:23:7f:39:f2:f7:62:8b:7d:7a:fb:1d:df: db:97:6d:80:50:13:6f:c2:68:6e:66:26:4c:cb:dc: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44049 Signature Algorithm: sha256WithRSAEncryption 99:7d:5d:b8:be:d4:a0:51:08:f0:f6:38:8f:6e:da:26:03:ab: 8b:6d:18:e4:a5:a9:de:f2:15:38:06:6e:0f:2d:5c:49:c4:82: 91:ec:ab:d5:c9:ff:9a:82:bc:0e:5d:19:1c:f6:94:20:b0:ac: 1f:6f:14:9e:8f:ec:3f:01:b4:5a:b1:bc:2b:71:58:e9:bf:e6: d6:9c:e9:3f:21:83:0f:a9:df:f6:a2:e8:b3:cd:b3:d9:3a:92: 4a:dc:97:7a:cf:96:49:2e:95:c1:28:69:b2:76:e7:2f:b5:c1: 90:d7:fb:72:e9:7f:e5:0d:1f:79:89:0a:b8:8e:af:5b:79:52: be:4b:97:81:03:08:cf:13:19:a7:5e:84:a1:2f:0e:62:b6:5a: 03:50:a3:2c:a2:71:f8:24:65:dd:7f:ad:7e:2a:b5:6a:2e:a4: 81:e7:43:09:62:00:79:6a:30:83:0c:33:20:a1:bf:b8:8b:f3: d0:52:5d:1f:27:7d:53:6a:ed:0a:bf:b8:a4:d6:17:7f:00:ee: cd:d5:95:fd:eb:a3:f8:d2:a4:53:88:c6:2b:7e:ab:07:12:20: 32:0a:2a:4e:9d:dc:2c:a2:be:bc:ba:7e:89:3e:78:f4:f2:58: 01:26:88:d9:60:e5:84:51:5d:ac:35:3e:11:33:fd:66:c5:d3: 32:33:ed:19 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6W5LDnad8ItiH5GN+yfkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQzMjc4YmFhNmQ5YmQ0ZTQzNjcxMDRlMWEwYjE4NGNiOWZiMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJsVc9l/glak1D5HDxa/wNHBX621 f8kPGI7BI6w6WIcuRFXA548SDrQYgnNExY07tNqhXgnulelH5E2OhdGdyuY3bVpd cjBU5FO1aIPm1gaS4bYvZhoPNOlBxUcv050ghvveW2sj539KVwbqv2qsC3ywO1R+ A7XTIxYDfpXD3H9vPoGyqOVC20DFL/fZmtV0KGHClmaSQBjGuACGs3y/4R/IqUtg Oy7jzcNtNSDJh5m4xXDbRDnKRtKWwx4W/oFNDaXJma2xQ55P+hwpYgwbP5NxcdiZ eIE8iEClUMCBBaILBM0jfzny92KLfXr7Hd/bl22AUBNvwmhuZiZMy9yrUwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzMwZTdj Zi1iNGI4LTQyNzItODdhYi00YzJmYmRkNTYyNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMzBlN2Nm LWI0YjgtNDI3Mi04N2FiLTRjMmZiZGQ1NjI3OS8xL2trTW5pNnB0bTlUa05uRUU0 YUN4aE11ZnN0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8cNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCsETANBgkqhkiG9w0BAQsFAAOCAQEAmX1duL7UoFEI8PY4j27aJgOri20Y5KWp 3vIVOAZuDy1cScSCkeyr1cn/moK8Dl0ZHPaUILCsH28Uno/sPwG0WrG8K3FY6b/m 1pzpPyGDD6nf9qLos82z2TqSStyXes+WSS6VwShpsnbnL7XBkNf7cul/5Q0feYkK uI6vW3lSvkuXgQMIzxMZp16EoS8OYrZaA1CjLKJx+CRl3X+tfiq1ai6kgedDCWIA eWowgwwzIKG/uIvz0FJdHyd9U2rtCr+4pNYXfwDuzdWV/euj+NKkU4jGK36rBxIg MgoqTp3cLKK+vLp+iT549PJYASaI2WDlhFFdrDU+ETP9ZsXTMjPtGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:03 2026 by rpki-client