This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer File: klUhi2nlURQ8UfodkZUS4aRMXJ0.cer (raw, json) Hash identifier: e1ttSYgAFAlYtMKhONmNBzw45ktrbYLCFFA/iViwPT0= Subject key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE04E527383CB35ED6800EE9E9BDBF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47196 AS: 56364 IP: 45.143.136.0/22 IP: 46.173.208.0/20 IP: 91.203.192.0/22 IP: 195.128.120.0/21 IP: 2a0f:6f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:04:e5:27:38:3c:b3:5e:d6:80:0e:e9:e9:bd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9255218b69e551143c51fa1d919512e1a44c5c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:46:c7:62:7b:51:f5:31:b6:0c:ee:de:8a: 6d:9a:4c:f1:cd:be:97:c8:db:4e:5e:fc:f5:d7:0a: e7:d8:0e:4d:87:fc:86:e8:d8:f4:df:6d:da:be:ac: b9:46:45:b0:e2:fd:44:04:99:63:4f:88:70:0d:09: 0f:92:e8:79:aa:92:f5:3a:a3:55:71:52:c3:73:94: e8:0f:03:cb:3f:c1:23:45:54:48:29:bc:e0:42:b7: 00:98:86:3c:2a:ab:4d:46:4a:d2:df:60:34:c0:3e: 7e:c4:71:b5:bd:a9:cb:e8:d7:57:24:f7:ed:3f:27: a9:aa:a8:72:c6:cd:e9:d2:76:e3:c9:ec:a6:75:e3: ac:8f:ec:b3:1d:a3:ff:1a:f0:20:7e:24:b8:ac:3d: 3c:11:e3:d2:1e:c1:ad:3b:88:54:57:ea:28:ae:19: 04:64:e2:16:51:5d:2f:26:1d:05:4d:d5:70:54:a7: 97:c0:cc:4c:28:ae:ca:40:08:ed:d8:c1:b3:75:a6: 1e:e3:a5:2c:33:b5:85:5c:a3:9e:0b:58:c2:62:d5: 60:55:65:b0:27:f2:fd:45:fa:91:a4:fb:a6:cf:d9: b7:0a:69:92:16:f2:b6:63:2b:76:e2:d4:37:bb:d4: 82:dd:52:98:8d:71:88:6d:d9:b9:ee:ce:24:61:ba: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.136.0/22 46.173.208.0/20 91.203.192.0/22 195.128.120.0/21 IPv6: 2a0f:6f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47196 56364 Signature Algorithm: sha256WithRSAEncryption 88:8e:8a:ea:cb:e1:3c:bb:4e:be:f5:5b:ea:5a:c8:ae:12:f1: 51:38:2b:cd:d3:60:08:47:27:c9:02:7d:8c:f9:ca:10:6c:61: e0:b5:7b:2d:e3:81:a5:88:74:76:e8:ae:65:69:45:e3:c9:90: 30:88:11:4e:9b:af:f1:3c:72:b7:b1:c9:f1:13:5d:df:3e:b4: 32:aa:b5:b5:cb:93:07:be:ef:d1:23:87:ad:41:c4:df:25:94: a7:e0:7c:6a:ab:63:35:4c:79:cd:8e:7a:8c:6a:47:50:78:95: f9:79:38:39:84:60:9b:d5:95:4b:fd:fb:bf:7b:fa:49:82:9b: 24:3c:88:6a:e1:c6:26:c0:54:02:3b:0e:19:88:cb:fa:02:8b: ac:74:f2:77:90:71:af:82:a8:5e:39:f5:4f:28:8d:55:24:a1: 4d:72:7a:96:c7:d8:8d:16:70:3a:a9:1e:ad:67:cb:ac:89:03: 14:50:df:52:7f:5b:81:92:25:54:64:f0:15:e4:7d:d3:b3:ba: 07:89:b1:5b:56:e2:a3:2f:b6:0e:ed:7a:0b:c2:f3:b9:81:b3: 0d:c6:40:02:54:0a:5e:d5:4c:03:d6:a8:3d:ec:2e:51:75:46: 1c:58:4a:38:d4:7f:a5:2a:48:82:85:5b:e1:55:91:7d:82:f9: d3:23:a2:dc -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt87gTlJzg8s17WgA7p6b2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjU1MjE4YjY5ZTU1MTE0M2M1MWZhMWQ5MTk1MTJlMWE0NGM1YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ1Gx2J7UfUxtgzu3optmkzxzb6X yNtOXvz11wrn2A5Nh/yG6Nj0323avqy5RkWw4v1EBJljT4hwDQkPkuh5qpL1OqNV cVLDc5ToDwPLP8EjRVRIKbzgQrcAmIY8KqtNRkrS32A0wD5+xHG1vanL6NdXJPft Pyepqqhyxs3p0nbjyeymdeOsj+yzHaP/GvAgfiS4rD08EePSHsGtO4hUV+oorhkE ZOIWUV0vJh0FTdVwVKeXwMxMKK7KQAjt2MGzdaYe46UsM7WFXKOeC1jCYtVgVWWw J/L9RfqRpPumz9m3CmmSFvK2Yyt24tQ3u9SC3VKYjXGIbdm57s4kYbry+wIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFJJVIYtp5VEUPFH6HZGVEuGkTFydMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzQ4Mjg5 Ni04MjZhLTRiZWQtYjE0Zi1hZmZiYTJkZjNkNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDgyODk2 LTgyNmEtNGJlZC1iMTRmLWFmZmJhMmRmM2Q2Mi8xL2tsVWhpMm5sVVJROFVmb2Rr WlVTNGFSTVhKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLY+IAwQELq3QAwQCW8vAAwQDw4B4MA0EAgAC MAcDBQMqD2+AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC4XAIDANwsMA0GCSqG SIb3DQEBCwUAA4IBAQCIjorqy+E8u06+9VvqWsiuEvFROCvN02AIRyfJAn2M+coQ bGHgtXst44GliHR26K5laUXjyZAwiBFOm6/xPHK3scnxE13fPrQyqrW1y5MHvu/R I4etQcTfJZSn4Hxqq2M1THnNjnqMakdQeJX5eTg5hGCb1ZVL/fu/e/pJgpskPIhq 4cYmwFQCOw4ZiMv6AousdPJ3kHGvgqheOfVPKI1VJKFNcnqWx9iNFnA6qR6tZ8us iQMUUN9Sf1uBkiVUZPAV5H3Ts7oHibFbVuKjL7YO7XoLwvO5gbMNxkACVApe1UwD 1qg97C5RdUYcWEo41H+lKkiChVvhVZF9gvnTI6Lc -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:40 2026 by rpki-client