This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer File: kljqmCx9enWV6Dphx66z12GIlww.cer (raw, json) Hash identifier: vTHIHgEVQlcykjtpfokGrbYuZSAbI3OrZ47eSEalZDc= Subject key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F151DAD98C1EA42CEE73D109990DD93 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202439 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1d:ad:98:c1:ea:42:ce:e7:3d:10:99:90:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:cc:61:ce:27:7f:d0:ea:82:f9:8a:12:37: 16:2c:69:1f:8f:2f:f6:d9:37:d2:ee:7f:36:1e:c1: 86:f6:04:d3:40:73:46:58:f5:bf:c6:40:92:ee:72: 73:84:ad:de:db:1f:04:ff:9d:23:8a:0d:76:d5:6b: 43:92:bc:46:06:3b:ee:2d:d5:1c:8a:89:40:3b:aa: 49:47:f0:32:fe:58:10:37:63:aa:fa:6c:e0:c4:06: f6:38:1e:f3:d2:64:95:f7:06:4e:47:e0:22:d1:28: 5d:df:f9:bf:7b:0c:07:8b:65:14:29:70:f0:3b:58: bd:b7:3c:91:2f:43:ca:7e:79:21:d2:c5:a8:a2:e7: ee:b4:cf:d5:77:d1:09:0f:83:39:91:fa:dd:0c:04: 17:8a:35:58:0d:cf:d3:05:69:47:1c:89:e9:14:e0: 63:08:03:60:82:62:72:16:1e:ec:68:0f:77:12:b6: 82:be:5d:b1:a0:f9:73:d8:ff:66:a2:55:71:41:17: 8f:63:3e:f1:6c:55:2f:bb:14:4f:7f:67:73:d8:d1: 24:54:19:ca:f0:47:05:0f:89:dc:19:3a:ce:b4:81: 9f:7d:fa:4f:c7:eb:7f:66:d0:3c:02:b0:df:84:6e: 73:8a:f5:c4:2a:b8:2c:5a:88:70:6b:3c:e2:47:b0: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202439 Signature Algorithm: sha256WithRSAEncryption 8e:13:f4:0f:e7:16:4b:e4:52:e7:1b:b2:c3:a8:04:44:e4:cc: 67:72:f5:aa:83:99:b2:93:01:25:d9:6a:ff:57:02:3e:10:22: 4d:c5:9f:12:bd:ae:30:b3:c9:1e:d6:02:aa:19:aa:bd:11:a8: f4:77:e0:84:25:22:ae:97:b1:fd:2c:f6:8c:1e:81:69:15:ce: dd:70:86:1c:bd:de:9f:30:c5:f8:dd:3a:90:74:28:0f:e8:82: 11:f2:2e:fa:78:0b:a9:9e:03:56:77:73:98:40:ed:05:11:77: 06:84:0b:4d:12:5b:d1:3f:df:61:3d:92:35:3b:01:99:e8:29: 75:89:fd:b6:2d:99:5f:c2:88:33:96:c7:bd:91:ee:6d:9b:71: 98:cf:55:2e:11:78:56:d4:4e:33:ee:d0:07:58:a2:fc:7b:0b: 26:a3:c4:62:bf:88:d5:91:9c:c1:63:ce:28:4e:a3:b1:79:57: a5:ee:b3:7d:b8:5c:44:54:7c:a6:9a:59:93:9b:f8:a9:ec:ab: 0c:db:85:8b:14:e2:51:55:d2:d5:b9:ca:38:58:c5:23:61:68: 03:ed:27:81:a9:1b:4e:2b:b6:a4:3e:7e:3f:18:51:25:9f:80: 91:48:6f:e8:bb:d6:16:98:c1:eb:ac:b8:22:9e:7b:93:9f:5a: ef:73:42:6f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FR2tmMHqQs7nPRCZkN2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjU4ZWE5ODJjN2Q3YTc1OTVlODNhNjFjN2FlYjNkNzYxODg5NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtPMYc4nf9DqgvmKEjcWLGkfjy/2 2TfS7n82HsGG9gTTQHNGWPW/xkCS7nJzhK3e2x8E/50jig121WtDkrxGBjvuLdUc iolAO6pJR/Ay/lgQN2Oq+mzgxAb2OB7z0mSV9wZOR+Ai0Shd3/m/ewwHi2UUKXDw O1i9tzyRL0PKfnkh0sWooufutM/Vd9EJD4M5kfrdDAQXijVYDc/TBWlHHInpFOBj CANggmJyFh7saA93EraCvl2xoPlz2P9molVxQRePYz7xbFUvuxRPf2dz2NEkVBnK 8EcFD4ncGTrOtIGfffpPx+t/ZtA8ArDfhG5zivXEKrgsWohwazziR7BkQwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJJY6pgsfXp1leg6Yceus9dhiJcMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2Y5MWVl ZC05OGM2LTQ3ZjYtYWJmNy05MTEwNzBmMjdlMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZjkxZWVk LTk4YzYtNDdmNi1hYmY3LTkxMTA3MGYyN2UzNy8xL2tsanFtQ3g5ZW5XVjZEcGh4 NjZ6MTJHSWx3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWxzANBgkqhkiG9w0BAQsFAAOCAQEAjhP0D+cWS+RS 5xuyw6gEROTMZ3L1qoOZspMBJdlq/1cCPhAiTcWfEr2uMLPJHtYCqhmqvRGo9Hfg hCUirpex/Sz2jB6BaRXO3XCGHL3enzDF+N06kHQoD+iCEfIu+ngLqZ4DVndzmEDt BRF3BoQLTRJb0T/fYT2SNTsBmegpdYn9ti2ZX8KIM5bHvZHubZtxmM9VLhF4VtRO M+7QB1ii/HsLJqPEYr+I1ZGcwWPOKE6jsXlXpe6zfbhcRFR8pppZk5v4qeyrDNuF ixTiUVXS1bnKOFjFI2FoA+0ngakbTiu2pD5+PxhRJZ+AkUhv6LvWFpjB66y4Ip57 k59a73NCbw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:39 2026 by rpki-client