This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer File: klzs7-UigXQF0m_JK7UQSskM_cU.cer (raw, json) Hash identifier: 3cxYUVJ+1seWpiFLF0P/UWI9+qwVZ7CyxzE5UatO3gs= Subject key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CBB32BA72E11B5C919E4115CF1C6D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39793 AS: 49601 AS: 58307 IP: 91.227.60.0/23 IP: 91.229.56.0/24 IP: 91.229.182.0/24 IP: 91.229.185.0/24 IP: 91.229.210.0/24 IP: 185.189.124.0/22 IP: 185.226.60.0/22 IP: 185.252.96.0/22 IP: 193.162.107.0/24 IP: 2001:7f8:6b::/48 IP: 2a0b:e680::/29 IP: 2a0c:3e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bb:32:ba:72:e1:1b:5c:91:9e:41:15:cf:1c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:ea:10:f9:c3:6c:89:67:92:1a:1d:46:90: 77:eb:92:6c:42:b5:26:74:e2:d0:66:fc:d5:5c:24: 16:2f:09:b0:91:65:e4:7a:ea:fa:db:b4:4a:17:ae: c1:2b:7e:15:66:3b:48:50:9a:d5:80:ba:7c:2c:f4: a3:de:f0:4b:6a:61:d7:a0:b1:c8:cd:aa:60:08:8c: 3e:b0:14:41:9c:a4:d5:c0:45:a1:aa:8c:fc:b0:7a: df:47:59:2e:a1:44:09:ce:be:b8:71:aa:7f:c4:cc: 52:41:19:e2:5e:d3:cb:56:1f:e9:92:4f:62:95:9d: b1:0d:39:06:9b:0b:19:45:f4:03:84:cf:ed:12:57: 02:3a:43:83:27:e8:c3:e3:b4:e8:62:d6:fb:ca:58: 93:60:62:c5:48:ac:b8:95:d1:cc:77:35:84:7b:4a: 8b:69:38:7e:bb:e5:38:17:c8:12:3f:a3:04:1d:26: 82:5b:d5:96:59:db:4e:e0:bc:41:d9:d9:a5:f9:f8: 9f:fc:7e:79:34:38:99:b1:90:3f:17:cb:36:94:c9: 26:44:83:88:5f:58:45:67:c6:2e:7c:96:c3:d4:cf: 6b:d9:32:96:6e:02:04:da:02:51:a9:70:d1:93:e1: 18:53:8d:08:16:7e:f5:25:4a:b8:8b:82:bf:e2:69: 60:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.60.0/23 91.229.56.0/24 91.229.182.0/24 91.229.185.0/24 91.229.210.0/24 185.189.124.0/22 185.226.60.0/22 185.252.96.0/22 193.162.107.0/24 IPv6: 2001:7f8:6b::/48 2a0b:e680::/29 2a0c:3e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39793 49601 58307 Signature Algorithm: sha256WithRSAEncryption 78:9c:86:6e:fa:54:d1:e0:24:17:4d:fc:91:be:5a:d8:ba:46: 45:f8:57:43:f5:fe:6b:a9:1d:a8:6a:5a:41:1f:21:f1:4d:33: 9b:d6:c8:ca:8d:9f:b8:36:02:dc:b9:09:42:b2:a0:39:d9:ef: d9:b8:f8:09:7b:fa:be:8b:92:4a:06:02:42:15:7e:0d:33:b4: 70:c8:92:01:45:ee:6b:2e:22:72:ac:6f:18:3c:77:2b:ee:2c: b1:7a:b3:00:4c:ad:88:75:ea:98:99:ab:9f:84:b7:ba:4e:6b: 65:21:90:3f:d1:c2:68:56:70:18:dc:23:24:68:54:44:c5:b7: 3d:d3:fb:ea:c6:c8:a1:38:bf:4a:70:13:85:02:3e:8c:79:9c: 6d:49:a3:30:b1:1c:59:29:b6:cb:7b:00:ed:23:93:8c:85:62: ae:08:72:e8:51:20:08:dc:88:ed:d6:dd:81:5e:e1:a4:bc:48: b5:3a:01:de:70:aa:5c:ed:06:fc:1a:0c:b5:da:b7:b1:e4:4c: 5e:44:96:d2:47:07:e7:a7:4c:56:3c:9f:23:d6:c7:3a:1d:21: 90:ce:91:a8:a6:25:fe:a7:be:31:fd:f7:bf:f1:dd:4d:95:d9: a4:9b:34:03:1b:15:b7:c4:13:87:b2:7c:38:58:27:7c:e6:65: 9c:a0:92:7c -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt9XLsyunLhG1yRnkEVzxxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjVjZWNlZmU1MjI4MTc0MDVkMjZmYzkyYmI1MTA0YWM5MGNmZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vDqEPnDbIlnkhodRpB365JsQrUm dOLQZvzVXCQWLwmwkWXkeur627RKF67BK34VZjtIUJrVgLp8LPSj3vBLamHXoLHI zapgCIw+sBRBnKTVwEWhqoz8sHrfR1kuoUQJzr64cap/xMxSQRniXtPLVh/pkk9i lZ2xDTkGmwsZRfQDhM/tElcCOkODJ+jD47ToYtb7yliTYGLFSKy4ldHMdzWEe0qL aTh+u+U4F8gSP6MEHSaCW9WWWdtO4LxB2dml+fif/H55NDiZsZA/F8s2lMkmRIOI X1hFZ8YufJbD1M9r2TKWbgIE2gJRqXDRk+EYU40IFn71JUq4i4K/4mlgQQIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFJJc7O/lIoF0BdJvySu1EErJDP3FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2YwNzY3 Yy1iMDE5LTQ2M2MtYTBiMS04ZDRiZmQwYWFjZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvZjA3Njdj LWIwMTktNDYzYy1hMGIxLThkNGJmZDBhYWNlOC8xL2tsenM3LVVpZ1hRRjBtX0pL N1VRU3NrTV9jVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG4GCCsGAQUF BwEHAQH/BF8wXTA8BAIAATA2AwQBW+M8AwQAW+U4AwQAW+W2AwQAW+W5AwQAW+XS AwQCub18AwQCueI8AwQCufxgAwQAwaJrMB0EAgACMBcDBwAgAQf4AGsDBQMqC+aA AwUDKgw+ADAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAm3ECAwDBwQIDAOPDMA0G CSqGSIb3DQEBCwUAA4IBAQB4nIZu+lTR4CQXTfyRvlrYukZF+FdD9f5rqR2oalpB HyHxTTOb1sjKjZ+4NgLcuQlCsqA52e/ZuPgJe/q+i5JKBgJCFX4NM7RwyJIBRe5r LiJyrG8YPHcr7iyxerMATK2IdeqYmaufhLe6TmtlIZA/0cJoVnAY3CMkaFRExbc9 0/vqxsihOL9KcBOFAj6MeZxtSaMwsRxZKbbLewDtI5OMhWKuCHLoUSAI3Ijt1t2B XuGkvEi1OgHecKpc7Qb8Ggy12rex5ExeRJbSRwfnp0xWPJ8j1sc6HSGQzpGopiX+ p74x/fe/8d1NldmkmzQDGxW3xBOHsnw4WCd85mWcoJJ8 -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:31 2026 by rpki-client