This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer File: kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer (raw, json) Hash identifier: yXRkRDNM2AaAVHzD1yZBp7ou+w3WZI6MpJlFWem83aU= Subject key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECD6CFFD77AD9C40BD730CFA0CA771 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.34.227.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d6:cf:fd:77:ad:9c:40:bd:73:0c:fa:0c:a7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:d2:2e:f8:08:b2:29:f4:80:e2:eb:a1:1b: ff:b6:0b:5a:d6:00:52:7f:8b:07:1c:64:c8:68:ac: af:f1:c0:b8:95:1d:59:fc:5b:89:11:f7:7c:1d:7a: d6:2e:ba:1a:58:7b:62:ab:7e:de:34:43:d6:72:5f: 86:b0:95:f8:b1:6e:2c:56:e8:2a:f9:8f:d1:98:44: 61:7d:90:98:e8:b7:7a:00:81:27:f3:d8:1c:5b:9e: f9:fe:5e:87:52:d7:15:21:9a:6f:84:76:9a:1e:24: d5:73:74:22:75:0c:11:53:a2:79:5b:3d:f3:55:c5: f1:92:ac:8b:b0:8b:2c:57:0c:aa:7e:8e:72:5b:fe: a9:02:dc:80:8b:ce:70:a5:91:c4:5d:10:78:9c:9e: f5:4b:da:12:03:2e:d3:8e:ca:8a:2a:58:c6:27:db: 16:c0:10:ec:8a:48:cf:1c:7a:a0:6c:3d:9f:18:00: cc:3a:39:e9:98:e0:03:02:50:11:97:56:d7:b5:f0: 41:1a:fe:44:67:b7:fe:36:b9:ef:89:94:04:35:3a: b5:d8:92:02:50:1e:c2:b6:07:ac:c9:4d:4b:89:da: 09:f3:33:43:e4:fa:a2:fa:db:7b:8a:8d:3b:85:8c: c3:38:8f:fd:e6:15:50:6c:b6:f8:7f:12:9b:75:de: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.227.0/24 Signature Algorithm: sha256WithRSAEncryption a9:54:e1:f4:19:bd:3e:f7:1c:4f:b4:45:ff:54:49:8e:1a:dd: f9:e8:c2:4f:a9:a6:3c:e4:fc:0f:fd:ad:5a:c7:9d:4c:d3:e8: ab:d8:0a:3d:b6:04:17:38:96:3b:82:24:75:a8:0c:86:da:76: d2:cc:80:c8:18:8a:59:35:fe:29:65:42:9b:96:69:63:6c:90: fd:f6:55:06:cd:08:b9:82:8f:ed:2f:cc:35:c7:9c:24:0a:f5: a0:b5:73:69:72:39:f3:33:c5:a6:3a:c9:3e:6b:0e:a4:8c:4c: 02:41:39:34:23:e9:72:94:b1:ae:f9:2c:7d:ac:e6:0f:9b:7f: 84:ab:a1:9d:a9:29:ae:e6:7a:a4:29:6b:ac:8d:4f:e9:30:48: 36:ce:3a:d8:07:33:fa:90:ae:c4:2a:ca:93:9f:fc:db:c8:23: f1:66:21:22:fc:84:e1:a4:44:62:b4:30:01:ac:94:31:44:32: de:0d:28:a1:a9:97:c4:b8:e6:6e:56:07:10:6a:03:a4:c8:05: 56:a7:c6:bf:18:c5:6b:52:d9:f2:f2:61:71:32:54:3d:06:5a: ae:57:7a:29:95:06:84:9e:ec:72:97:6b:4f:99:f6:33:db:94: 6a:71:8a:d2:40:cf:c5:37:25:ac:98:f0:34:ba:8a:4a:23:cd: fd:6c:30:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87NbP/XetnEC9cwz6DKdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjYwYThjNjZhYmRiNmU1MDY4MTAwNzAwNmQ1N2Y3ZDFmZTljYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4jSLvgIsin0gOLroRv/tgta1gBS f4sHHGTIaKyv8cC4lR1Z/FuJEfd8HXrWLroaWHtiq37eNEPWcl+GsJX4sW4sVugq +Y/RmERhfZCY6Ld6AIEn89gcW575/l6HUtcVIZpvhHaaHiTVc3QidQwRU6J5Wz3z VcXxkqyLsIssVwyqfo5yW/6pAtyAi85wpZHEXRB4nJ71S9oSAy7TjsqKKljGJ9sW wBDsikjPHHqgbD2fGADMOjnpmOADAlARl1bXtfBBGv5EZ7f+NrnviZQENTq12JIC UB7CtgesyU1LidoJ8zND5Pqi+tt7io07hYzDOI/95hVQbLb4fxKbdd6gKwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJJgqMZqvbblBoEAcAbVf30f6couMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzQ0NGNj Yy0yYjU2LTRhNWYtOWEzYS1kZDRiNTE0ZmNkMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNDQ0Y2Nj LTJiNTYtNGE1Zi05YTNhLWRkNGI1MTRmY2QwOC8xL2ttQ294bXE5dHVVR2dRQndC dFZfZlJfcHlpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSLjMA0GCSqGSIb3DQEBCwUAA4IBAQCpVOH0 Gb0+9xxPtEX/VEmOGt356MJPqaY85PwP/a1ax51M0+ir2Ao9tgQXOJY7giR1qAyG 2nbSzIDIGIpZNf4pZUKblmljbJD99lUGzQi5go/tL8w1x5wkCvWgtXNpcjnzM8Wm Osk+aw6kjEwCQTk0I+lylLGu+Sx9rOYPm3+Eq6GdqSmu5nqkKWusjU/pMEg2zjrY BzP6kK7EKsqTn/zbyCPxZiEi/IThpERitDABrJQxRDLeDSihqZfEuOZuVgcQagOk yAVWp8a/GMVrUtny8mFxMlQ9BlquV3oplQaEnuxyl2tPmfYz25RqcYrSQM/FNyWs mPA0uopKI839bDBG -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:01 2026 by rpki-client