This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer File: kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer (raw, json) Hash identifier: YgsOGttRragxvN7J4AQ+1LrcwKx2Ggqs/jwrRzIxSEk= Subject key identifier: 92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F68AD7FBFD2066E2B493459BE6E09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39457 IP: 193.84.25.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:68:ad:7f:bf:d2:06:6e:2b:49:34:59:be:6e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92680145cfb2371ecf4c364726b64708572c4223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:43:16:11:47:c9:51:eb:05:e4:d7:7f:af: 6b:57:85:05:37:1f:4d:a9:83:a4:24:89:9f:e3:6e: 1e:ea:ab:9a:83:8c:1e:c1:6b:54:90:5f:7c:54:01: 61:f5:c4:6e:2d:31:3f:bf:39:2f:e3:1d:73:60:3a: b3:21:72:e1:02:ce:dd:2e:d1:d7:3b:ed:e6:f6:49: 56:85:3d:47:70:f2:5b:5d:6c:b3:28:8b:e3:d7:0b: e3:31:70:22:a6:e7:c4:84:c6:bb:24:e9:63:8c:f4: c3:a2:01:6c:5f:43:8c:94:ac:26:98:03:a9:07:97: 7c:f7:80:4a:2e:ce:60:c0:56:10:8e:95:67:e4:40: 58:e5:19:7c:b2:be:45:7e:4a:22:ca:32:62:30:c4: 6e:9f:cf:ba:2a:01:f7:70:a1:88:42:d6:fa:7f:27: 8f:2c:05:ef:3b:89:3f:43:67:2b:ed:f1:e3:c5:d6: 93:22:63:c8:72:dc:a5:12:75:48:4c:18:ba:54:57: 42:0a:0f:9e:b1:73:97:79:23:b6:2d:15:93:f8:0e: 9c:6a:04:00:64:33:7a:1f:e2:34:46:12:bf:14:ef: 07:c2:f6:4d:5f:e5:56:e3:bc:58:72:49:13:41:69: d8:b8:f3:12:2a:76:fe:50:ce:1a:75:0c:2c:24:8c: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.25.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39457 Signature Algorithm: sha256WithRSAEncryption 44:02:74:0c:66:c0:ac:22:1f:7c:f6:0e:57:2d:cf:3c:5f:92: bb:3c:1b:0e:5c:73:b2:c9:7e:af:ff:6c:90:8b:9e:30:37:5e: c5:73:56:fe:53:d1:19:ce:48:83:83:92:c9:83:45:bf:54:26: f8:5a:5f:b5:c3:e6:72:fd:98:76:79:2f:0a:dd:f1:2f:cd:cd: 23:3e:1c:7f:02:af:97:27:44:de:5e:7a:ac:45:f1:96:6d:24: ba:21:09:15:38:5b:ba:00:76:9f:bd:36:6a:32:54:ea:2e:84: dc:8e:7f:be:4c:0e:ad:42:45:8d:30:7b:05:a6:97:0c:e3:dc: e8:9f:49:c7:04:66:47:9c:a6:26:0e:1b:4d:cb:2d:4b:d8:4f: 31:f5:ad:e7:ae:d6:bf:52:4a:15:a7:ac:cd:e8:90:2e:80:17: 76:6d:8e:d4:1a:71:1a:3a:ef:6c:ac:33:5c:d3:b2:22:b6:7b: 5e:78:56:bb:84:1e:36:e2:f6:21:8a:ba:df:0a:85:8c:2a:f0: 33:18:e9:bc:0a:a9:d6:3d:38:a6:a2:bf:00:79:d9:25:4b:68: 16:b6:97:6c:0d:1e:0b:bf:c2:28:b5:02:d5:5f:53:d9:da:8c: 0a:12:66:ad:0b:5b:b3:20:84:4c:fc:dc:92:8f:b8:d8:61:05: f9:85:9b:d4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8f2itf7/SBm4rSTRZvm4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjY4MDE0NWNmYjIzNzFlY2Y0YzM2NDcyNmI2NDcwODU3MmM0MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZpDFhFHyVHrBeTXf69rV4UFNx9N qYOkJImf424e6quag4wewWtUkF98VAFh9cRuLTE/vzkv4x1zYDqzIXLhAs7dLtHX O+3m9klWhT1HcPJbXWyzKIvj1wvjMXAipufEhMa7JOljjPTDogFsX0OMlKwmmAOp B5d894BKLs5gwFYQjpVn5EBY5Rl8sr5FfkoiyjJiMMRun8+6KgH3cKGIQtb6fyeP LAXvO4k/Q2cr7fHjxdaTImPIctylEnVITBi6VFdCCg+esXOXeSO2LRWT+A6cagQA ZDN6H+I0RhK/FO8HwvZNX+VW47xYckkTQWnYuPMSKnb+UM4adQwsJIxpwwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJJoAUXPsjcez0w2Rya2RwhXLEIjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzEzZjY5 YS0wYmJkLTQ1OTUtOGE0NC0xM2Q3YmViZjQ3YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvMTNmNjlh LTBiYmQtNDU5NS04YTQ0LTEzZDdiZWJmNDdiYS8xL2ttZ0JSYy15Tng3UFREWkhK clpIQ0Zjc1FpTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwVQZMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCaITANBgkqhkiG9w0BAQsFAAOCAQEARAJ0DGbArCIffPYOVy3PPF+SuzwbDlxz ssl+r/9skIueMDdexXNW/lPRGc5Ig4OSyYNFv1Qm+FpftcPmcv2YdnkvCt3xL83N Iz4cfwKvlydE3l56rEXxlm0kuiEJFThbugB2n702ajJU6i6E3I5/vkwOrUJFjTB7 BaaXDOPc6J9JxwRmR5ymJg4bTcstS9hPMfWt567Wv1JKFaeszeiQLoAXdm2O1Bpx GjrvbKwzXNOyIrZ7XnhWu4QeNuL2IYq63wqFjCrwMxjpvAqp1j04pqK/AHnZJUto FraXbA0eC7/CKLUC1V9T2dqMChJmrQtbsyCETPzcko+42GEF+YWb1A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:26 2026 by rpki-client