This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer File: kmyYtRBh80DM5OC0zjYc40q8L84.cer (raw, json) Hash identifier: 7Ny8prSAZz+nfU6iYBn2Ijnm8BUbr471PSmIr6Yg41Y= Subject key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA709C6A5EDF52B9C1CE4F27C374ED6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59945 IP: 91.224.46.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:09:c6:a5:ed:f5:2b:9c:1c:e4:f2:7c:37:4e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:35:eb:26:13:c4:ff:d5:42:26:96:8f:e9: 6b:1f:d5:f2:59:90:bd:ed:5c:7a:08:cf:25:1e:fe: 04:e7:4e:14:65:aa:ae:8f:70:46:e4:ef:fb:df:c8: 5a:cc:d5:f1:6c:3d:cd:e9:62:41:6b:1d:5c:9d:ee: 5f:7d:e0:71:21:1c:39:95:74:13:5b:d9:12:fb:6b: 93:18:1d:25:e6:c5:df:fe:a8:29:2a:31:78:88:62: 39:df:ed:5e:61:02:f3:9b:26:96:de:73:45:28:5d: 95:01:38:f9:7b:6e:1a:b2:3f:55:e8:9a:ed:0e:ce: 7d:d4:54:9b:c6:5a:34:1a:7a:d6:e3:a0:2a:c8:3b: c9:c6:5f:84:4e:92:9d:0f:7a:61:c1:c6:12:f5:fa: 9f:17:e9:67:e5:d7:c6:f7:d2:81:b3:f6:ea:b7:ec: 33:f6:77:a5:cb:35:ad:3f:c5:ff:2e:75:61:0e:f2: 45:05:5a:22:55:fd:7d:e6:8a:fd:a6:2f:38:2a:b5: 92:88:ec:37:e1:bb:86:bc:23:cd:cc:20:cd:ab:25: cd:31:65:6d:4f:37:28:38:52:f8:8e:03:48:0a:96: b8:35:ea:a3:a4:48:73:4f:97:72:de:d0:56:07:07: c6:44:1e:50:bd:f6:d8:b2:ac:3b:9b:95:4e:64:16: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.46.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59945 Signature Algorithm: sha256WithRSAEncryption 3b:ad:e5:f8:8f:c6:9f:99:76:14:b2:d8:df:94:3d:a2:30:be: a5:b6:04:1b:b4:a9:17:e6:13:17:2a:10:8c:19:13:ba:f1:fa: aa:68:37:fb:ec:83:d1:44:a8:86:02:ac:29:47:e2:f0:1f:0f: 76:ab:c8:66:2c:4a:bc:43:d3:00:be:b5:61:07:02:6b:a8:8e: 78:4c:d2:28:7a:7f:29:a6:1a:30:1d:31:21:1b:38:57:e1:e6: 1d:4c:19:a4:9f:55:bb:e4:47:6b:c2:37:df:be:02:57:fc:7c: fc:c1:df:3d:b0:14:f4:65:98:d0:b0:2c:df:d1:6a:65:0c:ce: 7b:63:ce:44:48:ad:94:10:62:06:24:ac:c8:dd:64:0c:c4:0f: c9:0e:53:a8:08:b2:f5:76:56:fb:5f:07:38:8b:dc:9e:bc:ad: 18:39:6b:1e:e8:f7:5f:ee:2e:c4:cd:89:09:94:58:08:74:01: 15:da:6d:4c:54:59:f9:56:85:1b:e4:05:33:ef:54:58:5b:bb: fc:d0:9a:0f:c3:67:0a:53:c8:b6:a5:e6:9e:a9:ae:69:5f:7d: 04:37:73:ef:2b:92:1f:56:a9:16:e3:ea:83:a9:9a:13:a1:cd: 46:8e:9b:5d:f1:be:1d:b9:2f:41:c5:b7:e8:79:2f:5b:ed:c4: ce:07:01:82 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pwnGpe31K5wc5PJ8N07WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZjOThiNTEwNjFmMzQwY2NlNGUwYjRjZTM2MWNlMzRhYmMyZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5416yYTxP/VQiaWj+lrH9XyWZC9 7Vx6CM8lHv4E504UZaquj3BG5O/738hazNXxbD3N6WJBax1cne5ffeBxIRw5lXQT W9kS+2uTGB0l5sXf/qgpKjF4iGI53+1eYQLzmyaW3nNFKF2VATj5e24asj9V6Jrt Ds591FSbxlo0GnrW46AqyDvJxl+ETpKdD3phwcYS9fqfF+ln5dfG99KBs/bqt+wz 9nelyzWtP8X/LnVhDvJFBVoiVf195or9pi84KrWSiOw34buGvCPNzCDNqyXNMWVt TzcoOFL4jgNICpa4NeqjpEhzT5dy3tBWBwfGRB5QvfbYsqw7m5VOZBZsEQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJJsmLUQYfNAzOTgtM42HONKvC/OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzA1MTU5 YS00NTI5LTQ4ZmEtOTVlOS1kYzc2ZmVjYTk0YmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMDUxNTlh LTQ1MjktNDhmYS05NWU5LWRjNzZmZWNhOTRiZi8xL2tteVl0UkJoODBETTVPQzB6 alljNDBxOEw4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+AuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDqKTANBgkqhkiG9w0BAQsFAAOCAQEAO63l+I/Gn5l2FLLY35Q9ojC+pbYEG7Sp F+YTFyoQjBkTuvH6qmg3++yD0USohgKsKUfi8B8PdqvIZixKvEPTAL61YQcCa6iO eEzSKHp/KaYaMB0xIRs4V+HmHUwZpJ9Vu+RHa8I3374CV/x8/MHfPbAU9GWY0LAs 39FqZQzOe2POREitlBBiBiSsyN1kDMQPyQ5TqAiy9XZW+18HOIvcnrytGDlrHuj3 X+4uxM2JCZRYCHQBFdptTFRZ+VaFG+QFM+9UWFu7/NCaD8NnClPItqXmnqmuaV99 BDdz7yuSH1apFuPqg6maE6HNRo6bXfG+HbkvQcW36HkvW+3EzgcBgg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:51:32 2026 by rpki-client