This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer File: knpH10d_JWifZNBks-yglkfozqI.cer (raw, json) Hash identifier: w6ohM2g78TLQSLHm0aNdF2Gb+Ab79ZfFETcX7eEaHBY= Subject key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F855E90CB722553A10029FD40A3B211 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60076 IP: 193.107.66.0/24 IP: 2a10:efc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5e:90:cb:72:25:53:a1:00:29:fd:40:a3:b2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=927a47d7477f25689f64d064b3eca09647e8cea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:4c:59:d6:71:1d:cd:eb:bb:32:45:19:bb: 84:c2:a0:16:d5:47:bd:44:98:fb:fb:cb:0b:fc:c6: 49:82:56:39:0e:75:c1:35:11:1e:4c:2d:40:0b:42: 15:e7:0a:a2:6f:b3:ae:ea:f3:71:31:fa:7b:68:85: ad:3a:c5:30:4b:88:3c:26:50:01:6c:f2:1b:e6:9a: 75:07:f7:60:82:c6:d9:0a:2c:97:54:ab:b7:6f:25: ab:29:74:17:80:75:6a:35:d9:96:8a:56:98:3f:be: 29:b4:3e:b8:39:88:7e:ee:45:a4:4b:7c:38:48:fb: a3:09:a1:c5:22:4d:e2:02:e0:ae:80:96:32:93:2d: ef:0c:75:61:b0:0b:3a:3c:a9:6c:8a:d9:03:99:b1: 6a:f8:ec:6a:07:70:06:78:40:6b:0f:b1:15:00:fb: dd:58:ad:47:0e:2a:b2:23:8a:fc:52:54:cc:47:e3: f1:53:a0:70:c1:df:88:de:40:14:a2:f0:96:27:0f: f3:56:33:16:cd:c7:62:b2:c4:ec:1c:7e:a5:b2:c4: 10:75:f5:cd:ea:9b:22:b6:1d:56:5a:f6:08:0c:6e: 58:66:48:8e:d0:7a:dd:3e:2f:01:cd:37:76:14:ad: 77:a9:a8:84:d1:01:c2:5c:dd:ee:5a:e9:aa:18:94: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.66.0/24 IPv6: 2a10:efc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60076 Signature Algorithm: sha256WithRSAEncryption b1:26:98:9f:30:19:eb:9f:e6:b4:43:1d:dc:d8:1c:91:4e:93: cb:49:ff:32:fd:96:68:9c:1a:fc:50:86:20:67:3b:91:86:5e: 6e:1d:9a:28:a6:17:3c:5b:ff:4b:b2:27:38:d8:1f:d5:2a:11: 4d:1c:21:31:4b:1f:10:b8:c0:8e:3f:1c:4d:66:68:ab:c4:eb: 0a:77:ef:17:13:bf:0c:37:cd:b0:5a:1b:46:7b:fa:05:75:7b: 65:84:8f:e4:ba:93:85:ff:11:b2:7e:9a:b8:cc:96:9b:8e:a5: 18:31:6d:44:80:6e:58:10:f5:38:d6:4a:93:bf:10:80:d5:2d: 9d:e0:0e:dd:88:a2:d5:07:35:ff:ad:f1:34:05:97:35:b8:d0: ef:1b:74:8b:41:e3:ed:3f:ee:d5:d6:51:18:7b:47:a2:ee:c9: 82:65:b6:a7:e2:a6:a4:d2:16:59:67:06:65:37:8e:ab:08:91: 27:d7:0c:16:40:40:53:99:3b:70:82:34:70:80:06:22:f2:02: fa:28:b2:2b:8a:6c:47:ae:1d:2f:af:a8:6d:74:00:54:de:30: 45:b1:ff:ae:fc:cc:7b:17:27:a0:79:5e:cd:31:07:f9:b1:dd: 9e:91:86:cd:ab:4e:9f:db:16:74:df:5c:2c:00:f9:46:6d:4a: c8:b4:59:87 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hV6Qy3IlU6EAKf1Ao7IRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjdhNDdkNzQ3N2YyNTY4OWY2NGQwNjRiM2VjYTA5NjQ3ZThjZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHpMWdZxHc3ruzJFGbuEwqAW1Ue9 RJj7+8sL/MZJglY5DnXBNREeTC1AC0IV5wqib7Ou6vNxMfp7aIWtOsUwS4g8JlAB bPIb5pp1B/dggsbZCiyXVKu3byWrKXQXgHVqNdmWilaYP74ptD64OYh+7kWkS3w4 SPujCaHFIk3iAuCugJYyky3vDHVhsAs6PKlsitkDmbFq+OxqB3AGeEBrD7EVAPvd WK1HDiqyI4r8UlTMR+PxU6Bwwd+I3kAUovCWJw/zVjMWzcdissTsHH6lssQQdfXN 6psith1WWvYIDG5YZkiO0HrdPi8BzTd2FK13qaiE0QHCXN3uWumqGJRpiwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJJ6R9dHfyVon2TQZLPsoJZH6M6iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2I4YzY4 Ny1hMjNkLTQ3YjAtODQ2Mi05MzI1MjAxNGNjZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvYjhjNjg3 LWEyM2QtNDdiMC04NDYyLTkzMjUyMDE0Y2NmOC8xL2tucEgxMGRfSldpZlpOQmtz LXlnbGtmb3pxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwWtCMA0EAgACMAcDBQAqEO/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDqrDANBgkqhkiG9w0BAQsFAAOCAQEAsSaYnzAZ65/m tEMd3NgckU6Ty0n/Mv2WaJwa/FCGIGc7kYZebh2aKKYXPFv/S7InONgf1SoRTRwh MUsfELjAjj8cTWZoq8TrCnfvFxO/DDfNsFobRnv6BXV7ZYSP5LqThf8Rsn6auMyW m46lGDFtRIBuWBD1ONZKk78QgNUtneAO3Yii1Qc1/63xNAWXNbjQ7xt0i0Hj7T/u 1dZRGHtHou7JgmW2p+KmpNIWWWcGZTeOqwiRJ9cMFkBAU5k7cII0cIAGIvIC+iiy K4psR64dL6+obXQAVN4wRbH/rvzMexcnoHlezTEH+bHdnpGGzatOn9sWdN9cLAD5 Rm1KyLRZhw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:17 2026 by rpki-client