This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer File: knp_OqYbIkEYI14yAR7ey-P2pkk.cer (raw, json) Hash identifier: FLavfO5PKu9FNmXm7NKw0BYBX2gCLw7I5m+ObPKd/m8= Subject key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E58703E8DBAD928001A9B7E98FB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12645 IP: 85.119.168.0/21 IP: 194.116.176.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e5:87:03:e8:db:ad:92:80:01:a9:b7:e9:8f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=927a7f3aa61b224118235e32011edecbe3f6a649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:fe:f7:29:7a:cc:0d:3e:eb:f7:35:33:f5: 6d:35:5b:ca:c6:bc:c0:4a:39:41:42:47:e5:f0:47: dd:84:4a:f4:55:27:e5:35:ca:85:53:34:aa:dd:91: c9:fd:48:14:5b:71:0a:4b:7f:13:2a:27:4c:94:2f: f7:3b:e9:9f:ce:b6:b1:8d:0b:18:3a:4e:cc:e6:74: e2:8f:01:aa:25:60:2d:74:9c:4a:96:9b:57:cc:04: 5f:d0:f5:27:d0:90:ad:32:63:c3:36:5f:9c:3e:99: f6:b8:a7:6d:77:3e:a5:ac:71:8c:29:61:e9:4e:2c: 89:d8:6f:b9:b3:34:ed:48:ce:bc:6d:87:2e:aa:b6: 4e:ad:6f:c5:55:3c:e7:25:b2:6e:12:e8:a5:59:d9: bd:b5:80:79:85:df:5c:36:0c:2f:83:6b:23:6a:2a: ea:c8:9a:43:10:b2:85:3f:d5:92:9f:43:4a:34:c0: 80:af:02:1a:77:a5:a6:28:f4:b6:18:f7:fd:22:48: e2:9f:2f:84:ab:23:03:f1:ac:9a:0e:77:be:14:10: 7e:0e:18:83:86:13:54:b8:28:0a:e1:93:fe:0e:84: 25:ba:16:f7:bf:21:ca:53:de:c1:3a:ff:06:c6:ce: b0:81:d8:eb:0d:de:c0:33:45:04:b0:08:ef:ee:04: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.168.0/21 194.116.176.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12645 Signature Algorithm: sha256WithRSAEncryption 15:a9:1d:b6:43:03:99:34:21:bb:60:12:1b:53:52:74:6b:8e: 4b:5d:1a:2b:fd:f0:78:db:7f:5c:26:6a:25:34:94:68:4f:92: 57:f2:92:19:c5:81:7c:c5:2e:b8:fe:0a:98:a6:2a:d8:7a:3f: 4b:3f:93:39:0f:df:d7:97:18:ce:63:43:a1:cb:3d:e1:1f:92: a6:4c:7e:df:3f:55:36:a3:91:6b:0e:83:b8:63:e4:9e:ea:b3: 5f:ea:b6:5d:46:5d:9e:b2:48:71:1e:30:fa:f7:47:c0:6b:44: b1:c3:d6:8a:3c:94:7c:72:cd:46:35:7b:ec:fd:4b:a3:cf:8f: 39:40:1b:54:bc:2a:61:1d:9b:9d:1a:df:a1:a7:18:c7:69:36: 37:33:8f:f9:8f:c3:8d:25:67:ab:0b:79:0c:82:7f:15:f4:92: 0d:b4:c4:e5:1c:13:27:f4:5a:20:44:2c:fa:19:04:4b:ab:e4: e3:d3:0c:33:c2:8c:86:7a:7e:01:d0:d0:7c:0d:46:06:39:01: f0:02:61:4c:d2:ac:6b:18:37:f6:d1:de:1e:41:ef:3c:04:32: 5c:5f:99:8b:6d:67:69:ab:4d:cb:3d:91:b7:10:17:3a:0d:a4: db:44:e8:4c:a3:14:80:4d:68:c4:ff:db:44:82:79:bb:21:2e: 4e:5d:7c:03 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt4NOWHA+jbrZKAAam36Y+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjdhN2YzYWE2MWIyMjQxMTgyMzVlMzIwMTFlZGVjYmUzZjZhNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLH+9yl6zA0+6/c1M/VtNVvKxrzA SjlBQkfl8EfdhEr0VSflNcqFUzSq3ZHJ/UgUW3EKS38TKidMlC/3O+mfzraxjQsY Ok7M5nTijwGqJWAtdJxKlptXzARf0PUn0JCtMmPDNl+cPpn2uKdtdz6lrHGMKWHp TiyJ2G+5szTtSM68bYcuqrZOrW/FVTznJbJuEuilWdm9tYB5hd9cNgwvg2sjairq yJpDELKFP9WSn0NKNMCArwIad6WmKPS2GPf9Ikjiny+EqyMD8ayaDne+FBB+DhiD hhNUuCgK4ZP+DoQluhb3vyHKU97BOv8Gxs6wgdjrDd7AM0UEsAjv7gS6GwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFJJ6fzqmGyJBGCNeMgEe3svj9qZJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2U1ZTIw Ni0yM2M4LTRmODItYjZlMy01MDFjNzFjNDNiMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvZTVlMjA2 LTIzYzgtNGY4Mi1iNmUzLTUwMWM3MWM0M2IwOS8xL2tucF9PcVliSWtFWUkxNHlB UjdleS1QMnBray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDVXeoAwQBwnSwMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAjFlMA0GCSqGSIb3DQEBCwUAA4IBAQAVqR22QwOZNCG7YBIbU1J0a45L XRor/fB4239cJmolNJRoT5JX8pIZxYF8xS64/gqYpirYej9LP5M5D9/XlxjOY0Oh yz3hH5KmTH7fP1U2o5FrDoO4Y+Se6rNf6rZdRl2eskhxHjD690fAa0Sxw9aKPJR8 cs1GNXvs/Uujz485QBtUvCphHZudGt+hpxjHaTY3M4/5j8ONJWerC3kMgn8V9JIN tMTlHBMn9FogRCz6GQRLq+Tj0wwzwoyGen4B0NB8DUYGOQHwAmFM0qxrGDf20d4e Qe88BDJcX5mLbWdpq03LPZG3EBc6DaTbROhMoxSATWjE/9tEgnm7IS5OXXwD -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:28 2026 by rpki-client