This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer (raw, json) Hash identifier: BQxtH+24FGPRT/9vxEOmXPr32raEUYtC6qp69eTlZuU= Subject key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B429755CFC6C41F733FD0E16C59AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197688 IP: 193.142.159.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:42:97:55:cf:c6:c4:1f:73:3f:d0:e1:6c:59:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=927b1e56ac7d07802c4567c4679435159b422096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:a1:64:60:0b:bf:9b:70:6c:d7:90:24:5c: 5e:ac:11:b5:16:2a:17:b4:65:35:ef:8e:61:b5:59: 73:c3:dc:4d:08:8e:41:cb:21:53:91:7c:87:7c:e6: f9:6f:b7:69:82:ee:41:d4:ba:7b:b8:d2:aa:e4:f1: fc:af:80:02:bd:22:f4:bb:be:96:ff:38:9c:a2:2c: bb:02:09:bd:cd:ce:cd:b3:51:5e:f6:02:07:f6:c0: c5:72:e4:b2:95:0e:f1:16:97:3a:91:9f:87:61:97: fe:38:6e:9e:6a:4a:cd:ef:31:02:42:eb:d9:f3:2b: 66:91:19:aa:ac:8f:90:ef:6b:72:f2:17:8d:30:02: b8:36:d4:d5:d0:e0:03:01:42:fc:5a:64:7f:3d:63: 56:3f:d3:fc:d5:b7:44:0f:4a:77:34:f3:53:22:2b: 65:13:51:63:fe:7c:92:3c:ff:3a:22:04:ba:3f:83: 0e:49:a1:1d:0d:7a:c0:79:69:92:af:23:78:81:7e: 29:68:90:61:7b:cf:aa:f7:d3:d6:46:59:ca:e5:4f: a2:ef:10:b2:65:08:35:1a:74:f9:26:9c:57:62:b8: 63:66:6d:80:17:3e:8a:2d:1e:9f:e3:18:d7:7f:c2: 4f:a5:a8:42:8b:12:22:b2:ed:97:98:10:df:13:8d: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.159.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197688 Signature Algorithm: sha256WithRSAEncryption a1:f3:e1:fd:2d:cf:4d:c8:2a:b0:56:48:5f:2d:ef:a7:db:07: 39:aa:04:36:d6:02:c9:d1:cf:9c:2b:2f:65:b5:77:50:ef:dd: 63:27:c5:f7:e1:75:01:35:1c:e9:14:2b:69:5e:74:64:b9:50: d7:f6:8b:da:74:37:62:88:09:92:44:4c:33:7d:e7:41:f0:23: fe:54:45:2c:4d:f0:26:69:88:fa:93:f1:7a:09:c3:2d:75:6d: 10:77:2b:c0:62:09:54:28:b3:b6:7c:a8:ac:74:c4:fa:33:f5: ac:15:b8:c7:e4:62:3b:0e:fc:ff:1b:e1:5a:2f:13:67:47:cf: bf:0c:b4:c5:d6:b2:d5:7d:be:54:c8:ae:80:d6:03:ae:06:03: 81:43:9d:69:06:57:43:ec:fa:e2:f8:4d:bf:28:b8:d6:14:12: 8e:7f:f3:28:0b:dd:dd:67:f0:a5:14:08:8e:be:f0:0d:55:e0: 10:c1:03:b1:32:48:04:00:81:11:d5:97:11:fe:a6:13:64:84: d1:99:bc:8b:b1:2c:96:3b:2f:d8:c2:25:6c:02:fd:2e:38:f4: 5c:f5:a5:cc:25:1b:74:f5:69:aa:fe:b0:56:8d:74:f3:15:c8: 98:8a:0c:6a:47:b8:7b:95:f0:a0:4e:47:05:dc:28:23:15:5a: 61:30:37:b6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6W0KXVc/GxB9zP9DhbFmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjdiMWU1NmFjN2QwNzgwMmM0NTY3YzQ2Nzk0MzUxNTliNDIyMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8KhZGALv5twbNeQJFxerBG1FioX tGU1745htVlzw9xNCI5ByyFTkXyHfOb5b7dpgu5B1Lp7uNKq5PH8r4ACvSL0u76W /zicoiy7Agm9zc7Ns1Fe9gIH9sDFcuSylQ7xFpc6kZ+HYZf+OG6eakrN7zECQuvZ 8ytmkRmqrI+Q72ty8heNMAK4NtTV0OADAUL8WmR/PWNWP9P81bdED0p3NPNTIitl E1Fj/nySPP86IgS6P4MOSaEdDXrAeWmSryN4gX4paJBhe8+q99PWRlnK5U+i7xCy ZQg1GnT5JpxXYrhjZm2AFz6KLR6f4xjXf8JPpahCixIisu2XmBDfE43R8QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJJ7HlasfQeALEVnxGeUNRWbQiCWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2YxMWRl YS0zMDVlLTQ4OTgtOTE5Mi0zNjUzNDdmNDE2YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZjExZGVh LTMwNWUtNDg5OC05MTkyLTM2NTM0N2Y0MTZjMC8xL2tuc2VWcXg5QjRBc1JXZkVa NVExRlp0Q0lKWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwY6fMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMEODANBgkqhkiG9w0BAQsFAAOCAQEAofPh/S3PTcgqsFZIXy3vp9sHOaoENtYC ydHPnCsvZbV3UO/dYyfF9+F1ATUc6RQraV50ZLlQ1/aL2nQ3YogJkkRMM33nQfAj /lRFLE3wJmmI+pPxegnDLXVtEHcrwGIJVCiztnyorHTE+jP1rBW4x+RiOw78/xvh Wi8TZ0fPvwy0xday1X2+VMiugNYDrgYDgUOdaQZXQ+z64vhNvyi41hQSjn/zKAvd 3WfwpRQIjr7wDVXgEMEDsTJIBACBEdWXEf6mE2SE0Zm8i7Esljsv2MIlbAL9Ljj0 XPWlzCUbdPVpqv6wVo108xXImIoMake4e5XwoE5HBdwoIxVaYTA3tg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:00 2026 by rpki-client