This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer File: koAW21XmZLpyHhmumrQxbBDZZwg.cer (raw, json) Hash identifier: DM2ijvY+E6V6EYQB0uMjh55OrRzyQt1Xcn2YDED6P5w= Subject key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C7EE20A17C405E402099C4CF01F07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.43.97.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7e:e2:0a:17:c4:05:e4:02:09:9c:4c:f0:1f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928016db55e664ba721e19ae9ab4316c10d96708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:c4:c7:cd:0d:d2:ad:82:27:a7:63:16:d6: 72:de:df:be:b7:79:44:00:d0:3b:b1:00:46:4b:6e: 65:53:af:59:de:39:2b:a5:1e:db:5d:06:50:42:77: 19:d0:60:92:8a:0d:44:81:b5:b8:bc:18:72:dd:e8: 6e:53:8b:d4:de:ec:fc:46:ec:f3:2d:de:3b:81:86: e4:88:64:d8:d8:90:6e:19:ae:80:f0:45:41:88:41: 7a:44:6c:f1:2b:46:3a:6b:85:5c:07:60:b1:ff:6b: 6a:03:6a:15:f1:a4:f8:8c:dc:d7:7f:db:e7:95:a2: 73:3b:ff:24:50:5b:a4:98:55:1f:9b:9a:08:54:31: d0:cb:82:38:76:3b:18:75:4d:63:f6:29:d3:e0:d5: ee:d4:4c:b8:3b:0c:24:e3:b8:9a:fe:12:84:f4:d0: 0a:f7:75:e4:ef:1d:f7:77:2b:ad:25:73:4e:5e:1a: 32:d8:71:f9:de:84:bd:6b:cb:f9:cb:a2:68:20:0d: 4d:c8:d0:dc:d3:fe:d9:9b:7e:a6:fe:24:20:e3:0b: b1:30:9e:c5:69:9c:8f:99:5e:8f:bf:f8:d1:49:b2: c8:23:1b:14:ba:43:28:f0:1d:97:06:6d:a6:28:cd: 71:54:fb:7c:88:59:f7:fa:31:20:cc:4f:0b:15:1c: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.97.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:6c:8a:c4:50:0f:58:70:77:6c:15:4a:f0:f9:76:33:1a:f8: f8:27:87:b0:19:c3:51:43:40:bd:c6:96:2e:7e:08:6a:d6:89: fe:07:53:4d:f4:31:18:35:62:df:42:10:75:ab:61:64:ff:c6: e8:a5:76:be:d9:2d:cd:ee:47:8f:72:16:d5:01:49:f3:90:76: 0b:eb:f8:8e:af:4c:b2:ba:82:63:c7:23:d2:44:50:a8:4e:ba: 63:80:99:a2:85:05:05:a9:8f:9d:36:b2:91:99:88:1a:77:72: f1:fd:3a:bd:8f:ad:8c:cf:33:57:6a:8b:02:f2:81:92:94:84: 26:9c:e9:33:f7:7b:41:37:05:da:f4:37:7c:bc:23:c6:21:8c: d4:6d:98:5e:c7:2f:c0:9a:b0:34:72:39:f1:53:34:b0:77:5c: f9:e0:d4:77:3f:b9:97:da:24:e9:06:1d:c3:d7:e6:ab:8f:3e: b0:72:8a:ec:21:73:6f:bc:0f:67:af:cf:aa:c1:29:8d:51:ba: 3b:85:a1:64:73:f0:63:bc:a9:53:b5:af:27:33:68:cc:21:15: a7:e5:10:72:69:05:cb:ad:1c:ff:fc:09:2f:a8:90:95:96:6f: fa:c0:ee:78:9b:f4:7d:f2:ad:13:11:c1:53:1e:ec:ff:7c:a0: 61:26:af:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XH7iChfEBeQCCZxM8B8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjgwMTZkYjU1ZTY2NGJhNzIxZTE5YWU5YWI0MzE2YzEwZDk2NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC3Ex80N0q2CJ6djFtZy3t++t3lE ANA7sQBGS25lU69Z3jkrpR7bXQZQQncZ0GCSig1EgbW4vBhy3ehuU4vU3uz8Ruzz Ld47gYbkiGTY2JBuGa6A8EVBiEF6RGzxK0Y6a4VcB2Cx/2tqA2oV8aT4jNzXf9vn laJzO/8kUFukmFUfm5oIVDHQy4I4djsYdU1j9inT4NXu1Ey4Owwk47ia/hKE9NAK 93Xk7x33dyutJXNOXhoy2HH53oS9a8v5y6JoIA1NyNDc0/7Zm36m/iQg4wuxMJ7F aZyPmV6Pv/jRSbLIIxsUukMo8B2XBm2mKM1xVPt8iFn3+jEgzE8LFRxrQQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzcyMWEx Yy1jZjM5LTQ0NDgtODgzYi1lODljZGFiODJlMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNzIxYTFj LWNmMzktNDQ0OC04ODNiLWU4OWNkYWI4MmUxYy8xL2tvQVcyMVhtWkxweUhobXVt clF4YkJEWlp3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSthMA0GCSqGSIb3DQEBCwUAA4IBAQCabIrE UA9YcHdsFUrw+XYzGvj4J4ewGcNRQ0C9xpYufghq1on+B1NN9DEYNWLfQhB1q2Fk /8bopXa+2S3N7kePchbVAUnzkHYL6/iOr0yyuoJjxyPSRFCoTrpjgJmihQUFqY+d NrKRmYgad3Lx/Tq9j62MzzNXaosC8oGSlIQmnOkz93tBNwXa9Dd8vCPGIYzUbZhe xy/AmrA0cjnxUzSwd1z54NR3P7mX2iTpBh3D1+arjz6wcorsIXNvvA9nr8+qwSmN Ubo7haFkc/BjvKlTta8nM2jMIRWn5RByaQXLrRz//AkvqJCVlm/6wO54m/R98q0T EcFTHuz/fKBhJq9a -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:30 2026 by rpki-client