This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer File: kr0ltrnzz-B4X_1OXlQCgztKT40.cer (raw, json) Hash identifier: laNIiwNCOdzRFZw5rSlW8aiM+sfmSmcZ63FW20BE8xc= Subject key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14FA2424A4B3DA29465534139830BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209965 IP: 212.81.48.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fa:24:24:a4:b3:da:29:46:55:34:13:98:30:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:ac:51:d0:d5:77:21:1a:af:2f:ab:45:a8: 1b:a3:84:ee:73:a4:b5:52:e6:aa:a3:d1:22:b0:2f: f4:f4:51:f9:0d:b1:16:68:c3:95:2f:18:52:df:1e: 68:f6:95:04:05:ec:22:34:f8:95:3c:0d:ba:e6:e3: 34:25:64:5c:f6:88:ba:07:45:28:36:d6:d3:d1:be: e5:77:cc:d1:53:99:a5:5f:38:ce:f9:18:4a:1c:cf: a7:29:b0:f0:4e:d5:a1:90:9a:05:57:60:fd:05:b1: 85:cc:55:e6:d9:24:ae:78:cb:8c:3b:94:04:02:d1: 27:ee:7a:67:e0:b1:68:21:1c:2c:3b:30:17:89:c6: ff:73:e1:df:d1:43:40:2c:30:bc:79:37:dc:8b:3b: 59:09:80:e6:dd:6b:b8:6c:4a:e1:0d:f7:bd:60:da: bf:e1:4d:8a:e1:27:8a:6e:3b:13:76:9f:6a:36:a8: 63:f7:5e:2e:13:26:09:f7:44:21:d9:d1:57:51:8a: a9:7b:46:a9:28:c3:3d:6e:ef:13:a9:96:7d:20:1b: b7:f7:2b:86:f7:2f:45:e4:12:2b:61:84:28:60:82: d7:69:3e:73:cc:77:d8:1e:b4:fc:89:b2:69:24:6e: 08:49:ab:bd:4e:cb:ce:cf:f9:0b:ad:11:f8:e0:7d: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.81.48.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209965 Signature Algorithm: sha256WithRSAEncryption ae:cd:1e:5f:55:86:88:b2:de:31:85:2d:4b:78:da:b4:7e:52: a6:bd:34:bf:f6:64:da:63:79:b4:f0:ee:3d:67:45:ce:9e:5e: 12:76:75:bb:62:8e:bd:2f:00:9b:31:3e:2f:1d:11:8f:7f:45: 28:62:86:3b:31:dd:f5:0c:07:a6:65:7a:6b:ca:7d:ee:05:4f: e0:46:bb:14:e3:aa:92:f2:84:74:74:a2:b8:07:5d:c3:4e:ce: f3:4a:cb:9c:98:d3:a7:58:53:21:fb:60:7e:68:28:11:b4:21: 34:85:8e:06:60:19:d4:7d:94:c7:0f:5d:aa:50:52:d1:9b:cc: 83:86:0f:31:2b:86:ce:e7:ec:bf:71:53:53:b1:3d:43:8e:03: 08:3c:03:59:c4:d4:9e:d1:5e:f9:8a:7c:ba:13:7f:8c:fa:aa: 44:41:86:93:06:f1:10:e9:c3:9b:9a:eb:7e:f7:be:47:65:9d: 81:d1:e1:46:8c:dc:6b:b4:ba:1b:a1:e5:56:3c:23:28:7d:71: 68:ad:5a:8e:cc:db:d9:d9:a8:e8:69:a5:2d:3d:28:6b:7f:7a: a8:1f:1b:74:88:91:f1:c4:56:82:ee:9c:a5:82:95:76:6c:c0: d5:ec:66:66:e7:25:ab:11:b6:94:05:17:e9:e2:0f:08:bf:25: 15:d9:ee:15 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FPokJKSz2ilGVTQTmDC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmJkMjViNmI5ZjNjZmUwNzg1ZmZkNGU1ZTU0MDI4MzNiNGE0ZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj+sUdDVdyEary+rRagbo4Tuc6S1 Uuaqo9EisC/09FH5DbEWaMOVLxhS3x5o9pUEBewiNPiVPA265uM0JWRc9oi6B0Uo NtbT0b7ld8zRU5mlXzjO+RhKHM+nKbDwTtWhkJoFV2D9BbGFzFXm2SSueMuMO5QE AtEn7npn4LFoIRwsOzAXicb/c+Hf0UNALDC8eTfciztZCYDm3Wu4bErhDfe9YNq/ 4U2K4SeKbjsTdp9qNqhj914uEyYJ90Qh2dFXUYqpe0apKMM9bu8TqZZ9IBu39yuG 9y9F5BIrYYQoYILXaT5zzHfYHrT8ibJpJG4ISau9TsvOz/kLrRH44H3XtwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJK9Jba588/geF/9Tl5UAoM7Sk+NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzAyYzY4 Yi1jZWRmLTQzMTctODJiOC0yY2Q4YzkxMzkwMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvMDJjNjhi LWNlZGYtNDMxNy04MmI4LTJjZDhjOTEzOTAzMC8xL2tyMGx0cm56ei1CNFhfMU9Y bFFDZ3p0S1Q0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQC1FEwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM0LTANBgkqhkiG9w0BAQsFAAOCAQEArs0eX1WGiLLeMYUtS3jatH5Spr00v/Zk 2mN5tPDuPWdFzp5eEnZ1u2KOvS8AmzE+Lx0Rj39FKGKGOzHd9QwHpmV6a8p97gVP 4Ea7FOOqkvKEdHSiuAddw07O80rLnJjTp1hTIftgfmgoEbQhNIWOBmAZ1H2Uxw9d qlBS0ZvMg4YPMSuGzufsv3FTU7E9Q44DCDwDWcTUntFe+Yp8uhN/jPqqREGGkwbx EOnDm5rrfve+R2WdgdHhRozca7S6G6HlVjwjKH1xaK1ajszb2dmo6GmlLT0oa396 qB8bdIiR8cRWgu6cpYKVdmzA1exmZuclqxG2lAUX6eIPCL8lFdnuFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:11 2026 by rpki-client