This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer File: krWsiPLNsUk0gwwawJal73MJjxI.cer (raw, json) Hash identifier: SBn/vu9gDs+Vw5Bh7iXYVilQ1Om/F3vIuZSvegZtpbY= Subject key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12434431B8677DAECB97A58A5F1100 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213300 IP: 2.56.170.0/24 IP: 2a10:4040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:43:44:31:b8:67:7d:ae:cb:97:a5:8a:5f:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:53:6d:a8:70:bf:2f:5c:a3:c7:94:1c:a1: a2:99:a9:bb:9c:38:c9:ea:64:c0:66:6d:be:70:16: 32:61:06:1e:76:8b:c0:5a:b5:01:77:8d:9e:96:31: ca:d4:40:cc:4f:97:d7:07:52:0a:17:02:7e:85:94: 1a:97:8a:e4:a2:fb:ea:0c:24:de:81:98:c2:17:44: f5:af:31:73:c1:9a:34:7d:ea:ff:c5:87:f0:4c:46: d2:2a:fd:4f:e4:1d:f7:6f:43:ee:1f:a5:1e:83:9c: 46:61:ee:9f:b4:ca:7f:a1:66:1e:d4:c7:5f:9c:34: 4b:91:aa:90:e6:40:8c:dd:33:ba:8f:bc:86:48:8a: 67:4a:af:27:c9:c7:60:e0:3d:a1:bc:76:47:61:56: 9a:f0:4f:83:9f:1f:3c:b7:a4:64:45:6f:06:1d:c6: c5:a3:3a:e8:1f:21:74:31:90:31:e8:0a:b7:34:b7: fa:e6:02:f0:b7:89:78:e7:41:66:d3:27:b4:47:0f: f9:56:2b:8e:3a:48:14:eb:71:59:85:32:f2:a2:5a: 64:54:6e:5f:9c:2f:ae:f4:11:37:0e:17:2c:2d:ca: 9b:9b:cc:f3:cd:15:d8:e9:2b:a7:65:f2:34:90:27: af:7a:e9:1e:03:e4:f9:5d:85:a1:2d:bf:28:f0:ec: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.170.0/24 IPv6: 2a10:4040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213300 Signature Algorithm: sha256WithRSAEncryption 89:02:7f:d3:eb:93:a8:da:b8:57:bc:0b:39:90:1c:b7:43:f9: a2:e3:03:94:c0:4a:4b:c6:94:bc:5e:87:e7:fb:6a:52:f9:a0: fb:8f:f5:b3:75:bf:6c:30:77:33:fc:23:00:d3:94:10:1d:fb: 19:3d:80:f5:0e:5f:30:54:c2:5b:5c:dd:23:1e:f8:8f:91:26: 27:09:f9:74:cd:ae:2e:8a:02:2d:c1:92:8f:e4:0e:31:4c:42: f4:ed:be:7a:f4:14:5b:aa:46:fc:ad:8d:15:b8:b4:b1:df:5a: 00:46:31:b6:81:e2:54:b2:96:6a:7a:e3:c8:81:cd:11:05:b9: d4:62:dc:8f:1a:a6:50:51:90:8e:e8:d9:e6:ca:72:19:38:ef: 3c:63:47:c3:3d:5a:d5:85:6b:af:2c:c2:50:d0:a4:25:23:2a: 20:85:22:b9:80:ec:61:39:0c:85:7d:47:35:48:e7:d4:d5:81: fa:10:8f:45:10:19:e4:38:99:da:b2:b8:5e:98:d2:4e:3e:fb: 63:67:52:7c:ab:ad:47:a0:c2:34:91:ce:62:d8:b7:07:75:d5: fb:34:cd:f4:a3:bb:1e:6f:23:2e:9d:00:2e:27:e6:87:e4:5f: cf:d3:e9:bb:6d:de:8e:96:fc:b7:10:c5:e8:30:58:f9:e9:1c: df:16:5f:dd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EkNEMbhnfa7Ll6WKXxEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmI1YWM4OGYyY2RiMTQ5MzQ4MzBjMWFjMDk2YTVlZjczMDk4ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHtTbahwvy9co8eUHKGimam7nDjJ 6mTAZm2+cBYyYQYedovAWrUBd42eljHK1EDMT5fXB1IKFwJ+hZQal4rkovvqDCTe gZjCF0T1rzFzwZo0fer/xYfwTEbSKv1P5B33b0PuH6Ueg5xGYe6ftMp/oWYe1Mdf nDRLkaqQ5kCM3TO6j7yGSIpnSq8nycdg4D2hvHZHYVaa8E+Dnx88t6RkRW8GHcbF ozroHyF0MZAx6Aq3NLf65gLwt4l450Fm0ye0Rw/5ViuOOkgU63FZhTLyolpkVG5f nC+u9BE3DhcsLcqbm8zzzRXY6SunZfI0kCeveukeA+T5XYWhLb8o8OwOmQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJK1rIjyzbFJNIMMGsCWpe9zCY8SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2U0MTdi ZC0xNGViLTRjYTUtODBmNy0zNmM0NmY5MGQ5YTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvZTQxN2Jk LTE0ZWItNGNhNS04MGY3LTM2YzQ2ZjkwZDlhNS8xL2tyV3NpUExOc1VrMGd3d2F3 SmFsNzNNSmp4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAAjiqMA0EAgACMAcDBQMqEEBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBNDANBgkqhkiG9w0BAQsFAAOCAQEAiQJ/0+uTqNq4 V7wLOZAct0P5ouMDlMBKS8aUvF6H5/tqUvmg+4/1s3W/bDB3M/wjANOUEB37GT2A 9Q5fMFTCW1zdIx74j5EmJwn5dM2uLooCLcGSj+QOMUxC9O2+evQUW6pG/K2NFbi0 sd9aAEYxtoHiVLKWanrjyIHNEQW51GLcjxqmUFGQjujZ5spyGTjvPGNHwz1a1YVr ryzCUNCkJSMqIIUiuYDsYTkMhX1HNUjn1NWB+hCPRRAZ5DiZ2rK4XpjSTj77Y2dS fKutR6DCNJHOYti3B3XV+zTN9KO7Hm8jLp0ALifmh+Rfz9Ppu23ejpb8txDF6DBY +ekc3xZf3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:58 2026 by rpki-client