This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer (raw, json) Hash identifier: WWhyroloovpxY71zTs0pVDRQYPJkzN1/17X/CMlEwds= Subject key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED18C12BF7B65FC2FAF487575D3F64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48301 AS: 216412 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:18:c1:2b:f7:b6:5f:c2:fa:f4:87:57:5d:3f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:87:bd:04:3f:a9:c7:eb:f6:00:ce:ff:e1:b1: e9:c2:4f:85:34:8b:a6:69:a5:81:1e:61:67:e6:d8: 3a:98:fb:95:01:bb:c7:71:83:70:a0:02:25:d8:bd: 2f:cc:95:94:90:c0:1c:09:29:c0:86:cb:b4:bd:b2: fa:d1:a0:4a:bf:bc:47:c9:37:74:bc:c7:77:75:fb: 0a:6f:20:05:bd:cf:fd:8e:d3:f8:b0:fe:b8:1a:e3: ee:11:1c:ac:46:f5:0d:9f:11:32:5a:13:69:2d:4f: b2:de:73:7e:1a:a2:ca:6b:bc:d4:a1:2d:cf:56:36: 03:34:88:84:e3:0b:aa:d2:ce:7a:59:41:52:17:c4: d5:43:f2:64:e3:e1:58:76:42:0c:94:ef:23:26:15: 84:de:2e:b2:88:fa:2a:8d:5a:8b:8b:71:be:bb:a4: 35:6f:ca:88:cc:ed:96:17:ce:0e:ef:0a:b5:7b:b7: 62:fc:f8:29:7d:11:c7:17:28:7d:7a:6b:3e:05:a6: 26:d1:01:7b:b8:83:46:37:6b:84:74:84:66:d0:17: 92:7c:40:a0:d1:54:77:85:23:74:c4:ef:f3:5b:2c: 27:14:cd:bc:d8:b6:8a:2c:ba:78:b6:4a:68:cc:ed: e1:be:5d:e1:fe:1c:05:c1:8c:c8:66:2e:3e:5e:7f: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48301 216412 Signature Algorithm: sha256WithRSAEncryption a7:0e:11:59:6e:1e:ae:36:06:32:71:8e:81:c7:e6:c2:fe:c7: ae:a6:c6:68:50:ef:6c:ec:06:db:de:4a:b4:29:5d:3a:60:11: 3e:2a:d3:20:5e:8e:23:65:a4:c9:75:1d:11:63:eb:b2:93:e1: cf:e0:e2:dd:93:58:7d:a6:ab:69:e4:b0:76:ec:22:23:b2:e6: 22:11:59:22:49:0f:b5:68:f0:44:21:78:cc:b7:d6:8e:39:7a: af:d8:b6:15:c0:bf:94:74:73:9a:e7:c3:dc:9c:c3:9c:e7:49: ec:3e:82:8a:43:59:ec:87:20:54:59:f5:ef:10:36:b6:e7:4f: 10:a6:81:a3:47:53:9f:95:c3:6e:7e:1c:bf:8d:a1:31:57:6b: d1:49:c2:ba:12:a3:9f:90:f2:d7:b5:f5:10:26:cd:1e:9c:6f: 64:cc:26:2b:c9:c3:f3:4e:ca:9b:ee:22:2e:dd:b7:0b:e2:9a: 6f:77:cb:eb:43:ba:9a:20:27:3f:df:13:78:60:67:c0:2e:2e: 1b:13:a5:a6:f7:31:08:9d:3a:23:90:ed:29:83:49:71:56:df: a2:11:72:68:89:71:5c:0b:e4:7d:ef:e6:76:df:0e:eb:d4:5f: 63:cf:2e:27:87:13:25:bd:40:56:38:08:12:8e:38:04:ce:6d: 28:f7:b1:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87RjBK/e2X8L69IdXXT9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM1NzVjMTY3ZTYwM2U0NmRjZGU0YTAyNzFiYjVlZGIzYjNmZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioe9BD+px+v2AM7/4bHpwk+FNIum aaWBHmFn5tg6mPuVAbvHcYNwoAIl2L0vzJWUkMAcCSnAhsu0vbL60aBKv7xHyTd0 vMd3dfsKbyAFvc/9jtP4sP64GuPuERysRvUNnxEyWhNpLU+y3nN+GqLKa7zUoS3P VjYDNIiE4wuq0s56WUFSF8TVQ/Jk4+FYdkIMlO8jJhWE3i6yiPoqjVqLi3G+u6Q1 b8qIzO2WF84O7wq1e7di/PgpfRHHFyh9ems+BaYm0QF7uINGN2uEdIRm0BeSfECg 0VR3hSN0xO/zWywnFM282LaKLLp4tkpozO3hvl3h/hwFwYzIZi4+Xn8qWQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJLFdcFn5gPkbc3koCcbte2zs/2TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzNiOTMx NS1iYWU4LTRkY2UtODEwOS03N2IxNWM1OWUzODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvM2I5MzE1 LWJhZTgtNGRjZS04MTA5LTc3YjE1YzU5ZTM4Ny8xL2tzVjF3V2ZtQS1SdHplU2dK eHUxN2JPel9aTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwC8rQIDA01cMA0GCSqGSIb3DQEBCwUAA4IBAQCnDhFZ bh6uNgYycY6Bx+bC/seupsZoUO9s7Abb3kq0KV06YBE+KtMgXo4jZaTJdR0RY+uy k+HP4OLdk1h9pqtp5LB27CIjsuYiEVkiSQ+1aPBEIXjMt9aOOXqv2LYVwL+UdHOa 58PcnMOc50nsPoKKQ1nshyBUWfXvEDa2508QpoGjR1OflcNufhy/jaExV2vRScK6 EqOfkPLXtfUQJs0enG9kzCYrycPzTsqb7iIu3bcL4ppvd8vrQ7qaICc/3xN4YGfA Li4bE6Wm9zEInTojkO0pg0lxVt+iEXJoiXFcC+R97+Z23w7r1F9jzy4nhxMlvUBW OAgSjjgEzm0o97E6 -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:29 2026 by rpki-client