This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer File: kv6qMsTg4Zca0NWLFyztFyEFaFw.cer (raw, json) Hash identifier: Erj2yeTiUqft5Vqoq9G8kIvNUeRmo1pZLBSwIyJ+DNY= Subject key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CF0CCBAA1783405E6DC6CAF6C61D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59465 IP: 91.240.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f0:cc:ba:a1:78:34:05:e6:dc:6c:af:6c:61:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92feaa32c4e0e1971ad0d58b172ced172105685c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:f6:a7:1f:6f:ae:83:ce:e6:84:ef:2e:27: e6:cc:d1:d2:5c:2b:9a:60:e7:fc:44:11:a9:60:6a: fb:56:ad:61:1c:21:1f:ae:1b:25:29:50:3c:5d:1b: 4f:3a:d2:17:b0:c7:2c:2f:d3:10:02:85:c7:66:02: 10:c7:cd:40:03:35:63:54:98:18:1b:21:4e:0d:e9: 9e:2f:68:05:11:7f:9e:23:87:fc:af:35:0c:0b:2d: c1:4d:b6:a8:d9:1b:97:7a:67:05:66:86:6e:14:62: e5:1c:08:c0:d9:23:46:0b:f8:50:84:d5:47:f9:3d: 20:d2:fa:c3:e2:4c:a2:e1:4e:fe:4f:a0:45:6e:9c: e7:20:7c:da:43:cb:b1:a2:f2:f3:4b:6c:db:06:ba: ba:01:41:72:d3:03:04:71:b2:09:99:5e:3f:ee:10: 45:76:89:62:6b:8a:6b:65:75:9e:61:bd:72:61:ee: 89:8e:f1:a6:31:1b:46:8d:96:b3:a9:47:97:bc:6e: ec:3d:12:59:07:5d:c0:6e:e4:eb:a1:0a:6f:3e:16: 8f:0a:89:dd:9f:ff:fa:b4:d1:6a:f1:a5:cc:be:8e: 2f:74:56:9d:49:3e:5f:3a:54:c0:a9:11:7c:ad:e4: 7f:af:b0:19:fa:27:3a:1d:22:38:9a:56:59:ea:f5: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59465 Signature Algorithm: sha256WithRSAEncryption 40:dc:b0:62:ec:dc:fe:38:70:c1:59:aa:05:b7:5a:65:7e:fd: e2:a4:5c:f5:8d:25:23:84:69:ef:86:86:dd:be:c9:c1:ac:20: cf:c5:e5:11:61:bc:1a:9d:aa:22:0f:ee:04:51:b0:51:ce:c6: bb:3f:e6:b9:02:17:ed:69:2d:b3:82:d4:4f:48:52:58:df:92: f1:8e:6b:e2:be:7f:e3:c8:71:55:f6:c9:72:ff:ef:1b:aa:d8: c4:0d:7b:dc:ed:ef:c8:a9:7f:f2:bc:96:b1:8a:3f:f5:1c:02: 3e:2d:26:55:38:98:30:e7:e5:06:f6:2c:34:15:6c:58:e3:8e: f8:27:3e:41:d6:e3:1e:47:52:95:4a:e3:98:bd:a2:83:62:fa: 04:9b:83:16:a0:cf:91:51:ec:75:ad:0e:37:bf:05:d5:b4:e2: cf:ac:5d:f9:b4:c1:7b:4b:7f:f3:94:5f:83:b0:e7:30:4f:40: a4:07:03:8e:ef:57:f4:19:a5:46:8d:aa:2c:2b:37:80:f7:15: 9b:50:24:00:ef:a4:81:32:81:fa:70:7d:6b:ba:76:cd:cc:b1: 9f:bc:f3:2c:69:6c:34:30:9a:06:ae:85:28:5e:12:2b:22:30: c2:9f:34:af:3f:0f:77:94:79:3e:79:67:a4:32:fa:01:26:71: 64:01:be:c9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XPDMuqF4NAXm3GyvbGHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmZlYWEzMmM0ZTBlMTk3MWFkMGQ1OGIxNzJjZWQxNzIxMDU2ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4X2px9vroPO5oTvLifmzNHSXCua YOf8RBGpYGr7Vq1hHCEfrhslKVA8XRtPOtIXsMcsL9MQAoXHZgIQx81AAzVjVJgY GyFODemeL2gFEX+eI4f8rzUMCy3BTbao2RuXemcFZoZuFGLlHAjA2SNGC/hQhNVH +T0g0vrD4kyi4U7+T6BFbpznIHzaQ8uxovLzS2zbBrq6AUFy0wMEcbIJmV4/7hBF dolia4prZXWeYb1yYe6JjvGmMRtGjZazqUeXvG7sPRJZB13AbuTroQpvPhaPCond n//6tNFq8aXMvo4vdFadST5fOlTAqRF8reR/r7AZ+ic6HSI4mlZZ6vV/GQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJL+qjLE4OGXGtDVixcs7RchBWhcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2RmNzZl YS1mNzVmLTRlZjMtODA2YS0wNWVhMjJkZGQ3MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZGY3NmVh LWY3NWYtNGVmMy04MDZhLTA1ZWEyMmRkZDcyMy8xL2t2NnFNc1RnNFpjYTBOV0xG eXp0RnlFRmFGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/DeMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDoSTANBgkqhkiG9w0BAQsFAAOCAQEAQNywYuzc/jhwwVmqBbdaZX794qRc9Y0l I4Rp74aG3b7Jwawgz8XlEWG8Gp2qIg/uBFGwUc7Guz/muQIX7Wkts4LUT0hSWN+S 8Y5r4r5/48hxVfbJcv/vG6rYxA173O3vyKl/8ryWsYo/9RwCPi0mVTiYMOflBvYs NBVsWOOO+Cc+QdbjHkdSlUrjmL2ig2L6BJuDFqDPkVHsda0ON78F1bTiz6xd+bTB e0t/85Rfg7DnME9ApAcDju9X9BmlRo2qLCs3gPcVm1AkAO+kgTKB+nB9a7p2zcyx n7zzLGlsNDCaBq6FKF4SKyIwwp80rz8Pd5R5PnlnpDL6ASZxZAG+yQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:04 2026 by rpki-client