This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer File: kxqerhFBEi0V8KZO8HjIAp_r_jw.cer (raw, json) Hash identifier: 2DSa78l+BAvoW9f+Jw3qfkDx9E9GY+H7JKIrjDlo160= Subject key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77588232C729604D3E1C0DC4E166668D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.27.204.0/22 IP: 2a00:97e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:82:32:c7:29:60:4d:3e:1c:0d:c4:e1:66:66:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=931a9eae1141122d15f0a64ef078c8029febfe3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:0d:5c:32:f1:32:d0:cf:8c:30:96:e3:f3: 10:e0:4c:42:88:d0:74:d4:5d:51:de:4d:a0:5b:40: c7:99:da:e0:e5:e4:a4:8c:42:7f:4e:a8:fd:e7:35: fe:ad:4f:88:6c:fc:5c:31:b6:0a:ff:22:a6:b9:ae: 1c:9a:2a:c6:05:67:ca:2b:02:7c:48:0b:5d:c2:62: 2c:39:17:1f:e5:0f:37:df:3b:80:66:07:38:12:a9: 49:26:21:c0:50:94:a6:00:d3:52:24:2d:5a:93:2d: 1e:fe:fc:66:18:c0:5d:c6:53:65:5b:6e:1e:e4:9f: a0:69:ac:c0:fd:3e:25:7d:67:1b:af:bb:d9:c8:a1: 5e:5c:d7:0b:f1:ba:2f:9e:93:b8:a4:d6:49:0c:eb: e3:15:82:d4:e8:7b:20:d6:ce:7b:39:e1:2c:2a:ca: f9:c4:ee:e8:10:8d:99:25:07:e8:d5:31:e3:0a:c3: 7b:bd:26:eb:53:0c:f0:80:a3:dd:fb:87:4d:84:06: 8b:30:46:72:b3:7d:5d:63:7a:4b:e2:28:5c:fb:86: 43:0e:2e:03:0a:77:41:c1:b5:7b:33:13:0d:0e:7a: a2:99:d8:bc:17:ef:a9:8b:4c:89:05:e8:e5:f7:03: ee:43:7c:9c:be:ff:17:f5:95:97:c5:ad:f8:94:d1: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.204.0/22 IPv6: 2a00:97e0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:ae:29:d7:c3:20:36:14:bd:5f:dc:21:8f:19:9f:9a:d7:8e: 50:38:71:3b:6a:4a:b3:ad:68:f7:d4:a9:19:64:51:1c:39:a5: 18:49:db:23:cf:8a:8f:bd:c5:90:b2:78:af:e2:a2:04:86:14: 87:22:c0:17:7a:65:f1:18:cd:c3:7e:7c:34:1e:40:58:c1:67: 21:ce:52:ba:3b:af:2c:f5:9d:6d:b7:41:2d:fb:63:fa:d8:fd: 2a:72:14:6b:ea:40:10:bc:83:50:20:8b:e9:a3:c8:56:0e:b5: 6b:e2:aa:a2:43:f2:a2:d3:d9:ba:15:04:39:e8:f4:e8:1a:f7: 9c:11:76:2c:93:49:ad:de:be:75:5a:64:58:cd:1a:bb:71:15: ab:b8:ad:f4:46:8b:76:9d:0d:b1:17:5c:18:59:63:97:8d:7d: 41:93:68:e9:7d:4a:c1:66:08:2e:e0:9d:a5:b1:06:69:4c:31: 9e:70:68:81:68:e3:f1:34:83:91:fe:18:cd:bd:70:b3:5e:45: 77:81:96:9d:60:70:10:15:6f:0b:07:6c:f8:3e:0b:d3:31:5b: 0e:aa:de:98:63:d4:01:07:3f:0c:1b:3f:5b:2d:97:1a:9e:7a: 96:9f:61:51:d3:88:06:c4:7b:ea:5e:a6:3e:00:45:d3:81:56: 9f:76:52:80 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WIIyxylgTT4cDcThZmaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzFhOWVhZTExNDExMjJkMTVmMGE2NGVmMDc4YzgwMjlmZWJmZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTUNXDLxMtDPjDCW4/MQ4ExCiNB0 1F1R3k2gW0DHmdrg5eSkjEJ/Tqj95zX+rU+IbPxcMbYK/yKmua4cmirGBWfKKwJ8 SAtdwmIsORcf5Q833zuAZgc4EqlJJiHAUJSmANNSJC1aky0e/vxmGMBdxlNlW24e 5J+gaazA/T4lfWcbr7vZyKFeXNcL8bovnpO4pNZJDOvjFYLU6Hsg1s57OeEsKsr5 xO7oEI2ZJQfo1THjCsN7vSbrUwzwgKPd+4dNhAaLMEZys31dY3pL4ihc+4ZDDi4D CndBwbV7MxMNDnqimdi8F++pi0yJBejl9wPuQ3ycvv8X9ZWXxa34lNHh0wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJManq4RQRItFfCmTvB4yAKf6/48MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzQ3Mzc2 OC0zYTU5LTRiMGItYWQyNi0xOTEzNmI3YjAzOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNDczNzY4 LTNhNTktNGIwYi1hZDI2LTE5MTM2YjdiMDM5Ni8xL2t4cWVyaEZCRWkwVjhLWk84 SGpJQXBfcl9qdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRvMMA0EAgACMAcDBQAqAJfgMA0GCSqGSIb3 DQEBCwUAA4IBAQA+rinXwyA2FL1f3CGPGZ+a145QOHE7akqzrWj31KkZZFEcOaUY Sdsjz4qPvcWQsniv4qIEhhSHIsAXemXxGM3Dfnw0HkBYwWchzlK6O68s9Z1tt0Et +2P62P0qchRr6kAQvINQIIvpo8hWDrVr4qqiQ/Ki09m6FQQ56PToGvecEXYsk0mt 3r51WmRYzRq7cRWruK30Rot2nQ2xF1wYWWOXjX1Bk2jpfUrBZggu4J2lsQZpTDGe cGiBaOPxNIOR/hjNvXCzXkV3gZadYHAQFW8LB2z4PgvTMVsOqt6YY9QBBz8MGz9b LZcannqWn2FR04gGxHvqXqY+AEXTgVafdlKA -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:10 2026 by rpki-client