This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer File: kyRgt49uj0ZirseFjpIFHoVgmfU.cer (raw, json) Hash identifier: 3Ggldpmz0XMaFCrCXpnqBKe2m2HtvSxmDRQVtIHhe9I= Subject key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C69DE16C5D4BAB482888B71D7BB3F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47836 IP: 91.208.175.0/24 IP: 185.161.88.0/22 IP: 2a00:ddc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:e1:6c:5d:4b:ab:48:28:88:b7:1d:7b:b3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=932460b78f6e8f4662aec7858e92051e856099f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:cc:b1:55:cc:11:3a:e4:29:8f:d0:4c:3b: 55:ec:b5:0c:ca:2a:e3:96:05:63:98:22:04:1d:49: 3c:fd:0a:e7:19:24:52:89:64:7b:ed:bc:34:63:7a: a5:97:44:e6:36:87:e9:d7:35:34:68:26:73:34:f3: 38:56:32:26:b1:97:13:ff:16:94:93:e0:26:62:55: 24:d1:8d:a2:4d:24:17:f9:35:47:be:fa:85:82:c6: 9d:e3:80:7f:cb:72:1b:a1:45:97:2c:06:f1:b8:d5: 93:c7:76:c8:b0:60:08:96:8b:e8:7a:39:f2:ac:b4: 80:2a:63:2d:9f:2d:b6:11:84:09:3c:b5:30:35:59: dc:40:d2:dd:9d:56:12:a9:c8:4e:be:ce:55:f3:8d: 8c:3e:ac:18:af:d4:6a:10:62:de:1b:a7:18:6b:27: bf:0e:ea:2a:2f:da:ef:9e:79:a0:75:76:a9:5e:99: 9e:f4:fb:81:e1:bf:0d:9e:b1:6c:c3:4d:35:9a:b2: 31:00:d7:bc:1a:d0:3f:88:47:8f:c4:b0:cf:03:64: 64:6d:eb:54:88:db:38:2a:de:e3:e8:7d:2e:75:90: d8:bd:b9:b8:73:5c:eb:bf:bf:5d:9f:26:b1:b4:12: 85:a3:8f:d2:c9:bd:b3:ac:5e:b7:3c:de:7e:c0:53: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.175.0/24 185.161.88.0/22 IPv6: 2a00:ddc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47836 Signature Algorithm: sha256WithRSAEncryption 5e:3e:6a:5e:36:fc:2b:a1:96:18:12:70:1e:31:8c:1b:71:ed: fe:92:67:ad:db:97:bb:7f:2f:4c:f3:43:de:d3:da:a8:a8:35: d8:ed:db:ec:10:f8:b3:2e:8b:9b:13:27:56:86:71:87:25:31: 1a:37:e5:d1:44:8d:83:12:02:42:c7:0c:5b:47:af:6e:fb:6f: f9:f7:8b:5e:45:9b:78:ec:84:c7:dc:15:83:8f:1c:37:22:3d: 0f:63:39:ab:e0:a0:db:c1:85:6a:4e:93:e5:c5:d0:60:d8:02: cd:b7:53:09:03:79:0b:80:95:92:6b:29:e1:f5:c3:eb:7d:b2: 37:6b:f0:4e:c4:97:0a:aa:e3:c4:aa:8b:ca:7a:6e:64:ff:a9: 22:fd:25:15:3f:df:d5:e3:cb:b2:c2:55:5e:1d:8a:5d:95:ab: d5:52:92:9e:e5:04:28:4a:5e:06:be:81:7d:06:15:56:14:c8: 18:28:01:50:31:54:c6:49:6a:f0:7c:19:9a:a5:ad:8e:4e:1d: 96:fb:a3:dd:d3:d0:d3:de:0c:e0:f0:08:4b:b8:fc:4e:7d:0e: 8a:96:31:ad:eb:b4:55:54:ac:30:b9:be:a8:71:a7:dd:6a:66: dc:f8:52:c6:6b:a2:41:a8:2f:aa:ce:f3:37:7c:5a:99:35:2f: 7c:01:8e:4c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xp3hbF1Lq0goiLcde7PwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzI0NjBiNzhmNmU4ZjQ2NjJhZWM3ODU4ZTkyMDUxZTg1NjA5OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqarMsVXMETrkKY/QTDtV7LUMyirj lgVjmCIEHUk8/QrnGSRSiWR77bw0Y3qll0TmNofp1zU0aCZzNPM4VjImsZcT/xaU k+AmYlUk0Y2iTSQX+TVHvvqFgsad44B/y3IboUWXLAbxuNWTx3bIsGAIlovoejny rLSAKmMtny22EYQJPLUwNVncQNLdnVYSqchOvs5V842MPqwYr9RqEGLeG6cYaye/ DuoqL9rvnnmgdXapXpme9PuB4b8NnrFsw001mrIxANe8GtA/iEePxLDPA2RkbetU iNs4Kt7j6H0udZDYvbm4c1zrv79dnyaxtBKFo4/Syb2zrF63PN5+wFPEKQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJMkYLePbo9GYq7HhY6SBR6FYJn1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2MyNTFm MS1jYjcwLTQyODMtODQzMy04YzlmY2JiM2VjNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYzI1MWYx LWNiNzAtNDI4My04NDMzLThjOWZjYmIzZWM1Mi8xL2t5Umd0NDl1ajBaaXJzZUZq cElGSG9WZ21mVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9CvAwQCuaFYMA0EAgACMAcDBQAqAN3AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC63DANBgkqhkiG9w0BAQsFAAOCAQEAXj5q Xjb8K6GWGBJwHjGMG3Ht/pJnrduXu38vTPND3tPaqKg12O3b7BD4sy6LmxMnVoZx hyUxGjfl0USNgxICQscMW0evbvtv+feLXkWbeOyEx9wVg48cNyI9D2M5q+Cg28GF ak6T5cXQYNgCzbdTCQN5C4CVkmsp4fXD632yN2vwTsSXCqrjxKqLynpuZP+pIv0l FT/f1ePLssJVXh2KXZWr1VKSnuUEKEpeBr6BfQYVVhTIGCgBUDFUxklq8HwZmqWt jk4dlvuj3dPQ094M4PAIS7j8Tn0OipYxreu0VVSsMLm+qHGn3Wpm3PhSxmuiQagv qs7zN3xamTUvfAGOTA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:35 2026 by rpki-client