This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer (raw, json) Hash identifier: AAe2h82H80O/WoHx2jPklsRaYEXEOl2lktu0dQBomLs= Subject key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36CD3A97F98EC4B798BDF4152FDFFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25253 IP: 192.104.36.0/24 IP: 195.234.134.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cd:3a:97:f9:8e:c4:b7:98:bd:f4:15:2f:df:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:1a:8a:b9:d4:d9:e2:8b:96:19:2c:f8:ae: 85:de:79:fe:ae:2e:77:56:7a:6b:4c:22:72:ea:2e: 28:fa:40:6e:ed:44:03:48:df:1d:e4:b1:62:7d:28: 73:72:b6:a0:49:ba:32:04:44:38:e6:a2:1d:1d:a9: fa:68:f5:54:2a:2c:07:b1:ef:2d:c3:e3:25:41:c3: e1:56:fc:d2:f1:bf:38:43:8b:45:f6:d2:cf:a6:bf: 31:e6:74:8b:74:5f:f4:5e:ea:47:d1:db:32:b2:e8: 02:04:1b:21:6b:1b:4d:79:04:3b:83:98:d2:20:62: cc:56:ed:b3:50:95:35:67:8e:8d:16:2b:7d:9a:f3: ee:03:a6:ac:9c:92:fe:9d:12:6d:3a:8f:ca:98:38: 76:91:99:d2:47:14:e5:62:38:0c:af:20:d6:86:8b: d7:86:8f:2f:56:8b:10:ae:a4:9d:fa:10:eb:74:0b: db:c3:25:ff:b7:96:61:e6:51:19:5a:cd:35:13:f6: 47:f6:f7:57:9d:b4:0b:23:8b:41:f7:13:d5:33:07: 3e:98:67:57:e4:b6:52:c7:f7:e0:cf:7a:e5:5e:f5: d2:96:cd:a8:0b:09:06:a6:20:eb:c5:89:71:be:2a: f6:98:02:ee:1e:4c:85:85:e9:41:00:c4:7b:bc:65: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.104.36.0/24 195.234.134.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25253 Signature Algorithm: sha256WithRSAEncryption 52:6a:2e:70:d1:43:c1:9e:09:d7:e0:12:15:43:1a:3f:26:8e: 16:63:6f:51:17:40:52:ec:8b:1a:82:5f:f7:99:1b:ea:37:a5: e6:6a:90:48:c7:a7:ed:69:b1:6e:eb:a4:4d:21:c3:6e:f7:2a: 35:4b:e6:78:71:d7:9f:14:c4:22:82:f8:24:4e:90:90:c3:1f: 7c:4e:5d:b5:7f:99:36:b1:79:7d:05:ca:8e:c6:22:7c:7e:5f: dc:ed:4e:5d:e6:fd:04:2f:35:77:67:b4:67:37:35:a2:43:27: 52:1e:c5:32:a8:09:92:18:92:90:bc:c4:ec:54:ed:3b:9b:77: 1d:6b:46:99:20:54:30:fa:2a:4b:71:cb:fe:f8:9e:97:4e:c1: d9:fc:64:0f:77:0f:86:55:2e:a2:c1:08:b3:92:80:a0:fe:4c: 43:18:93:79:74:3f:ac:12:91:38:bf:bf:e7:e8:29:47:90:0b: 8f:f7:35:10:a9:14:76:1c:34:6f:4c:8a:e6:82:58:32:bf:5b: 71:75:61:5c:bf:27:7f:a8:af:95:c3:17:a8:48:04:46:31:b7: 6e:30:5a:c5:69:b8:7a:eb:ea:70:3c:a2:d7:7d:59:85:9f:95: 63:da:e7:70:a4:be:e9:3c:90:0a:ad:8e:c8:f6:63:c6:da:91: 3b:1a:9e:58 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7Ns06l/mOxLeYvfQVL9/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODJiMmNiOTc3MTUzYmFhZDFkZDk5ZWVjMTRjZTBjYTQ2ZTIyMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/wairnU2eKLlhks+K6F3nn+ri53 VnprTCJy6i4o+kBu7UQDSN8d5LFifShzcragSboyBEQ45qIdHan6aPVUKiwHse8t w+MlQcPhVvzS8b84Q4tF9tLPpr8x5nSLdF/0XupH0dsysugCBBshaxtNeQQ7g5jS IGLMVu2zUJU1Z46NFit9mvPuA6asnJL+nRJtOo/KmDh2kZnSRxTlYjgMryDWhovX ho8vVosQrqSd+hDrdAvbwyX/t5Zh5lEZWs01E/ZH9vdXnbQLI4tB9xPVMwc+mGdX 5LZSx/fgz3rlXvXSls2oCwkGpiDrxYlxvir2mALuHkyFhelBAMR7vGUAgQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzBiMGIz My05OGExLTQ4MTgtYWQxOC05NWYyN2QzZThhYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvMGIwYjMz LTk4YTEtNDgxOC1hZDE4LTk1ZjI3ZDNlOGFiYi8xL0tDc3N1WGNWTzZyUjNabnV3 VXpneWtiaUlaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwGgkAwQAw+qGMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAmKlMA0GCSqGSIb3DQEBCwUAA4IBAQBSai5w0UPBngnX4BIVQxo/Jo4W Y29RF0BS7Isagl/3mRvqN6XmapBIx6ftabFu66RNIcNu9yo1S+Z4cdefFMQigvgk TpCQwx98Tl21f5k2sXl9BcqOxiJ8fl/c7U5d5v0ELzV3Z7RnNzWiQydSHsUyqAmS GJKQvMTsVO07m3cda0aZIFQw+ipLccv++J6XTsHZ/GQPdw+GVS6iwQizkoCg/kxD GJN5dD+sEpE4v7/n6ClHkAuP9zUQqRR2HDRvTIrmglgyv1txdWFcvyd/qK+Vwxeo SARGMbduMFrFabh66+pwPKLXfVmFn5Vj2udwpL7pPJAKrY7I9mPG2pE7Gp5Y -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:55 2026 by rpki-client