This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer (raw, json) Hash identifier: j3bQinQNhd7cesblF/5smbr6G+PXI+ZJlKMNeLuc7w4= Subject key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA64ACA7CB540ED7ACB30BAC091E05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31472 IP: 37.157.48.0/21 IP: 84.247.32.0/22 IP: 89.35.164.0/22 IP: 149.19.176.0/22 IP: 185.2.76.0/22 IP: 185.34.80.0/22 IP: 185.60.4.0/22 IP: 185.61.88.0/22 IP: 185.86.20.0/22 IP: 185.91.40.0/22 IP: 195.206.184.0/21 IP: 2a00:b840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:64:ac:a7:cb:54:0e:d7:ac:b3:0b:ac:09:1e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2875f185823dbc6a82d105b3ca16077db5729377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:47:26:9a:89:3f:60:59:ea:90:35:2e:3c: 36:bc:1b:55:6b:8c:cf:c3:cc:c7:4b:a2:f8:c5:31: ab:f0:07:16:fe:ac:66:a2:5a:3b:8e:bb:67:3c:ef: b1:31:6c:67:f2:e6:ad:d7:98:d6:c4:ac:b1:ed:73: 55:01:df:12:52:32:12:c3:ec:8b:8d:98:aa:ee:91: 60:47:b3:42:8a:4d:26:5b:23:76:ce:fb:71:c5:7e: 78:aa:d7:90:50:72:b3:51:b7:7e:f6:12:e5:9c:d4: 71:ff:42:a8:43:aa:92:8f:cf:f4:63:60:13:2a:58: 88:e9:a5:af:cb:05:34:c2:13:d6:0b:04:14:de:4d: ad:04:8a:ee:06:1a:0e:59:69:98:c6:00:d2:c9:05: 66:52:7c:a0:d3:b4:db:e7:b4:6c:a4:20:1a:2d:96: ff:80:da:78:4b:9a:ac:c3:82:d1:1d:56:18:33:fa: 44:c1:21:85:8b:ff:21:d6:19:f0:f0:00:20:88:9c: 36:ba:29:0d:1f:34:3f:f3:79:08:de:98:d6:61:4d: 44:6f:d7:37:94:57:31:8f:95:fa:48:44:a1:8c:0f: 40:3c:fa:ce:31:00:40:5f:c0:d7:b7:e9:a7:fa:85: 3e:12:61:1a:65:ed:03:09:cc:97:51:5f:93:d6:7c: fa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.48.0/21 84.247.32.0/22 89.35.164.0/22 149.19.176.0/22 185.2.76.0/22 185.34.80.0/22 185.60.4.0/22 185.61.88.0/22 185.86.20.0/22 185.91.40.0/22 195.206.184.0/21 IPv6: 2a00:b840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31472 Signature Algorithm: sha256WithRSAEncryption 7d:5a:3e:8d:4b:cb:4d:4f:b4:f6:53:1f:aa:d8:4f:57:d6:5c: 7c:f8:d4:18:22:6e:76:45:16:4c:f2:96:16:24:ad:10:96:5b: ae:fb:54:7e:60:e6:e4:e6:53:8d:33:bb:18:f8:a8:a1:06:c9: 36:a5:71:9e:ec:58:1c:5e:3a:d8:50:79:da:a6:ef:e9:12:b1: 62:19:55:30:57:99:ba:8f:8a:9e:13:f6:a1:44:a1:12:59:eb: af:e5:30:80:e6:eb:82:58:68:42:88:72:63:ed:ca:31:4e:d6: 71:ee:d9:e9:16:36:7e:4c:9c:86:1e:81:8f:87:76:b8:61:0a: 0c:5e:c3:21:96:1c:6d:81:c8:23:14:c7:73:cd:95:e7:dc:fd: 2c:eb:61:df:aa:cb:b7:55:2a:6e:2c:00:6d:12:a2:f8:0f:56: f7:ad:70:31:b5:da:f8:fb:67:57:e2:40:b2:30:52:61:10:af: 28:a5:88:fe:0e:d7:66:34:cf:22:86:09:8a:6b:87:3a:b4:37: f6:fe:9c:99:3d:89:97:55:d1:19:d1:67:bb:86:a3:fc:93:2e: 23:fd:4d:7b:45:f1:a6:c3:3b:cf:83:aa:42:b7:a0:9e:cf:da: 99:29:0d:03:1c:96:07:da:3b:06:fc:d1:e4:78:42:b2:18:50: c3:e6:53:fe -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt9ymSsp8tUDtesswusCR4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODc1ZjE4NTgyM2RiYzZhODJkMTA1YjNjYTE2MDc3ZGI1NzI5Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvtHJpqJP2BZ6pA1Ljw2vBtVa4zP w8zHS6L4xTGr8AcW/qxmolo7jrtnPO+xMWxn8uat15jWxKyx7XNVAd8SUjISw+yL jZiq7pFgR7NCik0mWyN2zvtxxX54qteQUHKzUbd+9hLlnNRx/0KoQ6qSj8/0Y2AT KliI6aWvywU0whPWCwQU3k2tBIruBhoOWWmYxgDSyQVmUnyg07Tb57RspCAaLZb/ gNp4S5qsw4LRHVYYM/pEwSGFi/8h1hnw8AAgiJw2uikNHzQ/83kI3pjWYU1Eb9c3 lFcxj5X6SEShjA9APPrOMQBAX8DXt+mn+oU+EmEaZe0DCcyXUV+T1nz66wIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFCh18YWCPbxqgtEFs8oWB321cpN3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2EwNGRh Ni05ODg3LTQyYTUtOGVkNy05NGU1ZDQ5Y2M2MjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvYTA0ZGE2 LTk4ODctNDJhNS04ZWQ3LTk0ZTVkNDljYzYyOC8xL0tIWHhoWUk5dkdxQzBRV3p5 aFlIZmJWeWszYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQDJZ0wAwQCVPcgAwQCWSOkAwQClROwAwQCuQJM AwQCuSJQAwQCuTwEAwQCuT1YAwQCuVYUAwQCuVsoAwQDw864MA0EAgACMAcDBQMq ALhAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnrwMA0GCSqGSIb3DQEBCwUAA4IB AQB9Wj6NS8tNT7T2Ux+q2E9X1lx8+NQYIm52RRZM8pYWJK0Qlluu+1R+YObk5lON M7sY+KihBsk2pXGe7FgcXjrYUHnapu/pErFiGVUwV5m6j4qeE/ahRKESWeuv5TCA 5uuCWGhCiHJj7coxTtZx7tnpFjZ+TJyGHoGPh3a4YQoMXsMhlhxtgcgjFMdzzZXn 3P0s62Hfqsu3VSpuLABtEqL4D1b3rXAxtdr4+2dX4kCyMFJhEK8opYj+DtdmNM8i hgmKa4c6tDf2/pyZPYmXVdEZ0We7hqP8ky4j/U17RfGmwzvPg6pCt6Cez9qZKQ0D HJYH2jsG/NHkeEKyGFDD5lP+ -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:32 2026 by rpki-client