This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer File: KJVkfZ_RahaU-AJuvod2DLUx6w4.cer (raw, json) Hash identifier: sWsGMcuiPDTzfaMk5JFE1pHa0nJRRxVoCQCTW/GFfqc= Subject key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1396663DB0AEB28BDA4F2E2E0542B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206991 IP: 185.169.64.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:96:66:3d:b0:ae:b2:8b:da:4f:2e:2e:05:42:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:c8:06:ed:90:7e:cc:97:1a:30:ee:fc:e7: ce:fc:88:d1:94:6b:fc:d7:d1:82:b3:ca:dc:d2:b9: c0:01:61:8d:89:cf:87:19:b1:8a:3a:fb:67:7a:31: 5c:12:97:04:5f:a9:81:40:a1:20:4a:61:20:f1:d0: 57:e2:2c:8e:87:86:87:3d:99:e7:2e:27:9f:42:d7: 0d:6d:30:03:8e:56:10:20:68:d4:4f:04:fa:37:ce: 10:27:db:d5:1c:47:1f:68:ca:00:25:4e:e5:14:64: 97:d0:89:cd:5e:30:0c:4c:e9:02:9f:43:77:29:47: 0f:03:68:ec:11:d7:4c:31:1d:e4:77:52:17:fa:c7: 01:dd:f1:6c:2c:41:32:5f:2f:4e:06:11:70:09:02: 59:a0:6d:f1:1b:a9:0f:4a:d7:ad:61:b4:bf:d4:28: a2:00:1b:4a:a7:d0:b8:10:a8:ae:1a:75:fb:63:7b: 92:e0:ee:16:73:cc:51:26:cb:00:7c:46:e7:65:f2: e6:12:38:ac:cb:bd:f6:be:77:18:39:df:a4:d1:2b: d6:03:c0:99:74:33:bc:d1:c0:07:d4:91:2f:58:14: dc:15:bb:5d:a7:56:dc:b9:af:3c:a0:15:b1:8e:b0: 51:12:89:c0:72:d5:95:dc:f4:29:28:c0:ab:d5:e9: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206991 Signature Algorithm: sha256WithRSAEncryption 3f:2a:6a:dc:e5:cb:22:e9:d2:23:05:5b:dc:c6:15:15:40:8b: ed:a1:a2:89:e4:9d:45:e4:6f:70:2a:d3:c5:ab:c3:89:0e:35: 60:27:9a:11:2e:85:96:05:b2:3c:51:d8:e8:18:2b:77:ee:cb: 67:7b:d9:34:8d:7a:e7:ed:33:b6:c4:f6:d6:54:e2:0e:3f:42: f3:e0:43:f6:e1:6a:29:a1:50:6f:d4:5d:77:08:16:0c:6f:28: 4d:01:68:cd:cf:86:71:01:be:61:4e:aa:c8:69:d8:73:db:d0: 34:03:be:88:ba:aa:10:09:55:e1:81:6e:02:d4:9d:a4:89:5e: b5:53:c8:71:98:57:48:7f:39:2e:d6:26:e5:60:5a:13:6d:db: 82:30:00:10:07:e2:12:cb:0a:2e:34:98:6c:fb:8c:7b:ff:81: b1:d2:86:a2:46:49:e4:ed:19:50:39:40:a9:f9:84:d8:c8:71: f2:11:bf:21:15:f9:d8:66:98:ad:a7:ae:9b:b1:4f:20:d2:38: 9f:f9:c4:28:4e:0d:fa:c4:64:7b:e1:ad:35:f6:fb:06:c1:f5: 09:9b:f6:f5:96:2c:a1:5c:69:72:bd:e5:e4:aa:89:97:08:e3: 10:08:53:1b:83:a6:ad:bd:de:15:dd:93:ed:8d:6e:98:a8:8f: cb:08:09:d1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/E5ZmPbCusovaTy4uBUK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODk1NjQ3ZDlmZDE2YTE2OTRmODAyNmViZTg3NzYwY2I1MzFlYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IDIBu2QfsyXGjDu/OfO/IjRlGv8 19GCs8rc0rnAAWGNic+HGbGKOvtnejFcEpcEX6mBQKEgSmEg8dBX4iyOh4aHPZnn LiefQtcNbTADjlYQIGjUTwT6N84QJ9vVHEcfaMoAJU7lFGSX0InNXjAMTOkCn0N3 KUcPA2jsEddMMR3kd1IX+scB3fFsLEEyXy9OBhFwCQJZoG3xG6kPStetYbS/1Cii ABtKp9C4EKiuGnX7Y3uS4O4Wc8xRJssAfEbnZfLmEjisy732vncYOd+k0SvWA8CZ dDO80cAH1JEvWBTcFbtdp1bcua88oBWxjrBREonActWV3PQpKMCr1el/vwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCiVZH2f0WoWlPgCbr6Hdgy1MesOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzQ4OTU3 Ni00ZGZiLTRhMDMtYjBhMy1lY2NkYzBjZTdkMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNDg5NTc2 LTRkZmItNGEwMy1iMGEzLWVjY2RjMGNlN2QxNC8xL0tKVmtmWl9SYWhhVS1BSnV2 b2QyRExVeDZ3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCualAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMojzANBgkqhkiG9w0BAQsFAAOCAQEAPypq3OXLIunSIwVb3MYVFUCL7aGiieSd ReRvcCrTxavDiQ41YCeaES6FlgWyPFHY6Bgrd+7LZ3vZNI165+0ztsT21lTiDj9C 8+BD9uFqKaFQb9RddwgWDG8oTQFozc+GcQG+YU6qyGnYc9vQNAO+iLqqEAlV4YFu AtSdpIletVPIcZhXSH85LtYm5WBaE23bgjAAEAfiEssKLjSYbPuMe/+BsdKGokZJ 5O0ZUDlAqfmE2Mhx8hG/IRX52GaYraeum7FPINI4n/nEKE4N+sRke+GtNfb7BsH1 CZv29ZYsoVxpcr3l5KqJlwjjEAhTG4Omrb3eFd2T7Y1umKiPywgJ0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:13 2026 by rpki-client