This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer File: KLD_eZjKiFTOfEdaly7R1SpcYM0.cer (raw, json) Hash identifier: lEsnxcu+mM4nsLXSQxLfVxo4C4U0id140R/EXteSF54= Subject key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84994EE81F9F3B37C0A9D1F546D347 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.119.220.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:99:4e:e8:1f:9f:3b:37:c0:a9:d1:f5:46:d3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:1b:c3:48:31:c2:f8:17:1d:ab:a1:79:27: 71:b2:41:d6:1e:cc:a3:e5:00:20:04:8c:4c:0d:59: be:ba:64:4f:19:52:16:52:7e:ba:f3:6e:3a:fb:21: 09:e1:c3:5b:16:0b:29:17:c0:1f:7d:66:72:d5:b9: aa:86:c6:91:56:b3:76:35:0a:28:e0:a9:3a:8a:b5: 0a:3d:72:ca:e9:62:ed:63:4e:c4:2c:bc:80:ad:7e: fc:18:7e:a4:f0:fd:03:9f:f7:84:f2:fb:dd:f9:d4: 2b:86:1f:11:17:aa:1c:0c:ce:b5:36:90:31:ea:e0: 65:a3:f4:86:4a:d9:83:21:c7:0e:26:a4:9b:a3:2c: f0:17:f7:ab:2b:e4:6a:41:46:67:b2:1c:d7:89:54: ad:9f:bb:57:ba:47:ab:cc:9d:73:2d:b0:7d:2a:6d: ca:c7:23:c3:f3:ff:98:19:f2:fb:f0:43:99:81:df: 38:bb:49:1e:a7:2f:76:3b:23:22:05:da:b9:e7:66: c2:08:ad:57:ce:53:ed:10:fb:e6:17:13:a9:df:de: b3:4b:46:87:c0:14:5a:0f:95:a8:8d:9f:ec:75:52: 6b:3f:55:9e:fc:86:ae:db:c4:1a:5d:a3:94:06:45: 5d:67:72:e9:d1:10:41:f6:7c:fb:21:45:02:be:2b: c2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.220.0/22 Signature Algorithm: sha256WithRSAEncryption 57:48:ae:3d:33:f3:e2:fe:8e:0c:41:29:e7:ff:6a:1c:36:77: c5:ff:64:b0:04:78:f8:b3:1c:f6:10:de:4a:67:1e:3e:74:5b: 30:14:59:cb:d3:88:ef:7f:7b:af:76:5a:8d:90:8b:83:95:ad: b0:40:6e:49:e8:1d:a7:61:9c:f4:c3:c0:3d:77:31:23:d7:32: 8a:3b:8b:15:4b:af:e4:9e:7b:fc:35:97:75:49:15:d1:c4:59: 6d:d4:0a:1c:7a:c1:55:ef:66:a4:1d:ba:4c:f8:6e:ec:a7:e5: bd:00:79:e8:89:a6:be:e6:7c:50:88:81:66:ab:b5:37:dd:72: 0d:b5:69:31:dc:ec:d3:02:03:3e:dc:51:1b:c4:3f:47:8a:c9: 57:83:52:ae:49:4c:78:57:31:a9:cc:81:4f:ed:6a:ae:98:04: 1d:aa:1c:ee:bf:88:20:84:1b:2f:1b:2e:14:3c:6a:aa:1e:2c: 53:b9:7f:43:f8:a5:d3:bf:79:c2:e8:94:46:19:17:21:c2:6f: b3:a0:b6:79:61:75:81:a0:de:07:69:9e:c7:f4:41:d5:a6:cb: 5d:67:60:b4:4c:f0:90:51:07:08:ee:1c:b4:0c:20:d2:c8:31: d9:32:f5:fb:e1:9a:bf:46:45:3a:a6:51:56:7f:35:a1:b7:20: b0:f8:03:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hJlO6B+fOzfAqdH1RtNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGIwZmY3OTk4Y2E4ODU0Y2U3YzQ3NWE5NzJlZDFkNTJhNWM2MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYIbw0gxwvgXHauheSdxskHWHsyj 5QAgBIxMDVm+umRPGVIWUn668246+yEJ4cNbFgspF8AffWZy1bmqhsaRVrN2NQoo 4Kk6irUKPXLK6WLtY07ELLyArX78GH6k8P0Dn/eE8vvd+dQrhh8RF6ocDM61NpAx 6uBlo/SGStmDIccOJqSboyzwF/erK+RqQUZnshzXiVStn7tXukerzJ1zLbB9Km3K xyPD8/+YGfL78EOZgd84u0kepy92OyMiBdq552bCCK1XzlPtEPvmFxOp396zS0aH wBRaD5WojZ/sdVJrP1We/Iau28QaXaOUBkVdZ3Lp0RBB9nz7IUUCvivCdQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCiw/3mYyohUznxHWpcu0dUqXGDNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2EwZDY3 NC04N2I2LTQzMTgtYmVkMi0yNjc1NDdlYTFlMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvYTBkNjc0 LTg3YjYtNDMxOC1iZWQyLTI2NzU0N2VhMWUzNS8xL0tMRF9lWmpLaUZUT2ZFZGFs eTdSMVNwY1lNMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXfcMA0GCSqGSIb3DQEBCwUAA4IBAQBXSK49 M/Pi/o4MQSnn/2ocNnfF/2SwBHj4sxz2EN5KZx4+dFswFFnL04jvf3uvdlqNkIuD la2wQG5J6B2nYZz0w8A9dzEj1zKKO4sVS6/knnv8NZd1SRXRxFlt1AocesFV72ak HbpM+G7sp+W9AHnoiaa+5nxQiIFmq7U33XINtWkx3OzTAgM+3FEbxD9HislXg1Ku SUx4VzGpzIFP7WqumAQdqhzuv4gghBsvGy4UPGqqHixTuX9D+KXTv3nC6JRGGRch wm+zoLZ5YXWBoN4HaZ7H9EHVpstdZ2C0TPCQUQcI7hy0DCDSyDHZMvX74Zq/RkU6 plFWfzWhtyCw+AMN -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:13 2026 by rpki-client