This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer (raw, json) Hash identifier: qJUPHEkywespHTp5eiRZ93o+RyAEfsEdfBYVaryjiA0= Subject key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC7B1E7E311AFC42070C2DF971646 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211564 IP: 2001:678:fa8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c7:b1:e7:e3:11:af:c4:20:70:c2:df:97:16:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28f981c20aa652aa85e008bd262f7bc1f856c358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:af:9b:79:52:d8:13:6a:be:95:aa:d2:3c: 4c:d0:68:ed:2a:5e:d9:1e:3b:4a:3e:b9:c0:a8:65: 59:dd:57:3d:e0:0f:8d:0e:c3:e8:35:06:07:82:ac: a3:aa:71:3f:46:f4:a8:d9:8c:5a:e0:f9:17:35:ff: cb:ee:99:2a:ff:60:bd:f2:a7:d9:82:3b:78:1a:a9: 5f:9a:ef:cc:a2:5a:fa:0d:55:f8:2f:0e:6b:9f:bf: ed:1b:74:f3:e6:cb:ec:08:9e:0d:93:64:86:9e:c4: e9:9c:4a:03:c4:f3:34:be:73:3a:43:c9:e6:5f:59: db:af:e5:d7:aa:c9:bf:c6:ea:bc:bf:22:c1:f0:d9: 89:0a:0d:8e:32:dc:a2:d7:8d:24:9c:6a:f5:14:11: 80:6a:eb:8d:d0:5c:1c:ec:c9:aa:0e:6a:f2:43:d5: aa:ff:bc:0e:c5:bc:8b:81:24:10:15:1a:19:03:53: 07:04:52:48:2b:ed:dd:aa:cb:47:85:da:d4:88:16: ac:63:ea:66:d6:c6:35:cd:42:98:75:ab:9b:6a:30: 33:a4:8e:6e:a5:39:07:7a:d3:d5:59:6e:4b:ec:0e: 92:90:cb:33:3f:af:2e:d1:d5:5e:27:41:ec:17:3c: 01:a7:a2:68:4a:0d:c1:c7:d5:2f:0c:7e:1b:07:78: 7f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:fa8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211564 Signature Algorithm: sha256WithRSAEncryption 6c:c2:6f:19:12:e8:04:e5:22:50:9b:d7:46:5f:5c:db:81:8e: e7:fe:8a:49:3d:d3:1d:92:b8:d5:ec:f8:bc:a9:56:a6:b6:a0: 93:be:c3:d8:b9:f1:bf:45:8d:8a:eb:d5:f4:a9:95:2e:11:ea: 98:35:17:d8:e3:db:5d:a5:81:eb:f9:7d:f2:c8:cd:69:23:fa: 2c:50:16:62:fa:a3:5b:c2:86:64:3b:f4:ec:ea:ac:fa:fb:9d: f2:8f:e4:ac:5a:19:76:21:1b:aa:17:62:73:66:02:ee:fe:1c: 57:6f:06:6a:e9:a2:68:30:62:c8:8d:08:e5:47:e3:c9:4d:78: 99:1c:93:ca:2b:85:3f:bd:7c:54:cc:fa:91:dd:14:06:24:85: b9:52:45:8a:bc:1f:c2:82:0a:26:d5:92:68:64:ee:ff:c7:27: ef:95:c6:60:94:dc:23:79:35:bc:ae:ae:ff:ab:31:09:95:2b: f5:f1:b4:d8:f1:55:5d:d8:a6:e2:0e:1d:04:77:52:82:59:74: ba:be:f3:91:a8:37:a3:68:2f:66:72:99:fb:ea:23:6d:c5:ff: df:5e:e1:c6:21:9b:43:2e:09:bf:7c:37:bf:0c:c1:67:a4:5b: f4:b0:49:fd:a9:85:bf:0c:5d:92:f7:9d:c2:96:c2:85:0b:9a: 40:e5:36:57 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6Wsex5+MRr8QgcMLflxZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGY5ODFjMjBhYTY1MmFhODVlMDA4YmQyNjJmN2JjMWY4NTZjMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUyvm3lS2BNqvpWq0jxM0GjtKl7Z HjtKPrnAqGVZ3Vc94A+NDsPoNQYHgqyjqnE/RvSo2Yxa4PkXNf/L7pkq/2C98qfZ gjt4Gqlfmu/Molr6DVX4Lw5rn7/tG3Tz5svsCJ4Nk2SGnsTpnEoDxPM0vnM6Q8nm X1nbr+XXqsm/xuq8vyLB8NmJCg2OMtyi140knGr1FBGAauuN0Fwc7MmqDmryQ9Wq /7wOxbyLgSQQFRoZA1MHBFJIK+3dqstHhdrUiBasY+pm1sY1zUKYdaubajAzpI5u pTkHetPVWW5L7A6SkMszP68u0dVeJ0HsFzwBp6JoSg3Bx9UvDH4bB3h/YQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFCj5gcIKplKqheAIvSYve8H4VsNYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzM1MmY5 YS00ZmRlLTQ4NGEtYjkyMy1jODdmYmJkMDNlODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMzUyZjlh LTRmZGUtNDg0YS1iOTIzLWM4N2ZiYmQwM2U4Ni8xL0tQbUJ3Z3FtVXFxRjRBaTlK aTk3d2ZoV3cxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+oMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM6bDANBgkqhkiG9w0BAQsFAAOCAQEAbMJvGRLoBOUiUJvXRl9c24GO5/6K ST3THZK41ez4vKlWpragk77D2Lnxv0WNiuvV9KmVLhHqmDUX2OPbXaWB6/l98sjN aSP6LFAWYvqjW8KGZDv07Oqs+vud8o/krFoZdiEbqhdic2YC7v4cV28GaumiaDBi yI0I5UfjyU14mRyTyiuFP718VMz6kd0UBiSFuVJFirwfwoIKJtWSaGTu/8cn75XG YJTcI3k1vK6u/6sxCZUr9fG02PFVXdim4g4dBHdSgll0ur7zkag3o2gvZnKZ++oj bcX/317hxiGbQy4Jv3w3vwzBZ6Rb9LBJ/amFvwxdkvedwpbChQuaQOU2Vw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:30 2026 by rpki-client