This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer File: KRKNnU8aVulw-HRtaCesESD5Jmc.cer (raw, json) Hash identifier: M3vc/txPiesRRv5OHXEin94AYzJlDCRG2Dlx2f79OUo= Subject key identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153EA30242705BE5F0E68958B5CEEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.249.9.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3e:a3:02:42:70:5b:e5:f0:e6:89:58:b5:ce:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29128d9d4f1a56e970f8746d6827ac1120f92667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:a5:d9:14:62:e6:af:ec:f1:8d:0f:87:5d: ad:ea:e8:e1:12:a5:74:93:2b:bf:0c:50:2f:21:ea: bc:dc:a7:e6:92:8a:c0:26:c5:9a:48:9e:aa:3b:e1: d6:b4:dc:ba:e4:eb:da:db:57:ca:ef:50:49:19:0b: 64:e8:20:2a:65:d5:ab:bd:cc:56:b5:42:60:67:01: b7:dc:f6:7a:5b:1a:ea:d5:7d:73:f3:40:a9:ca:5b: 2c:17:1d:a2:92:ad:b4:40:f1:49:a8:65:ea:67:6b: 3f:61:c6:9f:4b:4d:09:5c:e6:16:0f:36:eb:04:8d: 92:f3:0c:23:8b:90:a5:49:0f:d5:51:1e:63:08:f7: 21:0f:e4:aa:a2:56:42:e4:d4:8b:87:f4:b6:b9:ea: 94:56:87:a6:ed:3a:26:ab:31:c3:75:ba:3d:8e:4d: 2d:e4:1e:e2:9c:c4:b5:00:ef:cf:79:82:21:87:87: 72:9c:db:8b:90:62:7a:f9:4d:08:25:8f:8d:78:25: af:3d:89:58:c6:20:21:87:90:ff:f5:6a:20:ce:61: 90:9b:77:1c:6a:02:2a:b3:9b:8c:90:68:44:fb:59: 93:32:bf:f8:63:b2:4c:63:3b:ec:20:0d:95:93:ec: 0a:5b:04:49:b4:e3:36:6f:28:73:0b:18:18:0a:7b: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.9.0/24 Signature Algorithm: sha256WithRSAEncryption 91:b2:86:95:06:28:3f:5d:b4:34:b5:64:a8:21:a4:83:25:c1: 55:e2:30:de:21:b6:b8:6b:e8:3b:41:e1:83:08:f6:6a:19:0b: af:23:4e:3a:ec:8c:7c:42:79:33:7a:d7:92:f1:06:f7:f8:a1: dc:6e:2a:71:05:8e:88:34:88:56:83:50:a3:5c:48:93:86:30: e8:41:c9:8c:2e:00:ac:dc:5c:7c:da:5d:7a:02:6d:94:24:4f: 56:3a:1e:40:28:da:e7:3d:3d:d3:90:a2:40:29:30:99:09:78: dc:9f:42:58:c6:49:89:f9:51:0c:58:fd:1e:bb:71:4c:e7:96: 77:36:72:0e:91:70:50:ff:c6:75:6a:38:13:6f:4a:c6:df:d2: 67:ba:96:a1:98:a7:fb:91:1c:e4:00:5f:58:c9:19:e3:52:d0: a3:c3:ea:38:d1:53:70:a0:61:c5:5b:c1:73:1a:42:4b:03:34: b3:54:33:fb:3e:f7:79:9c:1a:25:7f:0b:5d:8f:ac:b0:84:08: c7:c4:5a:83:c7:43:0b:9d:51:86:64:78:e2:73:2c:c5:93:76: 67:72:04:f4:8a:08:e3:b6:1d:62:f2:d8:38:28:b8:e8:d6:ba: 03:d7:e5:dd:dd:fc:40:f3:e9:60:a1:00:bd:1c:56:d5:c6:c0: 0f:37:87:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FT6jAkJwW+Xw5olYtc7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTEyOGQ5ZDRmMWE1NmU5NzBmODc0NmQ2ODI3YWMxMTIwZjkyNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UGl2RRi5q/s8Y0Ph12t6ujhEqV0 kyu/DFAvIeq83KfmkorAJsWaSJ6qO+HWtNy65Ova21fK71BJGQtk6CAqZdWrvcxW tUJgZwG33PZ6Wxrq1X1z80CpylssFx2ikq20QPFJqGXqZ2s/YcafS00JXOYWDzbr BI2S8wwji5ClSQ/VUR5jCPchD+SqolZC5NSLh/S2ueqUVoem7TomqzHDdbo9jk0t 5B7inMS1AO/PeYIhh4dynNuLkGJ6+U0IJY+NeCWvPYlYxiAhh5D/9WogzmGQm3cc agIqs5uMkGhE+1mTMr/4Y7JMYzvsIA2Vk+wKWwRJtOM2byhzCxgYCntHowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCkSjZ1PGlbpcPh0bWgnrBEg+SZnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzExNDc3 Yy04NDUyLTRhYmItOTE0Ny1mMGIwOWMwYzkwYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvMTE0Nzdj LTg0NTItNGFiYi05MTQ3LWYwYjA5YzBjOTBjNy8xL0tSS05uVThhVnVsdy1IUnRh Q2VzRVNENUptYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAufkJMA0GCSqGSIb3DQEBCwUAA4IBAQCRsoaV Big/XbQ0tWSoIaSDJcFV4jDeIba4a+g7QeGDCPZqGQuvI0467Ix8QnkzeteS8Qb3 +KHcbipxBY6INIhWg1CjXEiThjDoQcmMLgCs3Fx82l16Am2UJE9WOh5AKNrnPT3T kKJAKTCZCXjcn0JYxkmJ+VEMWP0eu3FM55Z3NnIOkXBQ/8Z1ajgTb0rG39Jnupah mKf7kRzkAF9YyRnjUtCjw+o40VNwoGHFW8FzGkJLAzSzVDP7Pvd5nBolfwtdj6yw hAjHxFqDx0MLnVGGZHjicyzFk3ZncgT0igjjth1i8tg4KLjo1roD1+Xd3fxA8+lg oQC9HFbVxsAPN4dG -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:14 2026 by rpki-client