This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer File: KRlGGERUmCRQC3zRxFHYJLpuVnc.cer (raw, json) Hash identifier: /CA/P1Ylku+W0RqMEBlHnClifqGyQiAMWgg9r/EUFHI= Subject key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59EC08DF48719266B2B4DD23FEE58F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43166 IP: 91.194.78.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:ec:08:df:48:71:92:66:b2:b4:dd:23:fe:e5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2919461844549824500b7cd1c451d824ba6e5677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:c9:99:e3:0d:08:69:ae:0b:4d:1a:7b:37: e3:07:63:19:dc:ed:31:12:72:d3:0d:4b:e1:f2:87: 97:fc:6b:f0:05:11:c6:78:04:84:cd:01:d8:86:64: 8b:cc:76:c0:a9:8f:02:20:95:62:95:e5:12:9b:0e: 8a:c9:60:5e:d7:6d:24:01:31:ad:2b:d7:e2:22:5a: bd:35:0c:a4:77:c9:cb:ea:bc:b3:38:37:6c:cd:fc: 3b:7b:5d:e1:1b:9c:52:51:c3:12:b5:a6:d7:0d:a1: 1e:3b:42:23:70:a5:c4:da:97:52:5b:04:69:5e:03: f7:3c:26:4f:f3:bc:13:db:18:e2:56:b4:67:e1:a8: 94:f2:90:d8:64:a1:d6:cc:1c:9f:f4:b4:7c:ea:ef: 3f:f3:53:8d:03:94:45:74:7a:b4:1b:cd:b6:73:ae: 03:08:12:63:76:32:78:c2:44:e1:1d:ae:3b:5b:bc: 93:b9:54:aa:43:4e:e6:a8:f6:5d:f1:f7:c2:3f:97: 33:cb:0c:71:08:14:db:51:d1:4b:b7:91:7e:08:7b: 7c:a3:14:bb:ca:57:7f:b3:94:dc:ea:1b:03:1e:d5: cb:b7:d4:33:88:50:4e:94:8f:80:86:d2:fa:24:55: df:da:96:92:22:7c:40:66:05:5f:15:44:cb:46:3b: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.78.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43166 Signature Algorithm: sha256WithRSAEncryption 94:eb:d3:61:14:ee:b2:60:bb:7f:1c:28:92:ca:68:62:57:b3: de:75:8e:21:dc:07:0f:b9:4e:a0:0a:63:60:12:9b:88:a7:7e: 4f:7d:ad:04:3d:32:bc:6a:37:9a:c3:dc:80:0b:cc:4a:a1:f4: a3:94:b2:9e:af:78:aa:08:4f:53:6c:a6:c3:db:cf:de:dc:0a: 03:32:3a:f8:d5:71:4d:fe:ab:20:dc:de:b1:98:8a:de:e1:74: 3a:62:60:81:c9:6b:23:94:b6:b4:7e:17:0c:c2:1f:8a:63:db: 16:c8:9c:09:2d:bd:fd:57:6d:4c:11:8f:84:1c:43:64:99:bc: e4:4e:db:15:c9:72:1b:7a:19:58:4b:56:4a:56:87:45:c3:18: 65:ab:9f:44:ee:7b:35:a6:59:52:9a:86:1d:5c:4b:79:7f:71: de:26:cd:85:1c:63:b7:9d:6e:20:fc:0f:50:65:f0:83:78:1a: 52:dd:54:51:68:b5:e2:ed:91:3c:d9:da:da:59:93:cc:3d:4b: 27:c5:43:96:73:ed:4e:ee:ae:d1:15:ce:eb:eb:bf:81:3f:17: 28:ba:2c:8b:13:93:20:c2:3a:7f:f4:19:77:d8:25:76:3a:a5: c3:91:53:7f:f5:64:d7:28:8a:5c:4e:11:27:bc:2d:9f:6b:52: e7:a7:cf:99 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WewI30hxkmaytN0j/uWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTE5NDYxODQ0NTQ5ODI0NTAwYjdjZDFjNDUxZDgyNGJhNmU1Njc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqnJmeMNCGmuC00aezfjB2MZ3O0x EnLTDUvh8oeX/GvwBRHGeASEzQHYhmSLzHbAqY8CIJVileUSmw6KyWBe120kATGt K9fiIlq9NQykd8nL6ryzODdszfw7e13hG5xSUcMStabXDaEeO0IjcKXE2pdSWwRp XgP3PCZP87wT2xjiVrRn4aiU8pDYZKHWzByf9LR86u8/81ONA5RFdHq0G822c64D CBJjdjJ4wkThHa47W7yTuVSqQ07mqPZd8ffCP5czywxxCBTbUdFLt5F+CHt8oxS7 yld/s5Tc6hsDHtXLt9QziFBOlI+AhtL6JFXf2paSInxAZgVfFUTLRjsAwwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCkZRhhEVJgkUAt80cRR2CS6blZ3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2Q4YzZm Mi00MTkxLTQ2ZTYtOGRiNi1iNmVhODJmMTkyMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvZDhjNmYy LTQxOTEtNDZlNi04ZGI2LWI2ZWE4MmYxOTIyMC8xL0tSbEdHRVJVbUNSUUMzelJ4 RkhZSkxwdVZuYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW8JOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwConjANBgkqhkiG9w0BAQsFAAOCAQEAlOvTYRTusmC7fxwokspoYlez3nWOIdwH D7lOoApjYBKbiKd+T32tBD0yvGo3msPcgAvMSqH0o5Synq94qghPU2ymw9vP3twK AzI6+NVxTf6rINzesZiK3uF0OmJggclrI5S2tH4XDMIfimPbFsicCS29/VdtTBGP hBxDZJm85E7bFclyG3oZWEtWSlaHRcMYZaufRO57NaZZUpqGHVxLeX9x3ibNhRxj t51uIPwPUGXwg3gaUt1UUWi14u2RPNna2lmTzD1LJ8VDlnPtTu6u0RXO6+u/gT8X KLosixOTIMI6f/QZd9gldjqlw5FTf/Vk1yiKXE4RJ7wtn2tS56fPmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:42 2026 by rpki-client