This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer File: KTdcnACxUp1VHufijGBwq0Oi_nY.cer (raw, json) Hash identifier: /cndzZIz/FnH9LAsf67uixsafnMRz/vmazP7CoVyO4E= Subject key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33D3EB07FBD93D21438FC7B4B2D7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210336 IP: 2001:67c:2e78::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:3e:b0:7f:bd:93:d2:14:38:fc:7b:4b:2d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:11:b2:99:59:00:c3:27:5b:b2:d2:cc:31: b6:79:ee:68:11:95:3d:4c:09:f8:31:24:68:51:57: 8f:82:76:fb:28:bb:1a:f4:5f:3d:3b:6b:ee:a8:f4: 95:dd:84:04:83:80:f2:94:7b:9f:3d:20:34:b4:9e: 30:a2:a0:6a:96:29:2a:7c:90:3d:30:b6:54:45:47: b7:c6:98:bc:ee:66:cd:59:0e:a1:b7:53:e6:97:16: db:7d:ff:28:02:31:53:d2:b4:69:68:54:0c:33:fb: 01:4e:20:cf:7d:c3:8e:62:0c:1f:bc:51:00:5b:7f: b8:f6:a0:b0:cb:8f:46:c5:c9:7e:3b:e2:a1:8a:e7: 97:92:b4:12:e7:e0:5b:6a:be:03:7a:7d:e0:8a:69: c2:58:d8:79:12:14:a6:0b:67:db:ba:27:1b:db:2f: 38:16:d5:14:55:65:ab:0b:a1:25:0d:89:8d:c0:a7: 85:14:b8:94:e6:0c:ed:f2:2d:32:2d:f5:d7:c7:2d: 7e:d9:39:64:99:99:c9:72:93:b7:66:1e:91:a7:e9: ca:8a:f4:f6:af:b1:e3:ab:8e:a6:fa:b9:cb:c1:39: 55:dd:55:0f:7d:e8:57:b2:85:13:ed:60:39:49:73: de:3c:af:19:fc:dd:94:d9:56:6c:35:de:c5:b3:85: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2e78::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210336 Signature Algorithm: sha256WithRSAEncryption 8b:8c:78:37:e8:5c:72:5a:3f:96:92:f4:16:b9:a0:e4:eb:71: 10:56:90:9a:f4:d7:ee:e1:22:86:72:eb:16:7c:1d:de:43:66: b3:3b:cc:c9:ea:a8:59:4c:19:03:5c:7a:2a:b4:e0:cd:78:7c: 82:53:8b:20:3f:89:f4:ac:11:e2:e6:30:4c:94:ea:fe:a2:50: 95:df:86:05:75:fa:3b:d6:82:86:4d:ca:a7:a4:40:ee:28:73: d7:6c:7b:ec:69:3f:cb:9d:2f:7e:da:a3:8e:fc:df:a9:3f:75: b2:6d:69:27:04:d4:9e:74:c8:1e:77:1b:e7:e7:d8:50:f6:08: 16:d0:e1:a5:20:fc:a0:b1:ce:ee:ec:51:18:bb:58:dc:4f:8b: 18:b3:9f:7a:f5:44:af:de:24:a7:33:60:66:6a:4d:78:64:86: 5a:ed:f6:93:22:dd:08:9c:01:a3:39:18:61:05:5f:ca:74:1c: ff:d1:3d:b8:a1:5c:8a:1b:94:0b:8c:72:25:f0:0c:2d:e3:ae: b0:27:f0:c9:35:c6:46:8e:08:a5:b6:07:67:e7:87:e6:10:1b: 79:7f:8e:ba:2c:11:e5:1e:e8:b9:c2:88:01:9f:83:a8:7d:33: 56:47:e5:2b:b6:3e:72:4e:2d:eb:99:b5:26:57:33:2b:3d:a5: 7d:78:63:97 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4oz0+sH+9k9IUOPx7Sy1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTM3NWM5YzAwYjE1MjlkNTUxZWU3ZTI4YzYwNzBhYjQzYTJmZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx74RsplZAMMnW7LSzDG2ee5oEZU9 TAn4MSRoUVePgnb7KLsa9F89O2vuqPSV3YQEg4DylHufPSA0tJ4woqBqlikqfJA9 MLZURUe3xpi87mbNWQ6ht1Pmlxbbff8oAjFT0rRpaFQMM/sBTiDPfcOOYgwfvFEA W3+49qCwy49Gxcl+O+KhiueXkrQS5+Bbar4Den3gimnCWNh5EhSmC2fbuicb2y84 FtUUVWWrC6ElDYmNwKeFFLiU5gzt8i0yLfXXxy1+2TlkmZnJcpO3Zh6Rp+nKivT2 r7Hjq46m+rnLwTlV3VUPfehXsoUT7WA5SXPePK8Z/N2U2VZsNd7Fs4XWrQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFCk3XJwAsVKdVR7n4oxgcKtDov52MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzc3Zjk3 Ny0wMTViLTRjYWYtODkzZi0wNTA0ZTExMWEzYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNzdmOTc3 LTAxNWItNGNhZi04OTNmLTA1MDRlMTExYTNiOC8xL0tUZGNuQUN4VXAxVkh1Zmlq R0J3cTBPaV9uWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC54MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM1oDANBgkqhkiG9w0BAQsFAAOCAQEAi4x4N+hcclo/lpL0Frmg5OtxEFaQ mvTX7uEihnLrFnwd3kNmszvMyeqoWUwZA1x6KrTgzXh8glOLID+J9KwR4uYwTJTq /qJQld+GBXX6O9aChk3Kp6RA7ihz12x77Gk/y50vftqjjvzfqT91sm1pJwTUnnTI Hncb5+fYUPYIFtDhpSD8oLHO7uxRGLtY3E+LGLOfevVEr94kpzNgZmpNeGSGWu32 kyLdCJwBozkYYQVfynQc/9E9uKFcihuUC4xyJfAMLeOusCfwyTXGRo4IpbYHZ+eH 5hAbeX+OuiwR5R7oucKIAZ+DqH0zVkflK7Y+ck4t65m1JlczKz2lfXhjlw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:55 2026 by rpki-client