This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer File: KVqSt3jt36jc2RfLuHzeMboscy8.cer (raw, json) Hash identifier: GedRRStTrIE/ZGFHD0ssjJrF+1z3TukgRCFrBHXm5uE= Subject key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9DA08D506CC421266E96CFB7E1F59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209943 IP: 194.56.221.0/24 IP: 2001:67c:28ec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:da:08:d5:06:cc:42:12:66:e9:6c:fb:7e:1f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:40:49:65:04:b5:ba:5f:d8:09:82:10:48: f3:70:65:53:d8:b7:06:99:27:8a:b3:b6:36:94:2e: 39:9c:17:d9:b6:26:6b:40:b0:74:ef:ce:27:27:1d: 00:9e:dc:94:90:67:ac:d9:95:14:78:e6:e1:b9:6f: 8d:23:f9:b5:1a:fa:f6:66:9c:19:52:05:25:02:d1: 1f:40:3d:c4:0f:a2:c7:9b:fe:cb:47:7d:86:02:85: 87:bb:49:4e:a3:fb:46:3e:b6:7b:c3:9d:e1:79:3c: 36:7f:2e:92:7e:6c:90:b6:39:1a:61:70:c6:b3:38: 1c:93:24:6a:13:bb:5d:19:75:c2:88:8b:22:c9:a2: b2:55:11:7f:79:1d:01:61:9a:c5:34:2b:1a:24:c0: 9b:c9:b7:cc:09:79:0b:c7:57:44:9d:de:68:a4:3b: ae:e6:ca:71:57:30:1c:dc:d6:0d:84:0c:52:a9:fe: 6d:34:f1:05:50:a1:ac:4a:b2:ae:66:2a:21:cb:e6: fc:54:2d:b8:e9:11:f8:af:97:03:1e:de:48:8c:c1: 65:eb:b0:6d:a2:cf:54:57:cf:2c:88:c3:6b:39:c1: 4d:bb:38:16:2a:d9:72:5a:5c:ce:a6:69:73:89:b2: ce:9b:00:d5:5e:c0:64:12:c0:1d:c1:dc:e5:c9:0b: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.221.0/24 IPv6: 2001:67c:28ec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209943 Signature Algorithm: sha256WithRSAEncryption 7a:d4:bd:5b:16:e0:39:04:8d:24:4c:4d:53:b4:fa:83:32:44: 74:df:db:1f:79:f2:8a:09:c1:3a:45:dd:be:44:f9:2a:6f:c7: 74:76:76:33:b7:1c:9f:3c:8f:0b:ae:0e:fc:69:af:8d:29:cd: 77:cb:13:ad:df:5a:a7:b3:1d:09:19:f7:8c:2e:43:3d:5d:aa: c1:8c:4c:75:94:00:eb:d2:ee:29:88:61:03:d4:5a:3f:fd:f7: a7:cd:a3:da:c7:f0:c5:fd:a9:a0:e5:ce:1b:eb:1c:3e:c0:d7: e8:6a:45:cc:cb:05:aa:75:21:c6:b1:ee:5d:93:89:8f:b1:9a: 23:66:7e:30:fd:16:69:cb:c7:bd:dd:e0:85:41:a1:11:54:d1: b0:87:3c:bf:5c:33:08:2e:ee:1a:83:f4:04:c2:c3:9e:f4:8a: ef:d1:96:0c:f1:2a:bb:38:92:b9:9b:8f:d6:3d:a6:72:c9:9a: ec:61:fa:33:70:27:84:eb:2e:03:09:f0:23:d6:aa:f8:d9:77: 33:6c:76:1e:c9:4d:c2:97:a0:d3:e2:d1:a7:a4:10:43:f1:b4: 47:0d:49:18:68:b1:47:03:60:41:8e:64:69:c5:a1:56:2e:db: 59:dc:72:12:26:a1:eb:5c:b4:a9:01:29:64:e1:c8:aa:70:7b: 04:94:0b:fc -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9ydoI1QbMQhJm6Wz7fh9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTVhOTJiNzc4ZWRkZmE4ZGNkOTE3Y2JiODdjZGUzMWJhMmM3MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuBASWUEtbpf2AmCEEjzcGVT2LcG mSeKs7Y2lC45nBfZtiZrQLB0784nJx0AntyUkGes2ZUUeObhuW+NI/m1Gvr2ZpwZ UgUlAtEfQD3ED6LHm/7LR32GAoWHu0lOo/tGPrZ7w53heTw2fy6SfmyQtjkaYXDG szgckyRqE7tdGXXCiIsiyaKyVRF/eR0BYZrFNCsaJMCbybfMCXkLx1dEnd5opDuu 5spxVzAc3NYNhAxSqf5tNPEFUKGsSrKuZiohy+b8VC246RH4r5cDHt5IjMFl67Bt os9UV88siMNrOcFNuzgWKtlyWlzOpmlzibLOmwDVXsBkEsAdwdzlyQu5TQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFClakrd47d+o3NkXy7h83jG6LHMvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3Lzc1NzBl MS1hZTNkLTQ5MDEtOWM4NS1kY2RjNWNlZTI3NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNzU3MGUx LWFlM2QtNDkwMS05Yzg1LWRjZGM1Y2VlMjc2Zi8xL0tWcVN0M2p0MzZqYzJSZkx1 SHplTWJvc2N5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwjjdMA8EAgACMAkDBwAgAQZ8KOwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAzQXMA0GCSqGSIb3DQEBCwUAA4IBAQB61L1bFuA5 BI0kTE1TtPqDMkR039sfefKKCcE6Rd2+RPkqb8d0dnYztxyfPI8Lrg78aa+NKc13 yxOt31qnsx0JGfeMLkM9XarBjEx1lADr0u4piGED1Fo//fenzaPax/DF/amg5c4b 6xw+wNfoakXMywWqdSHGse5dk4mPsZojZn4w/RZpy8e93eCFQaERVNGwhzy/XDMI Lu4ag/QEwsOe9Irv0ZYM8Sq7OJK5m4/WPaZyyZrsYfozcCeE6y4DCfAj1qr42Xcz bHYeyU3Cl6DT4tGnpBBD8bRHDUkYaLFHA2BBjmRpxaFWLttZ3HISJqHrXLSpASlk 4ciqcHsElAv8 -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:25 2026 by rpki-client