This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer File: KX75vv0afiTAzJcpmH_AZda3Ey8.cer (raw, json) Hash identifier: bZJcOC6mEGdFVcfSD9IYP29WCfIPtOR4n0sYpONleHc= Subject key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A229E312378FA2547EF213E9C55DFB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.10.208.0/20 IP: 185.23.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:29:e3:12:37:8f:a2:54:7e:f2:13:e9:c5:5d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:39:bc:c5:6f:56:f0:ef:73:bc:7d:a0:db: 45:fa:b7:a1:78:29:1e:e7:b7:bd:9f:d2:30:cb:e1: 25:87:52:63:c4:57:da:ad:5b:b6:a5:65:54:69:87: 69:d9:d4:44:af:74:45:1d:15:b3:e1:6c:2f:61:b6: 50:fb:14:5d:b2:df:ab:bf:c0:b9:2c:be:81:35:c5: 92:66:c9:1c:a4:97:f4:7f:9d:6b:49:64:2f:aa:42: cf:d6:90:e4:1f:a7:ae:b8:7a:2d:97:d1:d2:0a:15: b3:83:8b:87:41:1b:87:f1:9a:2b:5b:e0:1e:51:d1: 53:6a:16:93:46:8d:63:ab:55:6f:13:5b:8e:7a:9d: 70:25:3d:23:62:26:97:ae:92:95:17:df:9f:da:60: f3:00:1e:59:93:80:35:aa:c2:67:ec:2b:b6:11:03: 47:9b:6a:da:37:dd:c5:be:a6:7b:cb:21:b8:b5:90: 08:db:13:8f:48:44:05:36:85:ca:82:ca:ea:f2:76: 22:70:cd:ca:55:90:0b:25:5a:84:a8:8b:67:db:e0: 16:97:ac:43:90:f4:f0:37:27:f7:71:97:54:3f:a2: fa:b9:46:38:74:8c:cb:95:ea:9b:6e:9a:79:f6:90: 47:d3:46:64:a8:a0:f3:24:74:96:12:ab:eb:1e:b2: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.208.0/20 185.23.236.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:b9:2f:55:90:3e:46:ad:56:2b:a3:cc:86:a3:13:b9:60:3e: ca:fe:b1:4a:8b:33:c0:df:65:06:5b:3a:1e:2d:db:bf:cc:7d: 0e:cf:0d:74:c9:61:3c:61:bc:f0:05:a3:95:12:e2:67:34:5f: e4:dc:c9:10:18:49:63:08:af:ad:53:84:60:39:36:e4:10:8a: 2a:91:bd:57:1f:b1:a9:55:d4:0d:32:fd:1e:0a:7c:75:a9:fb: 2b:96:27:78:17:8b:34:cb:76:05:bc:cd:ec:d9:8f:bb:93:c0: c5:ad:b4:52:de:01:1d:ea:a9:e9:a8:7c:0b:13:bd:81:0d:4d: ad:2b:5c:c8:f5:06:68:81:b4:7e:48:85:68:81:22:e3:be:c0: a4:28:b1:5e:0d:8d:a2:69:8d:f7:c1:37:ce:64:c0:7e:dd:bb: 49:c3:e9:3d:3a:44:fb:a7:7b:d6:9f:c8:09:ff:44:dc:da:5d: f5:2d:19:2a:1e:c8:3b:34:3e:0f:3f:81:4d:12:75:9e:89:fe: a9:1c:f7:2b:51:94:9d:c4:88:cb:69:61:50:df:c6:98:2b:21: b4:59:5a:cd:fb:88:bc:18:07:ec:a5:67:c9:77:0e:00:e1:e3: f1:a0:3a:aa:8b:03:6c:91:ca:a2:dc:0d:0e:53:d2:52:b4:9a: 96:79:ba:c6 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt4oinjEjePolR+8hPpxV37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTdlZjliZWZkMWE3ZTI0YzBjYzk3Mjk5ODdmYzA2NWQ2YjcxMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVs5vMVvVvDvc7x9oNtF+reheCke 57e9n9Iwy+Elh1JjxFfarVu2pWVUaYdp2dREr3RFHRWz4WwvYbZQ+xRdst+rv8C5 LL6BNcWSZskcpJf0f51rSWQvqkLP1pDkH6euuHotl9HSChWzg4uHQRuH8ZorW+Ae UdFTahaTRo1jq1VvE1uOep1wJT0jYiaXrpKVF9+f2mDzAB5Zk4A1qsJn7Cu2EQNH m2raN93FvqZ7yyG4tZAI2xOPSEQFNoXKgsrq8nYicM3KVZALJVqEqItn2+AWl6xD kPTwNyf3cZdUP6L6uUY4dIzLleqbbpp59pBH00ZkqKDzJHSWEqvrHrKuEQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFCl++b79Gn4kwMyXKZh/wGXWtxMvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2JlNDkw OS03NDVmLTRkMGMtYmZhYi1kZWU3Njg2MDAxM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvYmU0OTA5 LTc0NWYtNGQwYy1iZmFiLWRlZTc2ODYwMDEzZC8xL0tYNzV2djBhZmlUQXpKY3Bt SF9BWmRhM0V5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQEBQrQAwQCuRfsMA0GCSqGSIb3DQEBCwUAA4IB AQAcuS9VkD5GrVYro8yGoxO5YD7K/rFKizPA32UGWzoeLdu/zH0Ozw10yWE8Ybzw BaOVEuJnNF/k3MkQGEljCK+tU4RgOTbkEIoqkb1XH7GpVdQNMv0eCnx1qfsrlid4 F4s0y3YFvM3s2Y+7k8DFrbRS3gEd6qnpqHwLE72BDU2tK1zI9QZogbR+SIVogSLj vsCkKLFeDY2iaY33wTfOZMB+3btJw+k9OkT7p3vWn8gJ/0Tc2l31LRkqHsg7ND4P P4FNEnWeif6pHPcrUZSdxIjLaWFQ38aYKyG0WVrN+4i8GAfspWfJdw4A4ePxoDqq iwNskcqi3A0OU9JStJqWebrG -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:44 2026 by rpki-client