This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer File: KXrnWSylJJHcFmow_hR31xK9Rl0.cer (raw, json) Hash identifier: 7tSh1AcrN7qjImxPh0bjxTC9ww9Bw53gH9Y6u0eBZjQ= Subject key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C805DDCAC8696B6E216B9837F597AC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49531 IP: 91.214.204.0/22 IP: 93.92.32.0/21 IP: 93.186.48.0/20 IP: 94.159.0.0/17 IP: 185.42.108.0/22 IP: 2a04:8f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5d:dc:ac:86:96:b6:e2:16:b9:83:7f:59:7a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=297ae7592ca52491dc166a30fe1477d712bd465d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:4e:6d:fb:7f:8e:91:61:58:57:bd:4b:40: fe:f3:4a:55:83:a8:53:53:1f:5f:9a:6a:3e:7d:76: 41:f5:08:fb:9e:c9:6d:93:97:e3:ba:5b:a9:75:a0: 25:2e:fc:c7:56:2b:51:de:a5:02:27:bf:b8:27:72: bb:35:3a:b4:fe:70:88:21:1d:b7:64:24:cd:4e:aa: 78:65:ee:cc:d0:de:82:79:c8:7a:03:c6:a3:92:d7: 73:78:04:11:2c:d1:f6:5e:28:14:fa:c0:23:d7:65: d0:ad:18:a1:c4:0f:7c:dc:ee:98:e2:e6:c4:98:b1: 7d:1e:78:e9:77:1b:20:02:70:11:67:6c:a3:76:b4: 88:7d:2a:da:ab:e9:34:57:df:88:d5:29:2a:4a:79: ff:98:83:da:38:0a:1f:25:81:38:94:67:08:5a:62: 54:30:8d:44:a8:32:45:c4:eb:dd:ca:44:57:31:d6: bd:6b:cb:c0:ec:6a:84:bb:d2:44:40:b0:8b:81:bb: 52:0a:e9:b4:7e:71:8f:ae:6e:54:2c:8e:9f:62:f9: 11:66:84:b1:96:9b:43:4a:d5:8e:ac:81:92:87:59: c5:bf:40:74:b2:d3:1a:e8:3d:8c:23:4c:ba:26:f0: 16:30:6a:62:8a:d3:56:c2:0c:c3:85:21:4e:a4:12: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.204.0/22 93.92.32.0/21 93.186.48.0/20 94.159.0.0/17 185.42.108.0/22 IPv6: 2a04:8f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49531 Signature Algorithm: sha256WithRSAEncryption 20:40:16:d6:b4:2a:9e:87:b1:a5:56:5c:b1:0a:fb:30:e3:c4: fc:9a:9a:76:35:1a:4c:ab:4e:99:74:6d:fd:4c:1c:cf:6b:52: a5:fc:99:3f:28:bc:5c:65:c8:85:32:ef:a2:90:66:e3:05:dc: c3:49:73:e1:f7:fc:b8:da:d9:5e:53:82:e3:59:12:40:f4:53: f2:0c:15:82:d5:c7:33:3d:ad:1e:7e:e4:86:ce:e3:28:38:ed: ee:d9:97:18:f4:a3:bf:da:60:ba:17:9f:9a:d7:4d:2a:ae:ae: e6:31:0b:d0:0c:4d:07:ea:05:c0:5a:cc:e4:b9:89:12:19:f1: c3:dd:34:96:bc:3c:cd:3c:49:b9:53:ab:85:95:be:c1:f8:95: aa:b2:59:bf:d5:27:58:b5:cf:5a:e9:02:55:c8:92:c2:f2:80: c2:7f:b2:9a:e8:31:63:72:7c:18:c8:35:50:20:87:96:66:89: e1:97:96:a4:02:21:36:eb:59:3b:67:c1:b9:7c:93:86:07:91: 37:52:0e:3e:64:a3:ca:07:2e:7b:cf:79:a9:9d:8a:8f:37:05: 9f:53:ed:20:bf:34:ae:c9:80:1b:07:76:7a:df:3d:98:1c:1b: 01:89:93:b6:f2:f6:ab:3a:fb:18:72:3d:e6:75:53:82:15:2f: c3:e7:8a:5d -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8gF3crIaWtuIWuYN/WXrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTdhZTc1OTJjYTUyNDkxZGMxNjZhMzBmZTE0NzdkNzEyYmQ0NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B5Obft/jpFhWFe9S0D+80pVg6hT Ux9fmmo+fXZB9Qj7nsltk5fjulupdaAlLvzHVitR3qUCJ7+4J3K7NTq0/nCIIR23 ZCTNTqp4Ze7M0N6Cech6A8ajktdzeAQRLNH2XigU+sAj12XQrRihxA983O6Y4ubE mLF9HnjpdxsgAnARZ2yjdrSIfSraq+k0V9+I1SkqSnn/mIPaOAofJYE4lGcIWmJU MI1EqDJFxOvdykRXMda9a8vA7GqEu9JEQLCLgbtSCum0fnGPrm5ULI6fYvkRZoSx lptDStWOrIGSh1nFv0B0stMa6D2MI0y6JvAWMGpiitNWwgzDhSFOpBKFyQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFCl651kspSSR3BZqMP4Ud9cSvUZdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzQ4ZTFl OC0zMjhkLTRmODItOTM5OC0zOTEwYTU5YTExMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNDhlMWU4 LTMyOGQtNGY4Mi05Mzk4LTM5MTBhNTlhMTEyMS8xL0tYcm5XU3lsSkpIY0Ztb3df aFIzMXhLOVJsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCW9bMAwQDXVwgAwQEXbowAwQHXp8AAwQCuSps MA0EAgACMAcDBQMqBI8AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDBezANBgkq hkiG9w0BAQsFAAOCAQEAIEAW1rQqnoexpVZcsQr7MOPE/JqadjUaTKtOmXRt/Uwc z2tSpfyZPyi8XGXIhTLvopBm4wXcw0lz4ff8uNrZXlOC41kSQPRT8gwVgtXHMz2t Hn7khs7jKDjt7tmXGPSjv9pguhefmtdNKq6u5jEL0AxNB+oFwFrM5LmJEhnxw900 lrw8zTxJuVOrhZW+wfiVqrJZv9UnWLXPWukCVciSwvKAwn+ymugxY3J8GMg1UCCH lmaJ4ZeWpAIhNutZO2fBuXyThgeRN1IOPmSjygcue895qZ2KjzcFn1PtIL80rsmA Gwd2et89mBwbAYmTtvL2qzr7GHI95nVTghUvw+eKXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:32 2026 by rpki-client