This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer (raw, json) Hash identifier: W8XabKrU3sg/nZqf1uaxsRG+YfSggg87lfedna0/qA8= Subject key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3878A1AB01B50274D16B5FC0B70D01 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211707 IP: 185.19.34.0/24 IP: 2a13:91c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:78:a1:ab:01:b5:02:74:d1:6b:5f:c0:b7:0d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:1b:7e:1e:c9:b3:b8:94:3b:6d:7e:0b:f0: 54:e3:b9:e4:51:6c:41:05:64:aa:ed:fc:39:31:46: f0:34:3c:9d:4c:ba:1f:27:9d:20:ce:63:e3:b3:36: 03:1a:cb:86:cd:b8:02:ec:5c:40:03:26:08:58:e4: 16:c6:6e:e5:2c:59:06:c3:44:cd:ab:db:f3:11:36: b2:b6:e4:b1:25:df:cf:b3:37:80:3a:ce:e5:8b:be: 3b:43:be:8e:4c:45:ce:2c:2f:80:91:3d:ef:d7:64: 32:68:c8:ab:56:f4:3a:c4:60:30:9e:08:de:10:88: 44:c0:15:a0:55:70:a0:43:9c:cc:93:cc:85:ef:aa: 8e:28:a6:ae:cc:24:a5:ba:0a:48:17:fa:2d:50:cd: 0b:a6:88:82:24:1c:88:29:3e:f0:eb:d2:cb:d3:2a: 65:d8:e9:68:e2:03:fa:70:60:1b:c4:c0:f4:15:f6: f9:95:1c:29:ae:57:25:4f:ce:5a:8e:bc:f1:78:26: e4:29:55:32:ca:3f:d1:24:32:3a:d0:a5:89:a0:83: b1:93:e3:ed:af:84:18:8b:8a:3e:da:76:9d:27:e1: d5:42:50:15:cd:9c:19:e8:9b:f4:93:07:f3:b7:69: 79:30:f7:17:ff:49:67:6f:e9:b5:b4:71:b0:fd:7b: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.34.0/24 IPv6: 2a13:91c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211707 Signature Algorithm: sha256WithRSAEncryption a9:b6:46:64:dc:43:13:95:c2:be:97:d0:2d:f8:c4:de:95:2d: 42:75:f3:7f:98:41:a0:4c:8e:6c:c6:bb:9f:97:c9:79:18:4a: 2c:c5:4f:42:b8:ab:8d:22:1a:21:1a:99:dc:3d:39:2a:a1:90: 54:20:37:66:5b:71:d0:78:e5:ba:84:f5:bb:80:d3:80:4d:b3: 83:bc:c9:43:7e:de:8e:d9:df:a7:9d:72:87:a1:c5:41:47:fd: 34:93:bf:6d:08:39:9e:4c:99:06:ef:28:3f:12:49:e9:d6:c5: 94:64:17:40:e3:f5:dc:17:8a:91:22:9d:4b:bb:3a:e3:67:9a: d3:a9:96:38:01:9c:93:70:a4:b3:d7:bc:a8:c9:80:6a:e8:2a: 01:a5:c9:26:a5:3c:f3:b8:82:87:04:b9:aa:3c:8c:92:3d:ac: 8d:d5:63:6c:d7:ef:6b:42:26:1a:eb:f1:86:d9:2e:f7:e6:56: 45:35:ce:38:1c:b8:76:f8:a7:63:07:ca:34:54:78:e5:7a:47: 3d:55:6c:81:93:3f:db:4a:81:7f:d6:82:9f:af:14:17:e9:44: 35:50:2f:31:d5:60:8d:4f:aa:4e:71:67:9d:fe:c9:a2:0a:04: ef:0c:5d:29:ee:7c:ec:ab:66:9d:c9:5d:97:c6:ea:5b:08:3d: 2d:05:1b:ad -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OHihqwG1AnTRa1/Atw0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTk2Y2Q2ODUzMTg0N2UzYjBiZTBkOTNjNjVjYzFmYjY0ZWNkMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T0bfh7Js7iUO21+C/BU47nkUWxB BWSq7fw5MUbwNDydTLofJ50gzmPjszYDGsuGzbgC7FxAAyYIWOQWxm7lLFkGw0TN q9vzETaytuSxJd/PszeAOs7li747Q76OTEXOLC+AkT3v12QyaMirVvQ6xGAwngje EIhEwBWgVXCgQ5zMk8yF76qOKKauzCSlugpIF/otUM0LpoiCJByIKT7w69LL0ypl 2Olo4gP6cGAbxMD0Ffb5lRwprlclT85ajrzxeCbkKVUyyj/RJDI60KWJoIOxk+Pt r4QYi4o+2nadJ+HVQlAVzZwZ6Jv0kwfzt2l5MPcX/0lnb+m1tHGw/XsS2wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCmWzWhTGEfjsL4Nk8Zcwftk7NIaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzgzY2Q0 MS03MjU2LTRkNjYtOTQyZi03MmVjYmExMzFhZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvODNjZDQx LTcyNTYtNGQ2Ni05NDJmLTcyZWNiYTEzMWFmOC8xL0taYk5hRk1ZUi1Pd3ZnMlR4 bHpCLTJUczBoby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuRMiMA0EAgACMAcDBQMqE5HAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6+zANBgkqhkiG9w0BAQsFAAOCAQEAqbZGZNxDE5XC vpfQLfjE3pUtQnXzf5hBoEyObMa7n5fJeRhKLMVPQrirjSIaIRqZ3D05KqGQVCA3 Zltx0HjluoT1u4DTgE2zg7zJQ37ejtnfp51yh6HFQUf9NJO/bQg5nkyZBu8oPxJJ 6dbFlGQXQOP13BeKkSKdS7s642ea06mWOAGck3Cks9e8qMmAaugqAaXJJqU887iC hwS5qjyMkj2sjdVjbNfva0ImGuvxhtku9+ZWRTXOOBy4dvinYwfKNFR45XpHPVVs gZM/20qBf9aCn68UF+lENVAvMdVgjU+qTnFnnf7JogoE7wxdKe587Ktmncldl8bq Wwg9LQUbrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:33 2026 by rpki-client