This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer File: KZkwB8fJLfYXjny0MYP9f1KlJtg.cer (raw, json) Hash identifier: zsKvlqXq9/baoSAgTmJ7YH3BOKpREbi9KbjkWtD/UQk= Subject key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEACCABA663FC4314A7324BD3E24D984D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 12:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39582 AS: 214381 IP: 37.77.0.0/19 IP: 185.10.243.0/24 IP: 2a02:4300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:cc:ab:a6:63:fc:43:14:a7:32:4b:d3:e2:4d:98:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:bc:d3:50:a9:e0:30:0a:00:d7:01:53:b8: 98:74:47:88:f4:f0:4b:0f:c7:8f:0e:b3:29:38:fe: 23:3c:8e:91:2f:58:51:d4:a8:0a:05:f7:d8:be:af: b0:3f:bd:b8:67:f6:c2:38:57:75:e0:f4:08:c7:42: 47:5e:d2:bf:1a:dd:60:42:52:9b:21:b8:49:66:85: d4:24:11:ac:dd:bb:4b:5f:37:4a:7a:b3:eb:b4:e1: 6e:b6:01:2f:c2:1d:c4:27:2d:80:b8:85:4d:44:86: fa:74:19:4c:0b:60:94:56:92:58:bf:ef:8c:8f:33: ee:22:c8:d3:82:b0:0b:cf:fc:1e:ba:1b:17:0d:1d: 00:01:dc:9c:73:21:c8:2e:98:16:57:2c:52:de:fb: 69:7d:97:9c:77:bb:ae:9c:de:f0:47:2b:d5:f0:66: 87:60:be:4c:96:68:c1:8d:d4:05:83:58:89:4b:25: f7:7e:ec:bc:47:69:d8:02:0e:cb:f3:47:f9:41:de: 0d:b4:d5:65:71:80:d7:9b:53:9d:be:b6:cb:4a:52: fc:5e:47:7c:ec:cc:ce:4a:3d:f8:a2:55:ad:3e:b2: 6b:84:35:6a:5f:f7:15:46:d2:31:b8:fc:e4:66:81: 36:00:20:65:b5:2d:6c:19:4e:66:40:cb:13:38:63: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.0.0/19 185.10.243.0/24 IPv6: 2a02:4300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39582 214381 Signature Algorithm: sha256WithRSAEncryption 83:cf:fb:cb:f0:25:98:4e:2c:05:15:c1:0c:02:97:ca:70:ca: 84:00:d6:99:33:6a:43:d4:32:8b:a0:2a:cf:eb:5a:86:92:14: e6:3a:53:20:41:eb:b4:37:2c:e4:70:e1:f1:79:ad:68:44:89: 46:03:97:bd:3c:1a:8c:47:50:e1:93:0a:1e:c8:4f:25:51:4b: 98:52:3f:81:52:f0:1a:db:a8:19:95:3c:06:c2:97:ec:f5:58: 9f:e4:77:98:70:20:09:45:d3:41:f8:76:cd:a4:ff:5e:a0:a7: aa:32:6f:88:e0:90:a8:dc:2c:57:c4:51:18:5d:ba:ee:90:78: 74:0e:97:6d:0a:f5:2e:d6:db:5f:59:87:50:56:c6:a5:95:a2: 09:7b:68:1c:ed:6e:3c:96:02:0f:ce:01:ac:77:6e:cd:f3:d2: cb:38:19:27:da:42:63:84:64:e1:e4:92:d6:9a:16:96:0f:6f: 7d:e9:3d:bb:d3:cc:7a:60:4f:3a:19:6d:49:0e:d5:38:76:79: 1f:8c:fd:56:55:12:ce:d3:0a:b7:d9:ad:07:b2:38:fd:b8:08: 27:bf:a2:0b:30:56:93:ab:6f:98:af:51:71:bc:52:34:95:c6: 03:df:a2:b2:60:ba:c8:6a:05:0e:ca:b1:b0:c4:35:c9:67:54: 25:4a:cb:8f -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZvqzKumY/xDFKcyS9PiTZhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTk5MzAwN2M3YzkyZGY2MTc4ZTdjYjQzMTgzZmQ3ZjUyYTUyNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXS801Cp4DAKANcBU7iYdEeI9PBL D8ePDrMpOP4jPI6RL1hR1KgKBffYvq+wP724Z/bCOFd14PQIx0JHXtK/Gt1gQlKb IbhJZoXUJBGs3btLXzdKerPrtOFutgEvwh3EJy2AuIVNRIb6dBlMC2CUVpJYv++M jzPuIsjTgrALz/weuhsXDR0AAdyccyHILpgWVyxS3vtpfZecd7uunN7wRyvV8GaH YL5MlmjBjdQFg1iJSyX3fuy8R2nYAg7L80f5Qd4NtNVlcYDXm1OdvrbLSlL8Xkd8 7MzOSj34olWtPrJrhDVqX/cVRtIxuPzkZoE2ACBltS1sGU5mQMsTOGO/GQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFCmZMAfHyS32F458tDGD/X9SpSbYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2RjOWI2 Zi0zYTZkLTQ0OWYtOGI4OS0xZTgyOWZmYTFjM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZGM5YjZm LTNhNmQtNDQ5Zi04Yjg5LTFlODI5ZmZhMWMzYS8xL0taa3dCOGZKTGZZWGpueTBN WVA5ZjFLbEp0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFJU0AAwQAuQrzMA0EAgACMAcDBQMqAkMAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCangIDA0VtMA0GCSqGSIb3DQEBCwUAA4IB AQCDz/vL8CWYTiwFFcEMApfKcMqEANaZM2pD1DKLoCrP61qGkhTmOlMgQeu0Nyzk cOHxea1oRIlGA5e9PBqMR1DhkwoeyE8lUUuYUj+BUvAa26gZlTwGwpfs9Vif5HeY cCAJRdNB+HbNpP9eoKeqMm+I4JCo3CxXxFEYXbrukHh0DpdtCvUu1ttfWYdQVsal laIJe2gc7W48lgIPzgGsd27N89LLOBkn2kJjhGTh5JLWmhaWD2996T2708x6YE86 GW1JDtU4dnkfjP1WVRLO0wq32a0Hsjj9uAgnv6ILMFaTq2+Yr1FxvFI0lcYD36Ky YLrIagUOyrGwxDXJZ1QlSsuP -----END CERTIFICATE-----Generated at Sun Jan 25 19:14:10 2026 by rpki-client