This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer File: Kb4C3qCghumID1ZMhocrvFl8xnI.cer (raw, json) Hash identifier: BMTXmlwEvzwl6+FtOiMc7KH2YiH2PKav6IYz1w19IAY= Subject key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EA1BB56A425CEB8024116CFCF08F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9002 AS: 25462 AS: 28886 AS: 209447 AS: 210203 AS: 214455 IP: 5.253.168.0/22 IP: 87.245.208.0 -- 87.245.255.255 IP: 89.19.36.0/22 IP: 94.158.240.0/22 IP: 139.45.192.0/19 IP: 149.255.128.0/22 IP: 185.13.152.0/22 IP: 185.82.8.0/22 IP: 193.109.100.0/22 IP: 217.28.48.0/20 IP: 2a02:2d8::/32 IP: 2a02:2880::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a1:bb:56:a4:25:ce:b8:02:41:16:cf:cf:08:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29be02dea0a086e9880f564c86872bbc597cc672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:3d:85:0a:1c:80:a2:f1:e1:6a:98:13:27: 80:01:98:01:d3:23:40:24:4e:f5:cc:0e:65:86:42: 67:4c:ff:06:9e:29:bb:19:50:59:62:47:ef:7e:61: 09:47:35:1c:2a:8a:cf:c2:13:25:13:ed:aa:d8:d7: 87:95:40:91:65:8c:7f:f1:09:3c:74:ae:33:66:97: 40:c4:f7:86:b5:f5:4d:8b:a9:8a:eb:e0:18:8d:2b: a5:4b:2a:6f:08:78:d4:45:f2:ec:c6:45:cb:e1:e4: b7:bf:23:02:e7:03:01:24:16:cb:1a:2d:9b:48:0c: be:6f:20:dd:e4:32:9b:56:8b:f9:77:46:74:46:47: f7:cd:03:65:26:f9:6b:8b:a7:e0:5d:05:b5:12:37: 63:0a:19:d3:8b:ea:0f:9b:39:6a:ba:6e:60:ac:b0: 7b:04:65:29:a1:f2:64:68:28:c9:3e:ac:8f:e4:37: bd:9c:88:fc:e7:74:ae:9c:ee:48:ec:82:97:2a:cf: 55:ce:17:7b:ce:26:9a:dd:75:d7:34:fe:40:5d:2f: d7:b9:7e:04:90:ba:93:ae:90:b9:a2:11:57:62:d7: 28:47:ac:98:fa:90:64:3d:55:4f:28:5e:da:da:74: 47:4f:3a:ee:0d:4d:e6:08:4b:0d:98:57:0e:b8:b2: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.168.0/22 87.245.208.0-87.245.255.255 89.19.36.0/22 94.158.240.0/22 139.45.192.0/19 149.255.128.0/22 185.13.152.0/22 185.82.8.0/22 193.109.100.0/22 217.28.48.0/20 IPv6: 2a02:2d8::/32 2a02:2880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9002 25462 28886 209447 210203 214455 Signature Algorithm: sha256WithRSAEncryption ac:58:c0:46:aa:55:24:d3:50:92:ed:cd:c7:b0:cd:08:9e:6a: d4:d1:69:38:2a:4c:e1:d3:12:b1:94:d4:d0:ec:62:5b:74:a7: 58:84:46:c3:a0:7d:99:92:be:38:f7:38:7b:24:e0:86:b0:d4: f1:ad:8e:aa:05:db:38:42:b6:cf:46:ba:33:ae:ff:43:e6:be: 79:df:5a:40:56:9d:e6:a1:2b:7a:29:4f:06:1b:95:3b:f1:27: 1f:c4:41:4f:31:ef:87:67:06:c8:50:4c:97:0f:c2:fd:a3:f0: 6c:0e:2b:c2:fb:fd:c8:0d:ec:c5:93:ab:db:9d:49:f5:a4:0f: eb:c9:ca:eb:62:7d:e2:3d:6b:6d:b8:15:53:ab:e0:7e:eb:be: 54:c4:63:08:f0:35:60:b8:cd:0c:e1:ba:db:f1:36:b6:87:16: 86:c8:04:69:7d:49:3b:6d:fa:ad:29:a5:6e:7c:96:c5:d9:5d: 0a:fa:39:52:04:3e:64:a6:e1:a5:7b:44:23:71:88:38:6b:c1: db:99:fe:62:f6:ad:7e:b5:9f:97:ea:b5:73:ac:31:97:13:fe: d6:00:86:b6:6e:35:21:3a:a5:2e:62:e8:90:7a:25:24:5b:90: 21:5f:b9:71:d2:a1:9a:bd:ce:cb:e6:53:62:f3:b3:1c:f2:3d: 4f:ab:2a:fe -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt5fqG7VqQlzrgCQRbPzwj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWJlMDJkZWEwYTA4NmU5ODgwZjU2NGM4Njg3MmJiYzU5N2NjNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYQ9hQocgKLx4WqYEyeAAZgB0yNA JE71zA5lhkJnTP8Gnim7GVBZYkfvfmEJRzUcKorPwhMlE+2q2NeHlUCRZYx/8Qk8 dK4zZpdAxPeGtfVNi6mK6+AYjSulSypvCHjURfLsxkXL4eS3vyMC5wMBJBbLGi2b SAy+byDd5DKbVov5d0Z0Rkf3zQNlJvlri6fgXQW1EjdjChnTi+oPmzlqum5grLB7 BGUpofJkaCjJPqyP5De9nIj853SunO5I7IKXKs9Vzhd7ziaa3XXXNP5AXS/XuX4E kLqTrpC5ohFXYtcoR6yY+pBkPVVPKF7a2nRHTzruDU3mCEsNmFcOuLJHewIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFCm+At6goIbpiA9WTIaHK7xZfMZyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2VhMWNm Zi1hZThmLTQ3MTktODliMy0wMDNhMTU2OGJmM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZWExY2Zm LWFlOGYtNDcxOS04OWIzLTAwM2ExNTY4YmYzZi8xL0tiNEMzcUNnaHVtSUQxWk1o b2NydkZsOHhuSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHIGCCsGAQUF BwEHAQH/BGMwYTBJBAIAATBDAwQCBf2oMAsDBARX9dADAwFX9AMEAlkTJAMEAl6e 8AMEBYstwAMEApX/gAMEArkNmAMEArlSCAMEAsFtZAMEBNkcMDAUBAIAAjAOAwUA KgIC2AMFACoCKIAwMAYIKwYBBQUHAQgBAf8EITAfoB0wGwICIyoCAmN2AgJw1gID AzInAgMDNRsCAwNFtzANBgkqhkiG9w0BAQsFAAOCAQEArFjARqpVJNNQku3Nx7DN CJ5q1NFpOCpM4dMSsZTU0OxiW3SnWIRGw6B9mZK+OPc4eyTghrDU8a2OqgXbOEK2 z0a6M67/Q+a+ed9aQFad5qEreilPBhuVO/EnH8RBTzHvh2cGyFBMlw/C/aPwbA4r wvv9yA3sxZOr251J9aQP68nK62J94j1rbbgVU6vgfuu+VMRjCPA1YLjNDOG62/E2 tocWhsgEaX1JO236rSmlbnyWxdldCvo5UgQ+ZKbhpXtEI3GIOGvB25n+YvatfrWf l+q1c6wxlxP+1gCGtm41ITqlLmLokHolJFuQIV+5cdKhmr3Oy+ZTYvOzHPI9T6sq /g== -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:46 2026 by rpki-client