This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer File: KbeTgP5AdDnMLs0_rBgVfbNs92g.cer (raw, json) Hash identifier: retCC6c4Z99rF+GbopvJ9AKU2B3zmLapHurDZzMSmtM= Subject key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834CA5D29F7893B1C6D719A60CF79A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201110 AS: 206228 IP: 143.161.0.0/16 IP: 185.77.252.0/22 IP: 2a05:6740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ca:5d:29:f7:89:3b:1c:6d:71:9a:60:cf:79:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:06:ab:d7:1b:f8:18:b6:8f:a0:52:87:49: f0:64:cc:ba:ff:1d:8e:bd:c4:29:10:56:58:4c:09: 84:b1:2c:f8:d7:65:e2:95:40:68:16:dc:e0:0d:f7: 87:98:36:e1:fb:f9:ec:0f:a7:19:ff:0d:50:b2:8d: ab:41:d0:89:4f:64:71:52:99:2f:b3:61:07:7b:8f: 5b:32:98:09:5b:86:1a:4a:aa:09:37:7e:8d:e5:ba: 89:96:48:24:76:78:b2:7d:25:eb:85:61:f1:21:40: 1d:21:57:e9:b3:a2:97:30:0a:f1:47:c4:a9:97:3b: a6:14:69:c1:39:04:37:d4:78:5b:da:a5:12:10:87: b7:a2:fa:fb:8e:8d:2a:41:ee:02:89:8f:41:01:20: 1c:e9:e9:f6:c4:a1:98:c1:0e:10:4b:8a:54:39:78: f2:ed:1c:ce:88:cb:2f:77:56:74:98:fd:5a:b2:f2: b0:ee:61:80:b8:b4:d7:b2:ac:99:87:71:d6:37:74: dc:0a:ff:b7:0a:4f:64:de:bb:d5:dd:fc:9f:22:4c: de:68:61:c8:73:4c:e9:56:78:d6:fe:ea:1b:60:26: 7f:19:49:7c:41:4a:84:d1:97:1d:6b:3a:05:90:d7: fe:40:8c:cd:8d:fa:3b:e1:c4:77:2d:7d:bc:0f:28: 44:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.161.0.0/16 185.77.252.0/22 IPv6: 2a05:6740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201110 206228 Signature Algorithm: sha256WithRSAEncryption 27:fd:a4:f3:60:ee:74:44:18:0d:20:b8:ba:8a:33:95:9b:c0: ec:54:b5:5f:04:26:51:17:7c:c9:ba:3d:60:ec:83:3f:d2:6d: 7a:fb:ca:d7:f5:2f:05:0c:4d:dd:d5:8f:92:b9:a1:a4:d6:a4: 57:90:5d:b1:d4:3f:a8:fe:af:cc:87:81:53:46:b7:47:eb:06: a1:06:11:44:8c:4c:77:e1:7d:3d:ef:8a:f8:2f:ef:ea:b0:87: 7b:32:e0:b7:7b:c5:c0:74:8f:ba:a3:70:08:8c:62:86:b9:6e: 26:03:64:74:7f:e0:63:06:4f:5e:04:30:03:79:c2:4c:32:d5: f5:1e:c1:5e:23:ea:17:75:a0:b2:9e:d2:46:fc:29:f1:bb:be: 71:e5:39:b2:1a:2b:d8:47:4c:83:2d:cb:77:3f:52:92:6b:f6: bd:07:7c:4f:58:e9:b8:5a:9b:b5:11:52:f7:f0:27:27:a5:1c: b9:6b:65:0f:04:0e:5a:94:3e:94:e5:a8:a7:70:de:54:77:52: 3d:8c:c7:9f:e7:f2:1a:d9:6f:3c:9c:2e:14:d9:e1:13:ca:4c: 5f:cc:bd:47:34:c0:63:ff:56:35:84:d7:c1:8f:45:e8:a9:00: 7a:b9:ea:a8:92:9a:93:b0:50:ce:82:2f:de:0b:4e:1e:e1:ec: 14:a9:3c:87 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt4NMpdKfeJOxxtcZpgz3mmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWI3OTM4MGZlNDA3NDM5Y2MyZWNkM2ZhYzE4MTU3ZGIzNmNmNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqEGq9cb+Bi2j6BSh0nwZMy6/x2O vcQpEFZYTAmEsSz412XilUBoFtzgDfeHmDbh+/nsD6cZ/w1Qso2rQdCJT2RxUpkv s2EHe49bMpgJW4YaSqoJN36N5bqJlkgkdniyfSXrhWHxIUAdIVfps6KXMArxR8Sp lzumFGnBOQQ31Hhb2qUSEIe3ovr7jo0qQe4CiY9BASAc6en2xKGYwQ4QS4pUOXjy 7RzOiMsvd1Z0mP1asvKw7mGAuLTXsqyZh3HWN3TcCv+3Ck9k3rvV3fyfIkzeaGHI c0zpVnjW/uobYCZ/GUl8QUqE0ZcdazoFkNf+QIzNjfo74cR3LX28DyhESQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzM5Mzg0 Mi1lN2VmLTQ4OTMtOWMxYi0xZTg0MjExOGRiNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvMzkzODQy LWU3ZWYtNDg5My05YzFiLTFlODQyMTE4ZGI2Zi8xL0tiZVRnUDVBZERuTUxzMF9y QmdWZmJOczkyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjARBAIAATALAwMAj6EDBAK5TfwwDQQCAAIwBwMFAyoFZ0AwHwYI KwYBBQUHAQgBAf8EEDAOoAwwCgIDAxGWAgMDJZQwDQYJKoZIhvcNAQELBQADggEB ACf9pPNg7nREGA0guLqKM5WbwOxUtV8EJlEXfMm6PWDsgz/SbXr7ytf1LwUMTd3V j5K5oaTWpFeQXbHUP6j+r8yHgVNGt0frBqEGEUSMTHfhfT3vivgv7+qwh3sy4Ld7 xcB0j7qjcAiMYoa5biYDZHR/4GMGT14EMAN5wkwy1fUewV4j6hd1oLKe0kb8KfG7 vnHlObIaK9hHTIMty3c/UpJr9r0HfE9Y6bham7URUvfwJyelHLlrZQ8EDlqUPpTl qKdw3lR3Uj2Mx5/n8hrZbzycLhTZ4RPKTF/MvUc0wGP/VjWE18GPReipAHq56qiS mpOwUM6CL94LTh7h7BSpPIc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:56 2026 by rpki-client