This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer File: KcFw2YteNdfVFTdnHGBApRUYhLw.cer (raw, json) Hash identifier: BNA10NHA/RyHxLO4OXLCqG5Qp5GC1N585rZjRQx/LMg= Subject key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11DF26C0920BBE40EB33BF1D3A391B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 212.72.224.0/21 IP: 2a02:968::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:df:26:c0:92:0b:be:40:eb:33:bf:1d:3a:39:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29c170d98b5e35d7d51537671c6040a5151884bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:22:fe:23:e1:68:3e:1a:44:f8:54:e9:6d: 83:7f:6e:33:a1:48:32:7d:7f:97:3a:bc:9c:ef:89: ee:4a:c9:3d:e8:06:5c:78:78:6a:a2:4b:d3:d0:d9: 6c:fb:56:e4:f4:d1:ca:22:6a:ad:2a:71:3c:07:db: 0f:ca:a2:dc:09:1d:d3:88:06:a6:bf:a9:0a:c5:c8: 43:75:66:52:89:32:5d:d0:ed:5b:48:77:1f:fc:7e: 86:24:a9:4d:ee:03:7b:ce:28:29:38:76:c6:27:4c: c7:e9:90:d0:8c:24:84:43:54:e2:c8:10:cc:f0:f9: aa:0d:a0:1d:01:41:68:cd:f7:ab:b2:4b:4b:cf:f7: 64:21:b8:89:a1:e3:e1:35:4a:72:48:1e:3c:54:f1: 5b:88:98:d3:86:5f:a3:ca:56:7e:9f:ce:c1:3b:d9: 7b:28:ff:36:4b:05:2d:52:00:d5:f6:10:8d:8c:51: f2:a3:03:78:66:ea:19:81:92:e7:83:61:17:b4:7c: a1:cb:6b:22:15:21:88:54:45:11:3e:90:cf:78:f7: 36:89:b6:df:13:44:af:82:91:22:17:74:d5:a2:36: b6:b0:dd:d5:81:41:cb:5d:c4:29:d5:fc:42:4b:23: 98:d5:77:80:c9:1b:52:38:98:74:c5:79:df:d1:b6: 9f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.72.224.0/21 IPv6: 2a02:968::/32 Signature Algorithm: sha256WithRSAEncryption 84:1f:28:8c:11:c7:eb:0b:02:70:1f:b2:aa:ee:e7:9f:fd:9f: e6:7a:e6:d0:7f:1a:66:ad:a3:fc:e9:60:dc:40:7f:53:3b:c1: 80:5a:33:30:bf:ff:a3:c1:de:bf:80:20:39:a1:67:40:a7:98: 6e:29:0e:bb:41:e6:62:cc:5c:9e:94:57:c4:29:e8:0a:71:50: bc:7d:68:de:51:5d:3f:42:89:6e:d9:8d:6d:c5:0a:d9:90:32: d0:91:65:db:c9:a3:73:94:b7:05:1f:88:4f:4c:a7:23:98:1b: 4c:1d:74:9f:14:92:1d:b7:37:86:76:8a:89:59:2d:8e:e1:94: 0b:54:1e:1d:e8:b2:46:c8:59:66:f0:ad:2c:90:5f:a1:1b:0b: d3:66:82:f6:62:75:fa:d7:ef:10:b4:0e:ae:f7:71:22:82:e8: b1:52:e3:ca:c0:73:11:10:5b:8f:23:bc:42:68:de:bf:85:fa: a4:53:5d:0b:2d:e8:44:79:ae:4b:66:b3:62:4c:a6:80:9d:8e: ad:e6:67:da:21:15:92:de:fd:b0:aa:34:19:9e:1b:0a:c8:17: 61:84:32:59:a3:92:5d:3f:55:02:ee:39:d5:c7:76:85:2b:38: 33:bf:28:a0:e5:7e:0d:ab:04:95:42:b6:e8:1f:d7:56:f2:4d: 65:25:56:1f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8Ed8mwJILvkDrM78dOjkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWMxNzBkOThiNWUzNWQ3ZDUxNTM3NjcxYzYwNDBhNTE1MTg4NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttMi/iPhaD4aRPhU6W2Df24zoUgy fX+XOryc74nuSsk96AZceHhqokvT0Nls+1bk9NHKImqtKnE8B9sPyqLcCR3TiAam v6kKxchDdWZSiTJd0O1bSHcf/H6GJKlN7gN7zigpOHbGJ0zH6ZDQjCSEQ1TiyBDM 8PmqDaAdAUFozfersktLz/dkIbiJoePhNUpySB48VPFbiJjThl+jylZ+n87BO9l7 KP82SwUtUgDV9hCNjFHyowN4ZuoZgZLng2EXtHyhy2siFSGIVEURPpDPePc2ibbf E0SvgpEiF3TVoja2sN3VgUHLXcQp1fxCSyOY1XeAyRtSOJh0xXnf0bafRQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2UyNWEz Yy1kZWY2LTQyMjgtYTEwYi1jNDVlOTQ5ZTljZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvZTI1YTNj LWRlZjYtNDIyOC1hMTBiLWM0NWU5NDllOWNkNi8xL0tjRncyWXRlTmRmVkZUZG5I R0JBcFJVWWhMdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQD1EjgMA0EAgACMAcDBQAqAgloMA0GCSqGSIb3 DQEBCwUAA4IBAQCEHyiMEcfrCwJwH7Kq7uef/Z/meubQfxpmraP86WDcQH9TO8GA WjMwv/+jwd6/gCA5oWdAp5huKQ67QeZizFyelFfEKegKcVC8fWjeUV0/Qolu2Y1t xQrZkDLQkWXbyaNzlLcFH4hPTKcjmBtMHXSfFJIdtzeGdoqJWS2O4ZQLVB4d6LJG yFlm8K0skF+hGwvTZoL2YnX61+8QtA6u93EiguixUuPKwHMREFuPI7xCaN6/hfqk U10LLehEea5LZrNiTKaAnY6t5mfaIRWS3v2wqjQZnhsKyBdhhDJZo5JdP1UC7jnV x3aFKzgzvyig5X4NqwSVQrboH9dW8k1lJVYf -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:58 2026 by rpki-client