This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer File: KcmwQBb28CGDMHwX32MKAonsW7U.cer (raw, json) Hash identifier: VGpSzz4ibR0GoZ02tBCGweIda1xahX7JvCTwsSclOMM= Subject key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B69AF24EFAC3A43122A8BCCCE51CD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.102.104.0/21 IP: 185.20.148.0/22 IP: 2a01:9360::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:69:af:24:ef:ac:3a:43:12:2a:8b:cc:ce:51:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29c9b04016f6f02183307c17df630a0289ec5bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:14:ca:c5:7f:96:88:67:d6:b3:60:31:34: 08:eb:8c:05:e1:c1:1b:ed:ab:34:a5:64:c8:4d:52: ed:25:3a:59:f8:24:db:dd:98:a9:f2:50:ba:90:ef: df:70:65:c5:4f:77:80:73:53:dd:33:7e:36:b0:9e: b8:e5:d9:19:af:2b:02:a8:48:12:44:25:92:a4:b5: 64:89:b0:6a:b6:47:1f:ad:97:5e:70:2e:c5:a8:f2: 86:f5:7d:0f:da:2a:d2:f0:7f:61:4c:4f:79:e1:f0: 2b:88:61:0b:92:3e:b5:b3:14:be:68:63:70:93:a4: 2b:c0:ec:99:39:e2:d2:47:3b:a7:57:f3:2a:34:aa: c6:c1:08:44:5c:32:1b:06:82:cc:62:da:fb:25:d5: b5:9c:bc:53:3c:a4:cc:04:e7:30:54:f9:54:87:41: 87:7d:04:3d:72:4e:8e:a4:16:72:e9:dd:22:df:ca: 04:f4:65:db:63:1b:7a:89:87:20:c9:17:7b:de:05: 58:2d:07:2a:76:42:dc:a6:17:f5:34:bb:3d:34:fc: 1f:29:50:f2:21:ff:05:cf:7f:d0:eb:50:8b:e2:1e: 63:82:b5:b2:c1:f4:7b:c9:21:37:14:7d:36:93:77: 1e:65:d2:bb:56:b9:77:5c:99:e4:c9:77:17:1b:e5: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.104.0/21 185.20.148.0/22 IPv6: 2a01:9360::/32 Signature Algorithm: sha256WithRSAEncryption 11:bb:0f:3d:e7:5b:55:44:43:fd:e4:ad:38:20:93:6b:5b:2f: c0:8b:75:72:c9:41:ee:b9:65:95:52:31:9f:46:86:3a:9a:e2: b8:58:b1:97:62:d5:f7:e1:11:32:04:52:98:92:d7:2a:f5:f6: 96:75:59:32:6e:ff:09:4f:73:be:f3:c1:57:ae:96:21:fd:03: 76:3c:d0:05:d0:76:8c:05:1d:32:01:78:80:32:df:2f:53:03: 09:54:a3:38:45:1d:9e:6b:37:ca:1a:49:84:08:0f:92:0f:2b: 08:a9:9d:86:e5:dc:a4:ce:48:3a:e0:9f:30:e0:d7:ef:d8:c5: dc:59:2f:e5:6f:e6:0e:88:fb:6d:76:fd:13:9b:e2:b9:21:56: 3b:26:d1:73:f6:46:cc:cd:01:db:50:44:d7:f0:3f:cb:46:88: cc:de:ff:e3:5a:76:5f:e0:59:ee:85:e9:8c:77:1d:22:ee:7a: 2a:e7:a3:ab:34:5e:7c:f7:61:c7:0e:fa:f2:45:14:7b:43:fa: 6e:3d:e7:82:f0:53:33:a0:f5:79:a3:b1:3a:2a:03:93:d6:0c: c6:69:d8:6c:c3:de:e4:c8:dc:0c:6e:14:a3:37:d8:9a:42:17: 7c:de:3a:f2:37:85:25:56:47:25:a7:0a:3d:ae:57:9d:0c:b7: a9:a8:c9:1f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6W2mvJO+sOkMSKovMzlHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWM5YjA0MDE2ZjZmMDIxODMzMDdjMTdkZjYzMGEwMjg5ZWM1YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5IUysV/lohn1rNgMTQI64wF4cEb 7as0pWTITVLtJTpZ+CTb3Zip8lC6kO/fcGXFT3eAc1PdM342sJ645dkZrysCqEgS RCWSpLVkibBqtkcfrZdecC7FqPKG9X0P2irS8H9hTE954fAriGELkj61sxS+aGNw k6QrwOyZOeLSRzunV/MqNKrGwQhEXDIbBoLMYtr7JdW1nLxTPKTMBOcwVPlUh0GH fQQ9ck6OpBZy6d0i38oE9GXbYxt6iYcgyRd73gVYLQcqdkLcphf1NLs9NPwfKVDy If8Fz3/Q61CL4h5jgrWywfR7ySE3FH02k3ceZdK7Vrl3XJnkyXcXG+VeWQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFCnJsEAW9vAhgzB8F99jCgKJ7Fu1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzU1MTg0 Ny0zMzJkLTRlMjctYjQ3YS0xZDU5MWJiZDQwNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNTUxODQ3 LTMzMmQtNGUyNy1iNDdhLTFkNTkxYmJkNDA2MC8xL0tjbXdRQmIyOENHRE1Id1gz Mk1LQW9uc1c3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDW2ZoAwQCuRSUMA0EAgACMAcDBQAqAZNgMA0G CSqGSIb3DQEBCwUAA4IBAQARuw8951tVREP95K04IJNrWy/Ai3VyyUHuuWWVUjGf RoY6muK4WLGXYtX34REyBFKYktcq9faWdVkybv8JT3O+88FXrpYh/QN2PNAF0HaM BR0yAXiAMt8vUwMJVKM4RR2eazfKGkmECA+SDysIqZ2G5dykzkg64J8w4Nfv2MXc WS/lb+YOiPttdv0Tm+K5IVY7JtFz9kbMzQHbUETX8D/LRojM3v/jWnZf4FnuhemM dx0i7noq56OrNF5892HHDvryRRR7Q/puPeeC8FMzoPV5o7E6KgOT1gzGadhsw97k yNwMbhSjN9iaQhd83jryN4UlVkclpwo9rledDLepqMkf -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:59 2026 by rpki-client