This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer File: KgE0Z2uONx1E752Fh_3NKzuYfKE.cer (raw, json) Hash identifier: 4vhRHRgs8AK1axvM3pVsHsbaDZwEEUh+u2aouEFgz2Y= Subject key identifier: 2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A784A557D8FF363A799EFFB22E8A9E114 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 13:38:48 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 12754 IP: 188.225.128.0/17 IP: 2a00:4e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:4a:55:7d:8f:f3:63:a7:99:ef:fb:22:e8:a9:e1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 13:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:69:55:04:14:b5:6f:5f:37:4e:68:48:d8: ab:e6:b4:53:f3:07:c8:fd:83:1d:34:25:fe:9e:cf: 8d:5d:2b:ef:d7:2e:3c:2c:21:cd:c4:9f:63:14:dc: be:31:9a:62:5c:b6:c7:ab:5f:8c:1f:7a:03:9f:24: b7:5a:8f:ea:3c:64:74:32:e4:ba:f6:b2:d4:2d:48: 50:c1:d6:ca:e7:f5:57:ac:f2:60:a1:33:a4:8a:19: 97:96:85:19:c8:ed:0d:a3:1b:e8:e6:53:5e:f2:64: df:94:ac:e9:c6:4b:85:16:37:20:18:a0:af:f1:b6: 4c:c0:85:24:6c:6d:09:ca:85:cd:35:9d:38:f5:41: 3a:7c:da:3d:14:f7:1d:4b:c7:80:da:5c:22:49:be: f9:fe:9a:ca:0d:bb:db:6c:42:47:ae:6c:c7:eb:67: 8e:81:c5:d0:10:4f:72:d4:c4:4c:1c:96:2c:66:81: 8d:c3:a6:17:96:df:a5:78:6f:b3:9b:64:6d:ae:d3: b4:37:96:0e:d0:07:fc:36:4e:80:a4:09:20:b5:67: 21:79:50:2c:43:8c:88:19:52:b1:da:2f:1d:74:d4: 05:31:75:bd:77:12:19:81:c3:8f:a1:68:96:41:ce: 29:4d:13:63:f6:b1:b4:d8:84:80:12:e6:67:70:c6: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.225.128.0/17 IPv6: 2a00:4e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12754 Signature Algorithm: sha256WithRSAEncryption 64:ff:b1:af:0c:fd:15:8a:ff:fa:22:0b:9b:7a:a6:4e:dd:bc: d5:87:ec:65:06:36:ca:fb:1b:c6:b0:c0:57:c7:54:47:a5:ca: 6e:c5:8e:e8:53:8c:c6:7d:e7:00:5f:d1:ec:76:26:61:37:2a: 6a:2f:d9:b5:86:b1:8c:ee:4c:60:14:e9:69:fd:37:38:41:ac: e5:aa:72:8f:8e:05:37:f0:92:56:52:79:ff:50:db:21:0c:aa: 19:2d:70:f9:51:19:6e:47:fe:7e:30:da:31:01:7e:72:8a:32: af:f5:72:ce:28:22:bd:cf:8d:1b:f5:cd:d6:d4:63:24:9c:5e: 79:23:08:22:19:3a:42:a6:65:41:5b:a4:3e:3d:d8:e4:8d:c3: 7d:0e:47:f1:99:f7:9f:29:48:80:1d:08:38:e9:fa:5c:e3:7b: 3f:34:f4:b6:a8:97:42:29:fd:34:7d:e6:28:62:d3:a7:f3:0d: ab:21:c9:fb:87:55:b5:99:65:c4:0c:ac:57:6e:3a:5a:1b:70: 75:fb:8d:84:b7:b7:ed:75:d2:31:67:ef:96:85:9f:81:4d:d4: 60:99:34:37:63:a2:94:91:97:7b:90:89:eb:10:2e:5c:f1:74: 44:f7:bc:dc:9f:78:ba:93:16:f8:9a:c2:f8:4f:d5:32:b9:9e: aa:f0:90:8a -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZp4SlV9j/Njp5nv+yLoqeEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTMzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTAxMzQ2NzZiOGUzNzFkNDRlZjlkODU4N2ZkY2QyYjNiOTg3Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO5pVQQUtW9fN05oSNir5rRT8wfI /YMdNCX+ns+NXSvv1y48LCHNxJ9jFNy+MZpiXLbHq1+MH3oDnyS3Wo/qPGR0MuS6 9rLULUhQwdbK5/VXrPJgoTOkihmXloUZyO0Noxvo5lNe8mTflKzpxkuFFjcgGKCv 8bZMwIUkbG0JyoXNNZ049UE6fNo9FPcdS8eA2lwiSb75/prKDbvbbEJHrmzH62eO gcXQEE9y1MRMHJYsZoGNw6YXlt+leG+zm2RtrtO0N5YO0Af8Nk6ApAkgtWcheVAs Q4yIGVKx2i8ddNQFMXW9dxIZgcOPoWiWQc4pTRNj9rG02ISAEuZncMaa+wIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFCoBNGdrjjcdRO+dhYf9zSs7mHyhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2ZlMzlj YS05YTIyLTRjMDktOTA2ZS1hZmRkMzA0Y2NlYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZmUzOWNh LTlhMjItNGMwOS05MDZlLWFmZGQzMDRjY2VhNS8xL0tnRTBaMnVPTngxRTc1MkZo XzNOS3p1WWZLRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQHvOGAMA0EAgACMAcDBQAqAE6AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjHSMA0GCSqGSIb3DQEBCwUAA4IBAQBk/7GvDP0Viv/6 IgubeqZO3bzVh+xlBjbK+xvGsMBXx1RHpcpuxY7oU4zGfecAX9HsdiZhNypqL9m1 hrGM7kxgFOlp/Tc4QazlqnKPjgU38JJWUnn/UNshDKoZLXD5URluR/5+MNoxAX5y ijKv9XLOKCK9z40b9c3W1GMknF55IwgiGTpCpmVBW6Q+PdjkjcN9DkfxmfefKUiA HQg46fpc43s/NPS2qJdCKf00feYoYtOn8w2rIcn7h1W1mWXEDKxXbjpaG3B1+42E t7ftddIxZ++WhZ+BTdRgmTQ3Y6KUkZd7kInrEC5c8XRE97zcn3i6kxb4msL4T9Uy uZ6q8JCK -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:08 2025 by rpki-client