This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer File: KkRyM2ydAqSIzdd1NNZfsUZewJo.cer (raw, json) Hash identifier: ATwzYWHZlHUx0a/Q06ofTeEK3AHiOXS1LP4PfUjq8S8= Subject key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834DED6507288B839CC14184F360B0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50837 IP: 31.171.240.0/20 IP: 45.88.24.0/22 IP: 91.92.71.0/24 IP: 93.123.14.0/23 IP: 93.123.82.0/23 IP: 94.156.200.0/22 IP: 178.22.64.0/21 IP: 185.12.4.0/22 IP: 2a01:9980::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:de:d6:50:72:88:b8:39:cc:14:18:4f:36:0b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:c5:52:d9:26:b3:14:6b:6f:be:5f:99:83: 52:d5:a0:11:ce:8b:dc:ab:33:ce:60:25:51:6e:dc: 10:45:29:34:e4:46:8c:88:07:fb:0b:52:43:60:26: f1:e4:e2:58:1e:9f:13:6b:80:3b:1a:1f:f5:0b:78: 3d:a6:dc:14:ab:7b:6a:30:32:04:ce:cb:1f:91:d1: 20:5f:e9:92:f2:9f:45:04:e2:a1:6f:6c:37:22:61: 63:ba:f5:76:c6:60:b5:e8:82:c1:95:1b:51:bd:8c: 7d:32:e2:18:2d:f2:97:66:07:f8:4c:3c:36:38:dd: d0:f7:f3:5f:58:8a:43:3d:b6:35:eb:1e:83:76:59: d3:3b:b1:6c:6b:92:d1:c7:b7:a7:dc:40:48:0b:eb: c9:7d:45:11:4b:42:bb:8e:06:f8:aa:30:af:3f:f2: 40:12:1a:ab:ee:47:fe:53:dc:ab:1a:7f:14:73:6b: 3e:94:13:4b:a0:9b:04:1d:a5:3a:00:31:db:79:69: 46:86:9d:36:ee:58:58:31:7a:e2:31:bb:ea:4d:75: 8e:91:91:cd:39:24:eb:dd:10:c7:67:14:33:a9:c7: c5:f4:b9:a0:7b:08:31:82:8a:d1:20:3a:1d:13:90: 6b:3c:af:13:13:cd:7b:83:5a:f0:ba:72:a2:01:45: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.240.0/20 45.88.24.0/22 91.92.71.0/24 93.123.14.0/23 93.123.82.0/23 94.156.200.0/22 178.22.64.0/21 185.12.4.0/22 IPv6: 2a01:9980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50837 Signature Algorithm: sha256WithRSAEncryption 3a:4c:fc:9a:02:b2:de:90:75:e8:8d:42:bf:d2:13:b0:d6:49: e8:aa:f1:70:d2:8a:18:92:c4:fc:59:3a:56:97:7c:5b:4c:03: 96:eb:c4:88:90:e6:ac:08:6a:0a:88:ce:ff:1e:7b:2c:5a:70: 17:13:7d:0a:7a:41:3c:e8:c5:d1:19:94:d4:4a:f5:b3:d0:d5: 36:ef:c3:70:0c:16:51:21:8d:61:82:05:f1:a2:65:69:bd:8f: 7a:e3:65:c3:43:de:67:8c:db:83:84:36:87:dc:71:ee:b9:8b: 16:ac:74:52:e8:8a:01:a4:82:ea:ff:92:4d:1c:53:96:73:fd: 63:60:53:04:e9:bc:e2:e0:a9:0b:28:3a:cd:97:b3:8c:6a:10: 96:d4:32:b8:b5:b3:48:47:ed:e6:2b:b8:cd:4b:10:49:6b:48: d3:c9:ff:41:9d:78:40:e2:0f:e6:16:b9:02:c8:20:fc:b0:61: bb:52:36:ed:b5:22:9a:0e:ff:12:f4:e0:c4:0e:27:d5:f3:25: c5:a9:09:b5:27:82:48:8d:17:3f:09:61:5b:c6:29:b5:f5:79: b3:b6:40:95:84:d3:ce:d4:cb:e5:b1:9f:3c:af:af:ba:8f:3d: 52:8a:e2:40:10:67:23:6b:8a:8a:b1:bd:41:2e:af:ef:90:94: e1:94:af:af -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt4NN7WUHKIuDnMFBhPNgsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTQ0NzIzMzZjOWQwMmE0ODhjZGQ3NzUzNGQ2NWZiMTQ2NWVjMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE3FUtkmsxRrb75fmYNS1aARzovc qzPOYCVRbtwQRSk05EaMiAf7C1JDYCbx5OJYHp8Ta4A7Gh/1C3g9ptwUq3tqMDIE zssfkdEgX+mS8p9FBOKhb2w3ImFjuvV2xmC16ILBlRtRvYx9MuIYLfKXZgf4TDw2 ON3Q9/NfWIpDPbY16x6DdlnTO7Fsa5LRx7en3EBIC+vJfUURS0K7jgb4qjCvP/JA Ehqr7kf+U9yrGn8Uc2s+lBNLoJsEHaU6ADHbeWlGhp027lhYMXriMbvqTXWOkZHN OSTr3RDHZxQzqcfF9LmgewgxgorRIDodE5BrPK8TE817g1rwunKiAUWaQwIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFCpEcjNsnQKkiM3XdTTWX7FGXsCaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzAxZGI4 Mi00MTcyLTQ0MDUtYWI1NS0wMDg2ZDAyMzg1ZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMDFkYjgy LTQxNzItNDQwNS1hYjU1LTAwODZkMDIzODVkNi8xL0trUnlNMnlkQXFTSXpkZDFO Tlpmc1VaZXdKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQEH6vwAwQCLVgYAwQAW1xHAwQBXXsOAwQBXXtS AwQCXpzIAwQDshZAAwQCuQwEMA0EAgACMAcDBQAqAZmAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwDGlTANBgkqhkiG9w0BAQsFAAOCAQEAOkz8mgKy3pB16I1Cv9IT sNZJ6KrxcNKKGJLE/Fk6Vpd8W0wDluvEiJDmrAhqCojO/x57LFpwFxN9CnpBPOjF 0RmU1Er1s9DVNu/DcAwWUSGNYYIF8aJlab2PeuNlw0PeZ4zbg4Q2h9xx7rmLFqx0 UuiKAaSC6v+STRxTlnP9Y2BTBOm84uCpCyg6zZezjGoQltQyuLWzSEft5iu4zUsQ SWtI08n/QZ14QOIP5ha5Asgg/LBhu1I27bUimg7/EvTgxA4n1fMlxakJtSeCSI0X PwlhW8YptfV5s7ZAlYTTztTL5bGfPK+vuo89UoriQBBnI2uKirG9QS6v75CU4ZSv rw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:58 2026 by rpki-client