This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer File: KrkePe2CDHC4rOia6v_6vua_pVM.cer (raw, json) Hash identifier: 2sGwZx8fJ1XFEanEX8xXyaGW6R89PLEB4ZMLJBWWqmY= Subject key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE38A2816F131F0D2F7CE4A58B3686 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199130 AS: 199667 IP: 77.95.168.0/24 IP: 185.0.25.0/24 IP: 2001:7f8:f9::/48 IP: 2a13:de80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:38:a2:81:6f:13:1f:0d:2f:7c:e4:a5:8b:36:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:db:06:09:60:8d:43:c0:cf:ff:ec:fe:4a: ae:80:07:88:64:9a:5d:23:42:e0:91:a7:73:d6:1e: fe:e0:4a:1e:cc:67:11:18:72:dc:14:47:ef:49:67: 88:f2:6b:32:da:26:ad:f3:71:f2:20:91:b1:78:17: 07:16:67:4a:ff:6b:4b:6f:8d:15:68:fc:0d:0f:09: de:3f:38:33:5e:be:3a:39:0c:23:59:31:ad:e8:ba: 10:85:da:ed:7a:9a:bf:aa:ee:83:0d:c7:cb:4f:96: c2:9f:89:f4:38:67:93:49:ed:cf:14:70:53:cc:3f: af:50:f6:b2:96:c9:b9:cc:ba:b5:50:7f:88:16:d7: 93:13:06:8a:02:ba:b2:cc:0c:e2:7b:c5:a3:4e:da: 56:b2:c2:24:b5:91:ef:87:3b:e8:87:14:96:7a:ef: bf:b1:84:a5:d5:1a:d4:a0:2e:b3:b2:10:67:b6:20: 82:67:aa:2d:0c:3b:91:3b:8d:79:c5:8d:db:ac:2f: f5:e6:c5:03:7d:56:d4:7c:82:89:a7:e2:b8:13:ec: 97:a6:4d:b0:16:0c:0a:c6:53:6e:d4:07:26:9a:ed: 46:ca:70:d3:5d:05:72:12:a0:f7:71:bd:0e:e6:56: f5:bb:b0:34:f9:9d:c8:c3:cb:51:db:11:9a:03:99: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.168.0/24 185.0.25.0/24 IPv6: 2001:7f8:f9::/48 2a13:de80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199130 199667 Signature Algorithm: sha256WithRSAEncryption 86:48:8d:fc:25:e5:1d:63:9e:c8:22:dd:fd:be:5a:70:47:82: e3:29:de:2a:e6:4a:56:29:61:40:5a:10:45:e3:c7:0c:60:0b: e6:b6:4b:db:5a:aa:68:1f:50:1b:a8:2f:64:1e:fb:4d:f6:a0: 41:e0:64:7a:76:f8:f4:f7:9f:25:9e:fa:bc:e6:12:28:48:df: 3f:6b:28:63:d7:f7:bd:3a:6c:e6:d7:d3:8e:07:03:84:ae:09: 40:96:8f:13:52:6e:b9:df:ac:21:2b:f8:c7:41:4a:d4:ea:1f: d6:b3:cc:57:f1:45:e7:be:84:00:0b:57:29:7f:b1:de:10:e1: ac:89:e7:a2:ad:1c:83:a9:59:5d:13:77:4f:ba:76:6e:6f:5b: 95:13:92:ef:24:56:80:19:80:1b:0f:c2:39:4c:e5:b3:8d:60: 24:92:6b:cd:70:5c:9d:36:58:c6:dc:a1:31:72:75:69:66:59: 36:e8:f9:ce:cc:19:14:a6:66:aa:09:19:96:ec:6e:81:c5:46: 15:d6:26:31:51:3f:08:9e:02:2b:48:0a:92:41:23:0a:10:7a: 3d:ec:a2:9b:25:b1:54:b6:0b:ff:fe:b6:d5:2b:0a:0b:9b:f7: 12:0f:bc:7e:bd:2f:0f:33:56:da:a8:3c:d2:de:82:55:2f:bd: 84:3c:6f:9b -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt87jiigW8THw0vfOSlizaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWI5MWUzZGVkODIwYzcwYjhhY2U4OWFlYWZmZmFiZWU2YmZhNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcPbBglgjUPAz//s/kqugAeIZJpd I0Lgkadz1h7+4EoezGcRGHLcFEfvSWeI8msy2iat83HyIJGxeBcHFmdK/2tLb40V aPwNDwnePzgzXr46OQwjWTGt6LoQhdrtepq/qu6DDcfLT5bCn4n0OGeTSe3PFHBT zD+vUPaylsm5zLq1UH+IFteTEwaKArqyzAzie8WjTtpWssIktZHvhzvohxSWeu+/ sYSl1RrUoC6zshBntiCCZ6otDDuRO415xY3brC/15sUDfVbUfIKJp+K4E+yXpk2w FgwKxlNu1Acmmu1GynDTXQVyEqD3cb0O5lb1u7A0+Z3Iw8tR2xGaA5nxCQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFCq5Hj3tggxwuKzomur/+r7mv6VTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzE2ZDg0 Yi0wOTYxLTRkMWUtODVjYy02MWRlMjFmNTE0MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMTZkODRi LTA5NjEtNGQxZS04NWNjLTYxZGUyMWY1MTQzNC8xL0tya2VQZTJDREhDNHJPaWE2 dl82dnVhX3BWTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQATV+oAwQAuQAZMBYEAgACMBADBwAgAQf4APkD BQMqE96AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMJ2gIDAwvzMA0GCSqGSIb3 DQEBCwUAA4IBAQCGSI38JeUdY57IIt39vlpwR4LjKd4q5kpWKWFAWhBF48cMYAvm tkvbWqpoH1AbqC9kHvtN9qBB4GR6dvj0958lnvq85hIoSN8/ayhj1/e9Omzm19OO BwOErglAlo8TUm6536whK/jHQUrU6h/Ws8xX8UXnvoQAC1cpf7HeEOGsieeirRyD qVldE3dPunZub1uVE5LvJFaAGYAbD8I5TOWzjWAkkmvNcFydNljG3KExcnVpZlk2 6PnOzBkUpmaqCRmW7G6BxUYV1iYxUT8IngIrSAqSQSMKEHo97KKbJbFUtgv//rbV KwoLm/cSD7x+vS8PM1baqDzS3oJVL72EPG+b -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:59 2026 by rpki-client