This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer File: kBZCwNRvjU5MI0wzr771pIOcaiI.cer (raw, json) Hash identifier: IsdsUbmvX68wOrp2yMdQVwM6KX9lSVnm2C2vHZcc19g= Subject key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB79DD954A732C114CA5FC6D9F2E51EDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 13 Jan 2026 13:48:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50208 IP: 109.71.0.0/21 IP: 185.30.56.0/22 IP: 2a00:52c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:9d:d9:54:a7:32:c1:14:ca:5f:c6:d9:f2:e5:1e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 13 13:48:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:c7:cb:38:d6:72:e9:05:8b:09:41:3f:d0: fc:11:12:6c:3e:cb:d6:24:af:fc:93:e5:55:8a:13: 54:e9:ed:54:62:29:d5:22:1c:e6:85:94:d7:7d:35: dc:69:b5:85:99:bd:38:1a:8a:68:98:f3:25:da:4e: e3:81:45:53:c9:15:b2:b2:c4:8b:b2:39:26:2a:0a: b6:9d:eb:34:fe:ba:c5:c9:d0:eb:7f:39:d1:eb:90: aa:16:81:bf:96:e0:6f:1c:de:8f:9d:bb:57:36:4b: 73:35:8a:79:ef:50:72:dc:d6:88:75:b8:18:f8:d0: 85:86:7f:f8:2b:78:0a:73:17:12:39:99:ed:5b:32: eb:64:66:9b:f0:1d:d9:34:8f:94:65:c5:18:72:9b: 14:0e:1e:07:b1:e5:6d:07:a9:60:50:9f:6b:3d:8d: 96:41:d2:99:d2:b3:42:d1:13:dc:c2:42:d0:9f:71: f4:ae:b2:03:24:c6:69:1a:66:d9:db:39:f4:8d:90: bf:b9:37:39:ae:bd:fd:3d:e9:39:50:36:87:3c:e8: a9:ed:55:64:ed:59:7f:ad:33:c3:f6:b6:f2:f0:47: 22:c0:85:9c:3c:ec:8a:73:27:d1:3e:6c:06:2b:ef: d7:20:b2:66:f9:d6:65:2a:a2:20:48:ed:81:5a:80: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.0.0/21 185.30.56.0/22 IPv6: 2a00:52c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50208 Signature Algorithm: sha256WithRSAEncryption 5a:10:b3:d2:19:08:06:7d:ad:9f:b2:a2:ee:7b:b6:7c:29:40: ad:1e:ad:14:b9:cf:38:34:ae:d5:b4:79:4a:f4:69:64:22:97: f1:c2:f4:28:ed:e3:a0:16:cf:90:37:1a:e0:fa:be:78:e3:03: e8:7d:e1:f8:ca:32:73:15:06:a0:e6:25:59:6b:24:9d:77:e6: 60:d5:ec:60:2e:1a:ce:f8:e3:32:6c:28:72:32:ca:fb:05:11: 79:03:32:a5:fb:ec:b1:b2:1e:1b:b0:fe:2b:61:93:ed:0d:b1: bd:e3:5d:45:a1:3d:e9:c4:57:28:f7:87:ab:0c:4a:34:a9:03: 64:27:46:05:09:ba:7c:d1:84:6c:85:aa:8c:4a:ea:f4:2d:16: 0e:4d:0d:1d:df:e4:32:ce:54:d9:4e:81:f3:fa:b4:a5:6d:10: 01:7e:a0:82:02:4d:53:e9:24:ff:c3:95:94:7e:f2:3c:d6:f6: 33:ab:76:98:53:89:d2:e2:2e:1a:14:09:6a:99:50:4c:eb:32: 31:a5:6c:f0:dc:ec:46:ae:9a:81:ad:43:d2:04:73:cc:79:65: 47:cd:98:80:e0:b2:d7:2c:67:42:6a:50:af:8f:27:c5:01:5e: 53:20:3d:19:87:c7:be:f0:ac:e1:9b:c9:1c:b4:e1:f6:c4:17: 53:ba:d6:b2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZu3ndlUpzLBFMpfxtny5R7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEzMTM0ODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDE2NDJjMGQ0NmY4ZDRlNGMyMzRjMzNhZmJlZjVhNDgzOWM2YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJvHyzjWcukFiwlBP9D8ERJsPsvW JK/8k+VVihNU6e1UYinVIhzmhZTXfTXcabWFmb04GopomPMl2k7jgUVTyRWyssSL sjkmKgq2nes0/rrFydDrfznR65CqFoG/luBvHN6PnbtXNktzNYp571By3NaIdbgY +NCFhn/4K3gKcxcSOZntWzLrZGab8B3ZNI+UZcUYcpsUDh4HseVtB6lgUJ9rPY2W QdKZ0rNC0RPcwkLQn3H0rrIDJMZpGmbZ2zn0jZC/uTc5rr39Pek5UDaHPOip7VVk 7Vl/rTPD9rby8EciwIWcPOyKcyfRPmwGK+/XILJm+dZlKqIgSO2BWoAJfwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJAWQsDUb41OTCNMM6++9aSDnGoiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2YxNmI1 MS01YTIyLTRkYjQtYjg5MC00MzEyNWJmMDk2YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZjE2YjUx LTVhMjItNGRiNC1iODkwLTQzMTI1YmYwOTZiMS8xL2tCWkN3TlJ2alU1TUkwd3py NzcxcElPY2FpSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDbUcAAwQCuR44MA0EAgACMAcDBQAqAFLAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEIDANBgkqhkiG9w0BAQsFAAOCAQEAWhCz 0hkIBn2tn7Ki7nu2fClArR6tFLnPODSu1bR5SvRpZCKX8cL0KO3joBbPkDca4Pq+ eOMD6H3h+MoycxUGoOYlWWsknXfmYNXsYC4azvjjMmwocjLK+wUReQMypfvssbIe G7D+K2GT7Q2xveNdRaE96cRXKPeHqwxKNKkDZCdGBQm6fNGEbIWqjErq9C0WDk0N Hd/kMs5U2U6B8/q0pW0QAX6gggJNU+kk/8OVlH7yPNb2M6t2mFOJ0uIuGhQJaplQ TOsyMaVs8NzsRq6aga1D0gRzzHllR82YgOCy1yxnQmpQr48nxQFeUyA9GYfHvvCs 4ZvJHLTh9sQXU7rWsg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:28 2026 by rpki-client