This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer File: kGlKYihmrhWO0ofSUz1AuqvqbX0.cer (raw, json) Hash identifier: KE4JvE7Gannr8k9wdVPdylaUvTAXbRkUuL1lpnEwp4Y= Subject key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAEF5965CDE0BDB70ADFC513E5AEE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214589 IP: 195.189.36.0/22 IP: 2001:67c:ef0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ef:59:65:cd:e0:bd:b7:0a:df:c5:13:e5:ae:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90694a622866ae158ed287d2533d40baabea6d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:51:db:eb:5b:76:b2:ee:16:1a:4a:2a:d2: ec:e0:05:77:64:72:56:99:68:10:5e:31:cb:11:4b: 74:ca:a8:c7:5a:7f:c4:35:19:2a:be:53:9a:d1:ff: 86:ba:6c:1c:3c:14:13:cd:fc:6a:d9:46:c3:93:f3: 11:c5:bf:8b:a3:9b:c4:c0:17:ae:07:e0:3d:2a:fe: 0d:5a:fa:6c:eb:86:e6:13:91:04:07:0c:9c:02:8a: 2d:e6:d0:a7:76:5d:9d:51:71:8f:fe:1b:5d:74:23: d5:35:af:34:3a:6e:bd:fa:0a:3e:3b:a3:5b:ef:11: e1:4d:0f:0d:79:b6:41:10:1c:b0:ef:9b:34:eb:dd: a4:90:0a:48:05:48:59:18:ab:85:f1:6c:30:e3:af: c3:b6:ac:23:59:83:17:6c:4b:1f:05:15:b3:4a:75: 79:eb:93:92:9e:fe:33:b9:41:53:ce:d4:c4:e7:ce: 6a:c6:08:c5:ea:8b:72:11:ab:20:51:08:6d:d0:7e: eb:3e:21:b8:c6:ed:60:2c:d3:f9:6e:85:ec:7c:c0: df:4e:08:78:4f:7a:c1:34:53:18:31:a0:d0:41:c8: 36:b7:0c:50:e1:d4:04:41:c1:20:94:96:e8:87:b7: a6:a6:8f:b7:5f:ca:3f:ee:8e:94:57:eb:1a:14:a4: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.36.0/22 IPv6: 2001:67c:ef0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214589 Signature Algorithm: sha256WithRSAEncryption a4:fa:d7:1a:ea:d4:e9:8c:fd:12:83:24:bf:6f:7a:88:a3:b7: c0:99:53:44:d6:47:b3:4c:4f:b2:1c:29:d6:0d:a7:84:9d:b3: 3c:fd:75:4f:2b:03:64:88:1f:07:f6:dc:fc:88:f7:ba:d9:0f: d0:9b:26:b0:c5:e5:dd:0e:51:38:b2:8f:30:45:b5:1b:6d:db: ea:f4:9f:bf:6f:7f:1a:2a:12:67:56:70:78:09:da:cb:c0:a4: c8:e7:98:ff:90:9b:41:4e:28:d9:e5:9e:a5:8f:4d:98:7a:f9: 34:ea:60:cc:03:13:13:77:1a:22:36:ba:57:17:7d:36:1d:38: 1c:20:9f:b2:ec:cb:b8:6a:77:f9:b6:b3:02:ce:d3:13:04:24: 0f:01:a0:07:2f:46:49:fa:40:6c:86:c2:b6:9f:e7:84:e1:1e: 01:8e:8c:87:32:95:49:2f:21:c4:73:cf:4e:c4:dd:aa:69:df: 9d:7e:88:b4:e1:67:ac:47:c8:5d:26:1a:00:c0:e2:c1:4a:bc: 3e:4a:78:e3:fb:49:33:ea:e3:8e:fd:b0:e1:0b:c7:e1:e2:a7: 63:80:02:76:90:af:21:d2:bb:e6:72:ac:ac:40:b0:66:b6:b4: f5:fa:73:a6:8a:7e:51:a5:e9:2a:be:03:96:f6:a1:24:ed:5e: be:dc:29:35 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9yu9ZZc3gvbcK38UT5a7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDY5NGE2MjI4NjZhZTE1OGVkMjg3ZDI1MzNkNDBiYWFiZWE2ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TpR2+tbdrLuFhpKKtLs4AV3ZHJW mWgQXjHLEUt0yqjHWn/ENRkqvlOa0f+GumwcPBQTzfxq2UbDk/MRxb+Lo5vEwBeu B+A9Kv4NWvps64bmE5EEBwycAoot5tCndl2dUXGP/htddCPVNa80Om69+go+O6Nb 7xHhTQ8NebZBEByw75s0692kkApIBUhZGKuF8Www46/DtqwjWYMXbEsfBRWzSnV5 65OSnv4zuUFTztTE585qxgjF6otyEasgUQht0H7rPiG4xu1gLNP5boXsfMDfTgh4 T3rBNFMYMaDQQcg2twxQ4dQEQcEglJboh7empo+3X8o/7o6UV+saFKTmJwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFJBpSmIoZq4VjtKH0lM9QLqr6m19MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2I5ZTJm Ny0yMWRjLTQyYzAtOTRiMC0xM2MwYTYzM2U5ZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvYjllMmY3 LTIxZGMtNDJjMC05NGIwLTEzYzBhNjMzZTlmNC8xL2tHbEtZaWhtcmhXTzBvZlNV ejFBdXF2cWJYMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCw70kMA8EAgACMAkDBwAgAQZ8DvAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDA0Y9MA0GCSqGSIb3DQEBCwUAA4IBAQCk+tca6tTp jP0SgyS/b3qIo7fAmVNE1kezTE+yHCnWDaeEnbM8/XVPKwNkiB8H9tz8iPe62Q/Q myawxeXdDlE4so8wRbUbbdvq9J+/b38aKhJnVnB4CdrLwKTI55j/kJtBTijZ5Z6l j02Yevk06mDMAxMTdxoiNrpXF302HTgcIJ+y7Mu4anf5trMCztMTBCQPAaAHL0ZJ +kBshsK2n+eE4R4BjoyHMpVJLyHEc89OxN2qad+dfoi04WesR8hdJhoAwOLBSrw+ Snjj+0kz6uOO/bDhC8fh4qdjgAJ2kK8h0rvmcqysQLBmtrT1+nOmin5RpekqvgOW 9qEk7V6+3Ck1 -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:38 2026 by rpki-client