This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer File: kIp-pxKAHkyP64Wz8HjQW6EBquE.cer (raw, json) Hash identifier: ykd7Aa4dm97NOkf3WXCgZbWcZe16G8jMi0PLjipaRA8= Subject key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B3A00CE16B6B513B30675811B2B42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41820 IP: 31.41.88.0/21 IP: 91.195.172.0/23 IP: 91.220.226.0/24 IP: 176.118.40.0/21 IP: 193.34.172.0/23 IP: 194.39.224.0/22 IP: 2a0f:6680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3a:00:ce:16:b6:b5:13:b3:06:75:81:1b:2b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:5f:80:43:34:67:f2:39:57:07:f9:b3:6b: d1:41:9b:b1:83:72:22:20:46:3d:81:e9:a4:64:55: fe:b0:5c:e8:03:bc:cd:02:b2:0b:17:c5:fc:ea:7f: de:a1:e6:15:5e:54:17:de:e6:5e:47:8c:b7:be:09: d9:7b:0a:a7:d2:2b:48:26:66:de:a9:0a:fc:94:97: 72:87:85:0f:68:86:83:0d:04:56:b1:59:72:59:15: 94:f2:9d:93:af:90:67:04:5c:0d:40:66:87:61:fe: 2f:00:eb:37:35:89:7d:3c:f7:9e:fb:1a:22:a0:3f: 09:db:5b:62:5a:23:3f:69:95:dc:0b:d9:d3:bb:5d: 5a:d2:95:d4:60:35:a3:aa:4b:2d:25:fa:92:f3:4f: 0e:48:a3:6d:05:eb:2c:92:8f:6e:99:33:5c:99:da: 81:de:8f:22:5f:2e:d8:f5:4a:6a:11:26:31:ec:ab: 6f:a6:e0:ea:7e:17:80:fd:a4:f8:a2:4d:19:9f:04: e8:ad:56:e7:4f:ed:01:e9:81:06:1b:e7:f9:1b:1a: 29:73:53:46:2b:36:ba:53:e5:62:c8:7c:80:02:70: 0e:f6:1f:d9:78:f3:ce:26:9c:70:c0:bd:40:62:d3: da:1e:d8:96:03:7e:2b:e0:e8:19:93:07:7b:d8:8d: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.88.0/21 91.195.172.0/23 91.220.226.0/24 176.118.40.0/21 193.34.172.0/23 194.39.224.0/22 IPv6: 2a0f:6680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41820 Signature Algorithm: sha256WithRSAEncryption 3d:66:74:91:2c:68:43:55:fa:64:4e:6d:cb:c7:63:28:3e:70: bc:e2:1b:b8:72:55:9d:ef:36:90:78:bb:13:83:33:41:78:66: 14:74:0f:0f:f7:13:5d:77:86:68:d5:eb:46:71:d4:4a:bc:cf: d0:61:ba:c4:85:e7:64:73:54:40:09:a7:2a:e2:83:dc:4c:d8: fe:5c:0b:a4:ca:92:c0:62:2a:6c:83:e7:53:b4:36:43:ca:d6: 70:81:20:e9:fb:c1:73:7a:3d:ae:36:e5:af:6b:1c:14:17:78: e3:80:6f:0f:9a:f2:d0:ed:61:43:aa:bc:a3:65:b0:e5:1f:8e: 56:8a:a8:29:55:c4:5f:a8:9d:f7:c1:47:3f:92:ad:5c:64:a4: 12:c4:e0:97:e8:00:a9:cf:48:2d:7c:d4:32:6e:de:8f:12:be: 5c:3c:8a:d7:c9:30:48:f0:75:11:e3:88:74:b5:1e:3a:af:2b: a2:d6:71:a2:53:84:fb:ec:89:97:e8:d3:90:5e:c0:cd:83:74: 86:cd:95:11:e0:72:09:96:78:ea:a2:89:1b:85:2a:97:a9:61: b6:2c:02:59:16:56:c6:93:8b:f7:5a:e2:97:64:68:2b:f8:23: fb:ca:77:d2:43:b4:0a:00:8d:c8:c6:c4:ea:41:ba:a2:31:5e: 39:a8:ce:60 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt9WzoAzha2tROzBnWBGytCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDhhN2VhNzEyODAxZTRjOGZlYjg1YjNmMDc4ZDA1YmExMDFhYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKpfgEM0Z/I5Vwf5s2vRQZuxg3Ii IEY9gemkZFX+sFzoA7zNArILF8X86n/eoeYVXlQX3uZeR4y3vgnZewqn0itIJmbe qQr8lJdyh4UPaIaDDQRWsVlyWRWU8p2Tr5BnBFwNQGaHYf4vAOs3NYl9PPee+xoi oD8J21tiWiM/aZXcC9nTu11a0pXUYDWjqkstJfqS808OSKNtBessko9umTNcmdqB 3o8iXy7Y9UpqESYx7KtvpuDqfheA/aT4ok0ZnwTorVbnT+0B6YEGG+f5Gxopc1NG Kza6U+ViyHyAAnAO9h/ZePPOJpxwwL1AYtPaHtiWA34r4OgZkwd72I0BjwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFJCKfqcSgB5Mj+uFs/B40FuhAarhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4Lzg2MDVl Ni1kOWY0LTRjMzItYjRkMS0xYTEyY2MwYjA0MDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvODYwNWU2 LWQ5ZjQtNGMzMi1iNGQxLTFhMTJjYzBiMDQwNi8xL2tJcC1weEtBSGt5UDY0V3o4 SGpRVzZFQnF1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDHylYAwQBW8OsAwQAW9ziAwQDsHYoAwQBwSKs AwQCwifgMA0EAgACMAcDBQMqD2aAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCj XDANBgkqhkiG9w0BAQsFAAOCAQEAPWZ0kSxoQ1X6ZE5ty8djKD5wvOIbuHJVne82 kHi7E4MzQXhmFHQPD/cTXXeGaNXrRnHUSrzP0GG6xIXnZHNUQAmnKuKD3EzY/lwL pMqSwGIqbIPnU7Q2Q8rWcIEg6fvBc3o9rjblr2scFBd444BvD5ry0O1hQ6q8o2Ww 5R+OVoqoKVXEX6id98FHP5KtXGSkEsTgl+gAqc9ILXzUMm7ejxK+XDyK18kwSPB1 EeOIdLUeOq8rotZxolOE++yJl+jTkF7AzYN0hs2VEeByCZZ46qKJG4Uql6lhtiwC WRZWxpOL91ril2RoK/gj+8p30kO0CgCNyMbE6kG6ojFeOajOYA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:32 2026 by rpki-client