This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer File: kJrEshegjDSPstyft0IuHekY9Rc.cer (raw, json) Hash identifier: ikmOS/NCVp4UKfAXC8noc/8vpFwm2Fa0lSAlnjzqkZo= Subject key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3824F33A130224B4F19B030851AA18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.134.240.0/22 IP: 2a06:ee40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:24:f3:3a:13:02:24:b4:f1:9b:03:08:51:aa:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:81:2e:ea:6a:8f:a3:f7:bd:dc:74:35:f7: ad:44:90:4c:06:fa:28:16:77:4b:36:26:fb:eb:75: 33:0c:ef:fa:3a:15:44:86:66:d6:0f:9c:c1:07:97: 58:49:c2:e5:ce:4c:18:37:5f:30:c7:3c:72:28:63: da:6a:dd:fe:f3:db:3f:8f:18:1e:40:4f:d5:50:9f: 18:71:4d:0c:ce:a9:d8:8d:20:dc:77:0b:aa:36:2e: ce:af:7b:59:ad:96:2c:c1:25:fe:37:1c:04:c0:bb: 6e:83:de:ca:59:e0:78:d0:80:7e:82:ca:bb:66:0b: 8e:78:a6:aa:e2:8c:45:71:71:1a:24:32:bf:1e:ab: e5:49:d6:27:58:6f:86:08:32:61:a2:ad:0a:0a:63: ec:32:db:68:55:7d:6b:fe:9b:47:2f:82:5d:6b:27: d9:a3:bd:75:db:de:c5:06:c5:d0:26:5a:f3:8c:9d: 4a:25:28:b2:14:f1:38:38:3c:57:4c:de:8c:69:e7: 70:08:43:ab:ba:d0:a3:c3:d9:14:a3:29:06:fa:9b: d2:da:56:5a:da:3c:cb:1f:48:4a:cd:ed:26:97:df: bf:a9:7d:5d:bd:11:fc:79:63:5f:27:c5:73:4d:b5: f6:0d:ce:fe:d2:1c:5a:3c:9e:81:a7:0d:80:24:ab: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.240.0/22 IPv6: 2a06:ee40::/29 Signature Algorithm: sha256WithRSAEncryption 27:46:04:c2:ff:21:62:4c:ab:f4:56:4a:73:67:85:a5:df:1e: e1:aa:c7:2a:37:9a:16:da:77:dd:bf:bf:a8:c3:31:15:17:7a: 99:ca:5e:b3:29:24:5e:28:01:0a:db:9d:17:b4:d3:ea:35:ba: a1:6e:5a:3d:9c:ea:be:92:c8:b3:ab:a5:a8:c2:8b:10:ec:83: 04:4d:83:45:19:20:26:e7:6a:ca:3d:60:57:3e:8c:e5:7c:43: 48:36:d9:06:77:46:b7:d9:50:52:77:6b:ba:a1:fa:b5:b0:6c: 4f:ab:2d:48:54:41:4d:22:14:74:0a:0d:2a:eb:4a:7b:41:ed: 16:a0:fc:24:20:bb:4a:8a:88:ad:ad:50:b6:e8:f3:c6:41:3f: 2d:7a:b0:e5:7b:dd:c4:43:0f:41:24:bd:92:aa:89:0e:cc:15: 0a:91:74:8b:a4:1e:67:5d:85:9f:88:aa:48:f8:b9:e2:1e:38: 88:ce:95:91:dc:2a:b9:c6:36:cc:44:38:f8:27:92:2c:66:75: 88:4f:ca:ad:98:c9:b0:6b:0a:50:fe:46:83:f8:5d:6a:06:9a: c1:9c:68:64:a9:cb:d4:a9:37:ac:37:5f:6d:4b:a5:48:d5:1d: c5:94:d6:08:b8:17:09:10:5c:0a:bb:82:44:c5:e2:ea:1a:d0: 9b:50:e1:39 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OCTzOhMCJLTxmwMIUaoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDlhYzRiMjE3YTA4YzM0OGZiMmRjOWZiNzQyMmUxZGU5MThmNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPyBLupqj6P3vdx0NfetRJBMBvoo FndLNib763UzDO/6OhVEhmbWD5zBB5dYScLlzkwYN18wxzxyKGPaat3+89s/jxge QE/VUJ8YcU0MzqnYjSDcdwuqNi7Or3tZrZYswSX+NxwEwLtug97KWeB40IB+gsq7 ZguOeKaq4oxFcXEaJDK/HqvlSdYnWG+GCDJhoq0KCmPsMttoVX1r/ptHL4JdayfZ o711297FBsXQJlrzjJ1KJSiyFPE4ODxXTN6MaedwCEOrutCjw9kUoykG+pvS2lZa 2jzLH0hKze0ml9+/qX1dvRH8eWNfJ8VzTbX2Dc7+0hxaPJ6Bpw2AJKsNSQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzE3NDNk Zi0wNDYyLTRjYWMtODI1MC1kZWRjNTJhMmVkOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMTc0M2Rm LTA0NjItNGNhYy04MjUwLWRlZGM1MmEyZWQ4Zi8xL2tKckVzaGVnakRTUHN0eWZ0 MEl1SGVrWTlSYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYbwMA0EAgACMAcDBQMqBu5AMA0GCSqGSIb3 DQEBCwUAA4IBAQAnRgTC/yFiTKv0VkpzZ4Wl3x7hqscqN5oW2nfdv7+owzEVF3qZ yl6zKSReKAEK250XtNPqNbqhblo9nOq+ksizq6WowosQ7IMETYNFGSAm52rKPWBX PozlfENINtkGd0a32VBSd2u6ofq1sGxPqy1IVEFNIhR0Cg0q60p7Qe0WoPwkILtK ioitrVC26PPGQT8terDle93EQw9BJL2SqokOzBUKkXSLpB5nXYWfiKpI+LniHjiI zpWR3Cq5xjbMRDj4J5IsZnWIT8qtmMmwawpQ/kaD+F1qBprBnGhkqcvUqTesN19t S6VI1R3FlNYIuBcJEFwKu4JExeLqGtCbUOE5 -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:14 2026 by rpki-client