This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer File: kPJzpjxR6vP55a57n6r9spMTQN8.cer (raw, json) Hash identifier: +PPKu9flyc5Ujtru/YpWlJZ1MJd8h9zdJ76ocV9ApLY= Subject key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB2CC6E96638665705F2A740F73DDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203339 AS: 212911 AS: 214360 IP: 84.38.128.0/24 IP: 185.220.116.0/22 IP: 2a0b:f6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2c:c6:e9:66:38:66:57:05:f2:a7:40:f7:3d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:65:ea:8d:4f:dc:15:de:0a:c9:ad:c9:0f: 47:9c:52:62:bc:47:34:b6:de:a8:df:1b:64:d8:ab: 54:4c:80:6e:69:71:ea:dc:ea:ac:77:99:21:a2:48: 4e:d7:8f:ab:57:ed:ae:dd:fe:40:e1:0c:a4:88:a3: 47:1c:66:72:59:9a:83:05:cf:c7:5c:76:ac:cd:3a: 84:eb:28:a1:ac:b3:43:74:33:6d:44:5b:4e:de:a4: 96:42:63:48:1a:a9:3d:1e:45:99:fd:72:ce:ab:70: 47:89:f7:23:9d:75:58:57:77:79:f7:51:6f:7d:e7: e6:68:f3:c4:04:16:2f:84:63:af:ce:10:aa:49:83: 9d:62:81:b3:6b:03:fe:be:2e:77:95:ca:79:29:75: 55:17:25:4a:0d:99:d3:0e:08:f0:1d:b2:db:86:7e: b1:95:82:b9:c8:e4:82:e9:f3:41:9c:2f:1d:12:c2: e5:90:18:76:3e:7d:d0:59:6f:48:80:10:de:d5:31: a9:1c:f3:73:ed:45:11:fa:27:b3:a7:ae:01:c5:e5: 50:48:c6:c6:12:9b:38:4a:4f:e2:19:f2:c3:ce:ca: b0:8e:72:03:5e:16:81:08:30:c3:96:79:90:50:75: 04:32:81:cd:0b:72:2d:a9:7a:62:1b:38:79:51:2d: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.128.0/24 185.220.116.0/22 IPv6: 2a0b:f6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203339 212911 214360 Signature Algorithm: sha256WithRSAEncryption b1:63:f1:79:13:cf:74:37:55:cf:53:04:8b:1e:9f:b8:4c:a3: 01:ae:92:be:74:64:87:8a:0e:6b:60:4f:a1:8d:35:52:3b:a7: 2c:16:0e:4d:a9:3a:fa:b6:af:6d:e6:29:d7:41:6c:4d:f6:e1: 2c:6b:c1:89:77:4e:8e:0b:5b:54:c4:d9:c2:3b:63:25:83:10: 9a:97:77:6d:05:d4:16:ce:8d:38:3a:9f:99:ef:d6:9f:19:bd: 78:2b:47:75:7b:41:4f:b1:df:e0:e9:7e:2f:db:20:68:bd:b3: e5:f7:a1:04:98:d8:c4:5a:32:12:f6:9a:f9:43:66:e0:71:f2: b0:e7:19:3a:ef:15:d0:f3:78:79:16:27:06:e2:78:98:f5:43: f8:b9:f3:83:4f:cf:b3:8f:20:f5:53:9a:e3:42:90:7a:3d:3b: e0:94:08:dd:f6:d3:ac:99:08:72:c5:8e:1b:f2:91:23:69:a1: 9a:3c:9e:ff:cf:9d:e6:cf:16:ae:a9:9f:99:cb:f9:6d:a3:46: ed:61:0b:80:e6:29:8e:3d:ec:9c:39:95:ee:d9:18:67:4e:5b: 6c:fb:93:a4:5a:31:db:4f:4e:c5:9c:99:61:ee:09:39:21:b0: 7f:3d:a6:59:83:fe:d9:cc:05:a5:35:61:05:1d:11:40:a3:ec: d4:5a:ec:ba -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt26yzG6WY4ZlcF8qdA9z3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGYyNzNhNjNjNTFlYWYzZjllNWFlN2I5ZmFhZmRiMjkzMTM0MGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Bl6o1P3BXeCsmtyQ9HnFJivEc0 tt6o3xtk2KtUTIBuaXHq3Oqsd5khokhO14+rV+2u3f5A4QykiKNHHGZyWZqDBc/H XHaszTqE6yihrLNDdDNtRFtO3qSWQmNIGqk9HkWZ/XLOq3BHifcjnXVYV3d591Fv fefmaPPEBBYvhGOvzhCqSYOdYoGzawP+vi53lcp5KXVVFyVKDZnTDgjwHbLbhn6x lYK5yOSC6fNBnC8dEsLlkBh2Pn3QWW9IgBDe1TGpHPNz7UUR+iezp64BxeVQSMbG Eps4Sk/iGfLDzsqwjnIDXhaBCDDDlnmQUHUEMoHNC3ItqXpiGzh5US22/wIDAQAB o4ICvzCCArswHQYDVR0OBBYEFJDyc6Y8Uerz+eWue5+q/bKTE0DfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2JjNjc2 Yi1jMGI2LTRmYmItOTMzZi01MDgyYzI4YjcxNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvYmM2NzZi LWMwYjYtNGZiYi05MzNmLTUwODJjMjhiNzE1Zi8xL2tQSnpwanhSNnZQNTVhNTdu NnI5c3BNVFFOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAVCaAAwQCudx0MA0EAgACMAcDBQMqC/bAMCQG CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwMaSwIDAz+vAgMDRVgwDQYJKoZIhvcNAQEL BQADggEBALFj8XkTz3Q3Vc9TBIsen7hMowGukr50ZIeKDmtgT6GNNVI7pywWDk2p Ovq2r23mKddBbE324SxrwYl3To4LW1TE2cI7YyWDEJqXd20F1BbOjTg6n5nv1p8Z vXgrR3V7QU+x3+Dpfi/bIGi9s+X3oQSY2MRaMhL2mvlDZuBx8rDnGTrvFdDzeHkW JwbieJj1Q/i584NPz7OPIPVTmuNCkHo9O+CUCN3206yZCHLFjhvykSNpoZo8nv/P nebPFq6pn5nL+W2jRu1hC4DmKY497Jw5le7ZGGdOW2z7k6RaMdtPTsWcmWHuCTkh sH89plmD/tnMBaU1YQUdEUCj7NRa7Lo= -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:02 2026 by rpki-client