This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer (raw, json) Hash identifier: +Hs1hshBtJ0mvtjPdyxWPIokGfeIFrQfFjZTwDjTBjk= Subject key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E384C8287411A57D296D587D202FDB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42359 IP: 194.0.214.0/24 IP: 195.182.62.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4c:82:87:41:1a:57:d2:96:d5:87:d2:02:fd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:7a:a6:06:34:90:5e:15:73:7a:20:65:de: 86:45:00:bc:1e:a3:f0:24:4a:83:90:8e:a5:54:20: 40:42:91:eb:55:98:f5:5e:77:b9:de:f8:04:8c:fc: 8f:3a:7b:50:75:d9:82:68:ae:2b:29:5f:7c:05:5f: b4:ee:66:90:01:fb:ed:71:80:b2:2a:18:dc:98:3f: 7a:c2:f7:e2:f8:c0:69:0e:d3:2c:31:30:a8:78:91: f7:93:96:1d:8d:b9:16:ce:1b:6d:16:4a:56:6e:c0: 72:10:e8:ab:53:b9:86:fa:62:33:b6:c4:9c:a9:86: c4:05:0c:22:0e:09:dc:ab:56:c5:d4:d5:e9:c7:d4: 85:38:60:a5:41:c6:16:bc:05:12:2c:fd:17:73:f2: 7e:d0:5a:f5:2c:b0:1a:0e:d6:d9:49:60:51:7b:4d: f8:dd:bc:c0:84:40:61:9d:3b:74:f0:67:7a:c1:92: e9:7f:c3:28:18:78:d4:24:40:23:69:79:44:75:73: 35:5f:06:f5:ae:1f:97:b6:bb:f1:6c:f1:94:44:69: 22:41:3e:6a:c0:b6:df:bf:c8:06:d4:8a:85:3d:ab: 94:7b:6c:f9:54:81:6d:c4:ec:0b:69:bc:64:28:a1: a8:97:27:e5:4d:7e:b4:1b:42:1f:3a:fa:d3:56:34: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.214.0/24 195.182.62.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42359 Signature Algorithm: sha256WithRSAEncryption 35:ba:6a:82:e1:2f:e0:e2:60:4f:ea:4c:7c:49:32:9f:6e:62: 1b:27:b5:3e:a5:47:66:17:fd:50:c3:a0:54:d7:7d:4b:b4:90: 9d:20:c2:fd:91:de:45:e5:35:cb:59:87:d3:93:e2:4b:8e:53: e2:ba:6d:4d:88:f2:b9:4a:62:b7:20:d9:c9:d4:fa:79:27:bd: 98:31:7c:87:c8:cb:6d:56:54:df:89:e1:18:1f:bd:58:0e:b3: 4d:76:63:cb:39:45:8d:cd:1d:7d:4b:3a:de:0c:c1:71:68:92: e1:98:56:00:cf:7f:4e:10:f9:78:80:16:de:6d:af:40:1f:0f: fc:c5:98:fc:0a:3b:fa:dc:c3:3a:a7:d6:e1:64:f6:45:0a:d3: 6d:8f:d4:c9:a3:3c:ad:e7:43:db:53:e0:96:a5:53:04:9e:71: 05:f3:d6:11:41:bc:18:1b:c6:16:bd:70:64:69:50:2b:64:dd: 28:9f:d8:ac:4e:18:b6:7a:be:2c:51:5f:0e:b7:41:e0:dc:43: 62:dc:8f:03:ac:01:3b:e0:74:5d:93:f1:aa:6f:41:cb:8e:a8: 3a:c3:6f:ee:95:dd:81:e0:43:8c:17:03:ca:cd:21:d1:58:bb: 7b:11:08:91:52:a6:b7:e2:d1:2e:ae:02:fd:bc:69:90:d8:a9: 31:5f:22:21 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+OEyCh0EaV9KW1YfSAv25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTM1YmU4ZWYwZGNlOWQxZTY3MDcxYWI3Y2IwN2NmNTBkNTNmNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p16pgY0kF4Vc3ogZd6GRQC8HqPw JEqDkI6lVCBAQpHrVZj1Xne53vgEjPyPOntQddmCaK4rKV98BV+07maQAfvtcYCy KhjcmD96wvfi+MBpDtMsMTCoeJH3k5YdjbkWzhttFkpWbsByEOirU7mG+mIztsSc qYbEBQwiDgncq1bF1NXpx9SFOGClQcYWvAUSLP0Xc/J+0Fr1LLAaDtbZSWBRe034 3bzAhEBhnTt08Gd6wZLpf8MoGHjUJEAjaXlEdXM1Xwb1rh+XtrvxbPGURGkiQT5q wLbfv8gG1IqFPauUe2z5VIFtxOwLabxkKKGolyflTX60G0IfOvrTVjQqQQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFJE1vo7w3OnR5nBxq3ywfPUNU/YXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2QyMWUw Mi01NGI3LTQ5ZGUtYjE1Zi03MjkyOTgyMTJmNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZDIxZTAy LTU0YjctNDlkZS1iMTVmLTcyOTI5ODIxMmY1NC8xL2tUVy1qdkRjNmRIbWNIR3Jm TEI4OVExVDloYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwgDWAwQAw7Y+MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCldzANBgkqhkiG9w0BAQsFAAOCAQEANbpqguEv4OJgT+pMfEkyn25i Gye1PqVHZhf9UMOgVNd9S7SQnSDC/ZHeReU1y1mH05PiS45T4rptTYjyuUpityDZ ydT6eSe9mDF8h8jLbVZU34nhGB+9WA6zTXZjyzlFjc0dfUs63gzBcWiS4ZhWAM9/ ThD5eIAW3m2vQB8P/MWY/Ao7+tzDOqfW4WT2RQrTbY/UyaM8redD21PglqVTBJ5x BfPWEUG8GBvGFr1wZGlQK2TdKJ/YrE4Ytnq+LFFfDrdB4NxDYtyPA6wBO+B0XZPx qm9By46oOsNv7pXdgeBDjBcDys0h0Vi7exEIkVKmt+LRLq4C/bxpkNipMV8iIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:04 2026 by rpki-client