This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer File: kTgbyWneatw9HdwOuJve6s6YBc0.cer (raw, json) Hash identifier: F/Q3mVYSOaMhF9+AeQ+/s8uO1ulsZtcRgG2U5aKeQ3Y= Subject key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77589863A26DA8538A7CC6128D5E925F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28819 AS: 57551 IP: 82.112.168.0/21 IP: 185.143.76.0/22 IP: 2a03:3c80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:98:63:a2:6d:a8:53:8a:7c:c6:12:8d:5e:92:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:10:6a:d0:67:ae:90:2d:e8:90:25:9e:29: 6b:f5:8c:15:63:46:6c:fa:6d:6b:c7:d2:a2:88:cf: 68:93:a2:54:9b:7a:21:be:0a:3b:db:65:89:9c:64: d7:c6:e7:9e:15:54:dc:1f:f6:97:6a:2e:d2:18:42: c7:6e:0f:86:9a:52:99:51:ce:46:5b:3a:59:8b:71: 23:3a:b8:55:cf:28:27:d0:62:1b:6f:a5:19:e9:a1: 88:0a:23:af:93:9a:86:12:39:33:b5:d4:c1:e5:78: 04:73:27:dd:91:f3:84:6d:f9:60:86:f6:3f:51:45: db:e1:17:3b:1c:21:04:68:dc:a9:03:58:1a:3d:1b: a8:76:3a:9b:ad:d7:2e:f3:02:df:34:a7:ba:f4:73: 91:d9:a1:eb:a6:8c:d7:5f:87:42:c3:62:1f:b4:49: 4a:71:a2:21:e5:5d:fb:4e:76:2d:08:1a:cf:a9:c3: fe:40:c4:b4:e1:b2:12:f8:b0:e6:a4:e9:5f:56:ed: 2b:d3:37:90:3d:6d:c7:bb:1b:db:48:be:ac:23:01: f2:fb:8d:2a:0e:1c:17:90:7d:54:b7:22:40:a6:c8: 3b:c8:c9:0e:78:f0:ff:26:1a:67:06:ca:f1:8e:b4: c1:61:64:a2:c1:41:18:74:8a:11:1a:dd:de:c5:d6: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.112.168.0/21 185.143.76.0/22 IPv6: 2a03:3c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28819 57551 Signature Algorithm: sha256WithRSAEncryption 42:75:ca:96:ba:03:89:0b:8a:46:be:78:21:93:b9:75:41:65: 54:ff:b3:18:00:a4:ae:3f:d1:16:c9:3e:6b:df:e7:61:d2:65: 27:de:57:f2:41:a1:91:01:f3:62:76:ff:08:de:7c:b2:f8:0a: 73:01:31:3d:64:ae:33:38:5a:77:57:03:81:94:e0:74:31:2f: 25:07:89:0c:f4:e7:c8:c6:52:33:73:bd:7b:97:75:f1:94:78: 3c:09:5f:ca:7a:2f:27:1c:0b:d1:3f:f7:70:a0:90:93:e8:70: 5f:e3:b0:fe:37:6b:a4:04:f4:b8:f1:f0:cb:3c:c4:fd:f6:1a: b7:f1:72:d2:96:9a:71:4b:c6:ed:be:ed:fc:a3:0e:2e:02:95: 67:4a:e9:50:6e:72:62:ce:e6:8b:a8:49:d7:27:36:bd:19:a6: f1:7e:a1:18:45:cf:8f:a2:dc:da:2e:66:ae:e5:58:b7:64:96: 8a:b7:2b:05:a4:c9:af:77:ac:2c:ca:32:ea:bd:76:1c:8c:07: 79:e9:1b:a6:74:37:5a:8d:42:22:6a:e2:a3:b1:e8:52:13:c2: d0:ad:d9:4e:ff:31:f4:5e:76:81:a3:51:35:bd:3f:35:02:50: ff:c0:20:59:aa:e1:30:7d:34:71:d6:e6:67:a5:3a:e6:97:8c: 97:11:01:8d -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt3WJhjom2oU4p8xhKNXpJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTM4MWJjOTY5ZGU2YWRjM2QxZGRjMGViODliZGVlYWNlOTgwNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjAQatBnrpAt6JAlnilr9YwVY0Zs +m1rx9KiiM9ok6JUm3ohvgo722WJnGTXxueeFVTcH/aXai7SGELHbg+GmlKZUc5G WzpZi3EjOrhVzygn0GIbb6UZ6aGICiOvk5qGEjkztdTB5XgEcyfdkfOEbflghvY/ UUXb4Rc7HCEEaNypA1gaPRuodjqbrdcu8wLfNKe69HOR2aHrpozXX4dCw2IftElK caIh5V37TnYtCBrPqcP+QMS04bIS+LDmpOlfVu0r0zeQPW3HuxvbSL6sIwHy+40q DhwXkH1UtyJApsg7yMkOePD/JhpnBsrxjrTBYWSiwUEYdIoRGt3exdZIbQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFJE4G8lp3mrcPR3cDrib3urOmAXNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2YzNTQw Ni1kOGM0LTRmNWMtOTJhYy0yNTZkYTk1ZDEzNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvZjM1NDA2 LWQ4YzQtNGY1Yy05MmFjLTI1NmRhOTVkMTM0NS8xL2tUZ2J5V25lYXR3OUhkd091 SnZlNnM2WUJjMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDUnCoAwQCuY9MMA0EAgACMAcDBQAqAzyAMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAnCTAgMA4M8wDQYJKoZIhvcNAQELBQADggEB AEJ1ypa6A4kLika+eCGTuXVBZVT/sxgApK4/0RbJPmvf52HSZSfeV/JBoZEB82J2 /wjefLL4CnMBMT1krjM4WndXA4GU4HQxLyUHiQz058jGUjNzvXuXdfGUeDwJX8p6 LyccC9E/93CgkJPocF/jsP43a6QE9Ljx8Ms8xP32GrfxctKWmnFLxu2+7fyjDi4C lWdK6VBucmLO5ouoSdcnNr0ZpvF+oRhFz4+i3NouZq7lWLdkloq3KwWkya93rCzK Muq9dhyMB3npG6Z0N1qNQiJq4qOx6FITwtCt2U7/MfRedoGjUTW9PzUCUP/AIFmq 4TB9NHHW5melOuaXjJcRAY0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:00 2026 by rpki-client