This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer File: khkujXhVgfcrGGRCJL2MP6ii0Rs.cer (raw, json) Hash identifier: iro4kcDZzZEhkxM3AMNuF6bXx+vyGPnz1wi6OHDZX/8= Subject key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A783151ACFB91ACEA52B6E8711209F4D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 13:11:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 59588 IP: 5.252.132.0/22 IP: 45.153.116.0/22 IP: 151.236.160.0/19 IP: 194.59.28.0/23 IP: 198.160.164.0 -- 198.160.169.255 IP: 198.176.116.0/23 IP: 2a10:2200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:31:51:ac:fb:91:ac:ea:52:b6:e8:71:12:09:f4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 13:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:72:4d:d8:57:98:66:e8:4f:4e:62:0a:10: 44:a2:30:e2:eb:48:21:ea:92:d5:ae:8a:61:e2:17: c0:d9:80:4f:0b:de:92:ec:64:31:04:09:52:2a:ca: b3:28:44:7a:03:2f:18:c7:b3:39:3f:fa:a6:66:ab: 3b:1e:e0:06:cc:49:5f:3c:52:b0:7d:a7:08:6c:c9: b2:6e:78:d9:bf:dc:39:de:6f:9c:96:5a:18:56:63: 42:3a:b8:04:a0:31:e4:4c:dc:96:b2:e2:04:3e:6e: f2:c1:19:dd:13:5f:b2:3e:0f:dc:fe:47:6d:da:a0: 93:c5:e4:60:34:5a:0b:c9:04:cc:ba:fc:1f:72:1b: 65:90:4a:85:b7:e3:5d:63:68:b6:d1:2b:61:28:09: 78:ba:e7:f6:46:6e:c9:6a:53:57:a9:e2:7e:7b:9c: e0:d2:0b:87:5f:1d:a8:66:56:97:18:8a:01:d8:20: 5d:80:92:a6:c7:f6:58:60:b2:a2:d7:d4:18:78:5f: be:46:da:3e:5a:04:4f:0d:1a:66:01:fb:cf:74:e2: 01:90:19:36:c7:33:df:93:36:ee:f8:ad:ed:49:1d: a9:09:1a:52:f8:a0:b9:a1:43:73:96:68:ee:51:da: de:2f:71:8e:52:9b:86:f2:0e:fc:4a:2c:b5:3b:bc: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.132.0/22 45.153.116.0/22 151.236.160.0/19 194.59.28.0/23 198.160.164.0-198.160.169.255 198.176.116.0/23 IPv6: 2a10:2200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59588 Signature Algorithm: sha256WithRSAEncryption 74:0a:88:ee:ee:0d:4f:4c:3b:cf:24:22:a1:78:d7:0c:32:cf: 74:cc:e5:c7:c1:07:41:cd:01:f8:6c:d3:8e:fe:71:8a:c3:b2: 71:dc:0b:08:f4:68:90:93:f4:ab:1d:75:70:00:62:be:c8:19: de:e9:24:ad:78:15:2c:be:8c:0c:f6:ff:d9:a2:45:f5:77:7b: aa:fe:93:f8:1d:47:56:f0:9c:bf:e6:d6:d0:42:26:b2:db:49: 28:79:ad:67:6f:c6:68:2f:ea:03:52:62:47:12:f1:3d:45:f8: c9:aa:1b:00:00:ad:9d:bd:84:12:b6:32:a3:e5:11:f9:ef:ba: db:ae:7f:e8:e0:e9:cc:a8:81:89:26:6d:31:77:9a:ee:03:78: c2:9e:7d:e2:4f:82:1d:1c:cb:c4:0a:5a:52:e7:0c:54:4a:81: b5:7e:5e:c2:ca:e6:a9:b5:ff:9f:85:b0:70:e2:d3:a4:7c:bb: 0a:ee:6a:e3:4b:9b:ed:bc:64:04:3f:e6:02:76:8d:6f:8b:48: 83:73:ae:2a:fd:ca:5b:e6:4f:63:40:55:c9:e4:0c:8c:37:a2: 72:25:67:0e:f5:83:ef:be:15:f4:4e:cd:14:ea:eb:b5:ac:d8: fd:65:6e:29:b1:bd:f5:47:8b:cf:f3:f0:3c:5b:df:63:2c:22: 81:9d:c1:4a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZp4MVGs+5Gs6lK26HESCfTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTMxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjE5MmU4ZDc4NTU4MWY3MmIxODY0NDIyNGJkOGMzZmE4YTJkMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1pyTdhXmGboT05iChBEojDi60gh 6pLVroph4hfA2YBPC96S7GQxBAlSKsqzKER6Ay8Yx7M5P/qmZqs7HuAGzElfPFKw facIbMmybnjZv9w53m+clloYVmNCOrgEoDHkTNyWsuIEPm7ywRndE1+yPg/c/kdt 2qCTxeRgNFoLyQTMuvwfchtlkEqFt+NdY2i20SthKAl4uuf2Rm7JalNXqeJ+e5zg 0guHXx2oZlaXGIoB2CBdgJKmx/ZYYLKi19QYeF++Rto+WgRPDRpmAfvPdOIBkBk2 xzPfkzbu+K3tSR2pCRpS+KC5oUNzlmjuUdreL3GOUpuG8g78Siy1O7zEZwIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFJIZLo14VYH3KxhkQiS9jD+ootEbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2Q5YjM5 Ny1lMTA1LTRhYzktODUzNy0wMDg1YTM2NWEyNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZDliMzk3 LWUxMDUtNGFjOS04NTM3LTAwODVhMzY1YTI1Zi8xL2toa3VqWGhWZ2ZjckdHUkNK TDJNUDZpaTBScy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQCBfyEAwQCLZl0AwQFl+ygAwQBwjscMAwDBALG oKQDBAHGoKgDBAHGsHQwDQQCAAIwBwMFAyoQIgAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOjEMA0GCSqGSIb3DQEBCwUAA4IBAQB0Coju7g1PTDvPJCKheNcMMs90 zOXHwQdBzQH4bNOO/nGKw7Jx3AsI9GiQk/SrHXVwAGK+yBne6SSteBUsvowM9v/Z okX1d3uq/pP4HUdW8Jy/5tbQQiay20koea1nb8ZoL+oDUmJHEvE9RfjJqhsAAK2d vYQStjKj5RH577rbrn/o4OnMqIGJJm0xd5ruA3jCnn3iT4IdHMvEClpS5wxUSoG1 fl7Cyuaptf+fhbBw4tOkfLsK7mrjS5vtvGQEP+YCdo1vi0iDc64q/cpb5k9jQFXJ 5AyMN6JyJWcO9YPvvhX0Ts0U6uu1rNj9ZW4psb31R4vP8/A8W99jLCKBncFK -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:13 2025 by rpki-client