This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer File: klBppddk2iVZVNsu6dEkPeFrkQE.cer (raw, json) Hash identifier: bQC8HXK3SsiZ0Eef70mWP4W621bE2SDJCpYbBqJwinw= Subject key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA67DB9AE78BC6C9114F0D778351BE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39622 IP: 193.168.140.0/22 IP: 194.5.248.0/22 IP: 2a0c:b0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7d:b9:ae:78:bc:6c:91:14:f0:d7:78:35:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=925069a5d764da255954db2ee9d1243de16b9101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:1d:c4:7c:ac:53:c8:aa:34:92:d7:cb:e9: 61:56:f8:a8:44:d5:4c:5a:be:b4:74:8c:1e:29:73: 13:19:f7:ca:24:5b:43:e5:ad:85:48:40:be:36:a9: 45:a0:e3:b3:1b:60:2b:2f:65:9f:74:05:e3:2b:cc: c4:14:f6:c2:29:07:c5:89:44:8b:14:10:ae:93:40: c5:4f:ac:16:c3:16:26:b8:c5:fd:37:f2:06:55:e1: 5b:e2:8a:5a:52:ae:77:62:50:ad:26:65:00:97:81: ed:bc:1f:49:3e:09:08:4b:57:14:3a:4d:f3:c6:ba: 4f:75:b9:73:3c:fe:1b:a3:06:c4:65:aa:22:1e:b0: 21:54:0d:ec:b3:23:e3:0e:60:3c:40:ad:4e:09:d1: 7a:69:f6:f5:a7:5d:18:2d:db:36:a8:4b:52:82:c5: 90:2a:77:15:22:4a:a5:5f:17:77:97:5e:43:90:b9: 3f:85:17:fd:5a:57:8f:fa:58:4c:f0:3c:6c:f4:a8: 8a:20:e3:5c:da:85:6d:da:30:3f:11:16:af:a8:62: 81:d3:bf:26:e6:77:c3:9b:e6:96:08:4b:6f:cd:50: c5:00:14:37:df:47:83:73:3e:16:4f:87:df:34:81: 3e:8a:31:57:34:38:ab:c8:f1:0e:00:b1:fe:d5:ee: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.140.0/22 194.5.248.0/22 IPv6: 2a0c:b0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39622 Signature Algorithm: sha256WithRSAEncryption 61:82:e2:db:40:34:97:f9:c5:21:d9:f9:c6:18:b3:cc:46:09: e0:7c:f1:5b:79:e3:08:d2:91:4a:b1:c8:e4:f4:48:36:35:e0: 94:55:28:5e:82:fc:18:f2:2c:02:4f:93:95:e7:bc:ac:c4:de: e1:1f:19:e4:cf:36:6a:ca:24:5b:6f:c0:1a:b3:ca:86:1f:90: 8a:20:14:9a:1e:82:74:95:2a:8a:5d:5f:c0:f7:de:15:7b:d0: 50:73:08:47:50:72:2b:79:c8:de:0f:b5:35:bf:2a:78:83:2f: 24:c6:9a:70:0e:10:7a:69:9c:4c:05:53:f8:71:94:38:c0:9e: 57:b0:39:03:ea:ac:30:5c:ff:e2:e1:3d:32:73:bb:1f:69:a3: d6:de:90:93:a3:7f:1a:85:5a:ce:eb:23:d0:92:d7:5a:74:23: eb:38:89:b8:e0:e5:68:fc:95:b5:5c:27:47:d0:25:91:2b:90: 05:fc:30:7c:4a:b5:81:ac:99:4e:84:04:7f:d4:4a:4d:6e:eb: 15:06:d3:d4:bc:1c:41:dc:b9:48:14:c0:1d:5c:ab:0b:65:10: 3c:aa:7f:95:42:48:29:bd:7f:10:a3:33:23:2f:ff:18:c6:70: 29:1a:a9:10:df:7a:f6:5e:6b:37:68:08:28:a1:1a:89:ca:41: 77:52:dc:35 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pn25rni8bJEU8Nd4NRvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjUwNjlhNWQ3NjRkYTI1NTk1NGRiMmVlOWQxMjQzZGUxNmI5MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSEdxHysU8iqNJLXy+lhVvioRNVM Wr60dIweKXMTGffKJFtD5a2FSEC+NqlFoOOzG2ArL2WfdAXjK8zEFPbCKQfFiUSL FBCuk0DFT6wWwxYmuMX9N/IGVeFb4opaUq53YlCtJmUAl4HtvB9JPgkIS1cUOk3z xrpPdblzPP4bowbEZaoiHrAhVA3ssyPjDmA8QK1OCdF6afb1p10YLds2qEtSgsWQ KncVIkqlXxd3l15DkLk/hRf9WleP+lhM8Dxs9KiKIONc2oVt2jA/ERavqGKB078m 5nfDm+aWCEtvzVDFABQ330eDcz4WT4ffNIE+ijFXNDiryPEOALH+1e5WnQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJJQaaXXZNolWVTbLunRJD3ha5EBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzY3ODhm NS00ODg5LTRiZTctYmIxOS1hOWI4ZGU2MTFhOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNjc4OGY1 LTQ4ODktNGJlNy1iYjE5LWE5YjhkZTYxMWE5Ni8xL2tsQnBwZGRrMmlWWlZOc3U2 ZEVrUGVGcmtRRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCwaiMAwQCwgX4MA0EAgACMAcDBQMqDLDAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCaxjANBgkqhkiG9w0BAQsFAAOCAQEAYYLi 20A0l/nFIdn5xhizzEYJ4HzxW3njCNKRSrHI5PRINjXglFUoXoL8GPIsAk+Tlee8 rMTe4R8Z5M82asokW2/AGrPKhh+QiiAUmh6CdJUqil1fwPfeFXvQUHMIR1ByK3nI 3g+1Nb8qeIMvJMaacA4QemmcTAVT+HGUOMCeV7A5A+qsMFz/4uE9MnO7H2mj1t6Q k6N/GoVazusj0JLXWnQj6ziJuODlaPyVtVwnR9AlkSuQBfwwfEq1gayZToQEf9RK TW7rFQbT1LwcQdy5SBTAHVyrC2UQPKp/lUJIKb1/EKMzIy//GMZwKRqpEN969l5r N2gIKKEaicpBd1LcNQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:02:53 2026 by rpki-client