This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer File: klbr9muA8IE1hY0UTO1veFg09fQ.cer (raw, json) Hash identifier: K7HuG7iwk/VwOoIOOO2RMaOslkbqX9lf2w6rkH75K0U= Subject key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B92620925BC4A814D3F910263F6F358E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 08:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35421 AS: 44926 IP: 45.9.56.0/22 IP: 91.208.229.0/24 IP: 185.168.160.0/22 IP: 195.234.187.0/24 IP: 2a09:8ec0::/29 IP: 2a13:1680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:62:09:25:bc:4a:81:4d:3f:91:02:63:f6:f3:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9256ebf66b80f08135858d144ced6f785834f5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:bb:ac:e1:4a:97:31:c3:ae:8a:6b:26:d9: c7:3a:9c:ba:c7:ce:93:e5:57:e9:52:0c:7e:2f:18: 52:0b:a9:8c:33:03:ba:98:3b:e9:e6:e2:97:d6:04: 15:b8:93:06:12:83:ea:45:c3:1f:2a:55:5b:26:af: 22:fd:f2:e7:b0:5f:40:12:82:c0:af:6e:6c:0a:47: 41:62:25:1f:fd:31:28:fd:22:f7:bb:16:73:17:99: 6e:41:fd:c3:74:d2:bb:f9:5c:f7:82:3d:40:ce:36: 7c:89:86:c4:6a:1c:c3:d0:ca:3a:25:69:8d:57:95: 91:9b:61:b3:9d:05:7f:f8:ac:d0:98:ea:e8:05:49: 92:f0:74:1e:01:a4:f5:9b:f9:f1:a1:1a:d9:97:e7: 85:2a:86:64:79:0d:8b:c3:4e:31:f2:1c:f6:28:32: 62:b4:be:d8:06:64:bf:b5:d3:21:f7:88:d3:89:9e: ef:b9:18:17:64:49:b9:4a:aa:7b:a5:34:3e:e4:8f: f8:e4:e9:21:4d:e7:13:a4:12:aa:9d:b9:d1:68:9b: fe:07:09:65:1d:e8:6e:e5:d9:d3:9d:eb:91:78:ea: 6c:50:53:af:84:e9:01:28:a5:06:57:6a:20:0b:99: 65:a2:cc:51:40:00:6a:2f:78:42:d0:d4:34:bc:16: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.56.0/22 91.208.229.0/24 185.168.160.0/22 195.234.187.0/24 IPv6: 2a09:8ec0::/29 2a13:1680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35421 44926 Signature Algorithm: sha256WithRSAEncryption 49:60:c1:09:2b:71:42:60:85:43:18:0d:a1:cb:f4:27:29:05: 05:75:53:c0:21:ca:49:49:23:bf:57:c7:9a:51:91:ec:fb:07: bd:73:f6:36:d0:ad:c8:03:39:92:58:05:b1:29:7e:f4:15:e8: 83:8f:c6:b8:74:ee:08:40:50:e1:05:03:a3:ea:36:ae:73:0b: 05:54:92:20:ca:47:92:e6:74:04:cf:fa:c6:a4:ae:cb:32:67: 6e:60:51:5d:ec:36:0b:ea:41:50:7f:97:72:08:de:23:95:87: dd:e3:ed:42:ee:b3:4e:83:40:f9:ce:86:2d:cd:4d:57:28:30: 7d:d7:31:95:82:94:0e:2b:77:65:be:dd:48:a0:2a:6c:a9:fd: ed:44:08:84:32:e4:d6:f8:c8:11:db:f4:be:8e:d8:c7:eb:ca: 59:77:18:ee:e4:57:cd:24:82:b1:88:ef:b0:74:5f:a1:e7:80: 4d:6c:35:33:6c:4d:8d:27:8e:9c:bc:24:26:94:1e:29:1a:d7: 37:9f:7b:e1:d7:dd:89:19:2b:54:65:94:81:5c:69:c1:80:33: 5a:f8:af:db:1b:52:03:26:65:c4:65:7a:72:88:8e:8f:36:eb: 7e:79:9d:0e:ea:53:a5:f1:fb:03:7c:67:3d:65:6a:77:36:98: 32:2a:ae:e7 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZuSYgklvEqBTT+RAmP281jlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjU2ZWJmNjZiODBmMDgxMzU4NThkMTQ0Y2VkNmY3ODU4MzRmNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZq7rOFKlzHDroprJtnHOpy6x86T 5VfpUgx+LxhSC6mMMwO6mDvp5uKX1gQVuJMGEoPqRcMfKlVbJq8i/fLnsF9AEoLA r25sCkdBYiUf/TEo/SL3uxZzF5luQf3DdNK7+Vz3gj1AzjZ8iYbEahzD0Mo6JWmN V5WRm2GznQV/+KzQmOroBUmS8HQeAaT1m/nxoRrZl+eFKoZkeQ2Lw04x8hz2KDJi tL7YBmS/tdMh94jTiZ7vuRgXZEm5Sqp7pTQ+5I/45OkhTecTpBKqnbnRaJv+Bwll Hehu5dnTneuReOpsUFOvhOkBKKUGV2ogC5llosxRQABqL3hC0NQ0vBaeHQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFJJW6/ZrgPCBNYWNFEztb3hYNPX0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2I3MTdj NS1hNjRiLTQ0NzUtYmUzZS01ZGE4ZDY3N2Q4NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvYjcxN2M1 LWE2NGItNDQ3NS1iZTNlLTVkYThkNjc3ZDg0Ny8xL2tsYnI5bXVBOElFMWhZMFVU TzF2ZUZnMDlmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCLQk4AwQAW9DlAwQCuaigAwQAw+q7MBQEAgAC MA4DBQMqCY7AAwUDKhMWgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAil0CAwCv fjANBgkqhkiG9w0BAQsFAAOCAQEASWDBCStxQmCFQxgNocv0JykFBXVTwCHKSUkj v1fHmlGR7PsHvXP2NtCtyAM5klgFsSl+9BXog4/GuHTuCEBQ4QUDo+o2rnMLBVSS IMpHkuZ0BM/6xqSuyzJnbmBRXew2C+pBUH+XcgjeI5WH3ePtQu6zToNA+c6GLc1N VygwfdcxlYKUDit3Zb7dSKAqbKn97UQIhDLk1vjIEdv0vo7Yx+vKWXcY7uRXzSSC sYjvsHRfoeeATWw1M2xNjSeOnLwkJpQeKRrXN5974dfdiRkrVGWUgVxpwYAzWviv 2xtSAyZlxGV6coiOjzbrfnmdDupTpfH7A3xnPWVqdzaYMiqu5w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:26 2026 by rpki-client