This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer (raw, json) Hash identifier: HAFUhZ2QnoHYo+IJqrONN7lpA2m+0Xk62Eb6bm/sfGU= Subject key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E9E6B904148D66C1750E3B15DFE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.93.92.0/22 IP: 185.151.60.0/22 IP: 185.163.4.0/22 IP: 185.229.208.0/22 IP: 2a0a:2640::/29 IP: 2a0a:5800::/29 IP: 2a0d:ce00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e9:e6:b9:04:14:8d:66:c1:75:0e:3b:15:df:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=926b9336fcaf3657cedeba53c47e948010877e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a7:0b:73:85:bb:d5:fd:f6:4b:fd:0b:0e:31: db:9f:60:d8:e5:a9:95:f4:1a:fb:18:34:43:b8:f1: e4:e2:e0:cd:02:5a:bc:aa:61:e3:18:98:8f:aa:f6: 4b:79:b7:37:58:b7:c0:a2:56:23:49:2d:59:77:33: bd:7f:63:6b:b9:67:6d:9f:6e:bb:16:ba:99:63:17: 61:4c:1a:6e:f6:3f:c9:63:5d:88:18:a7:5c:8b:53: c3:1a:5b:4f:73:8a:5b:1c:e2:f8:3c:21:cf:8e:11: 93:3b:56:dc:2a:59:f3:a8:47:b7:fc:fe:5c:8d:a1: 1d:18:57:2e:4b:74:ef:9e:44:b9:0a:11:b2:9c:56: 1d:c0:a1:f3:33:d0:b2:e6:8d:4f:b6:92:e3:2d:8c: 5b:20:f8:3f:c5:f3:e5:30:0e:0b:a4:25:e7:59:bb: 73:a4:5b:c4:78:e3:1a:86:7f:e5:ad:41:b3:7c:c3: b1:99:0a:d6:eb:c3:8e:1a:ed:e6:2a:ba:c8:1f:97: 98:40:b1:4d:29:e0:df:f9:a7:35:34:9e:82:f7:44: de:1b:d5:9e:51:81:78:14:c8:af:06:22:06:60:6f: 51:35:8a:f5:a7:0e:8f:be:9f:1f:31:c7:8b:e4:9e: ee:3e:16:52:35:96:78:8d:2b:ca:cf:65:74:e5:c6: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.92.0/22 185.151.60.0/22 185.163.4.0/22 185.229.208.0/22 IPv6: 2a0a:2640::/29 2a0a:5800::/29 2a0d:ce00::/29 Signature Algorithm: sha256WithRSAEncryption 95:33:e5:8e:15:0e:dc:96:28:1d:f1:76:d5:62:a7:00:df:02: 08:af:93:c4:37:fe:47:18:a4:46:c2:fd:fc:85:aa:83:cb:46: 35:8b:ee:65:77:f2:bb:5d:bd:4d:3f:7e:21:80:76:7c:b5:b3: 56:ed:5d:24:da:dc:8e:fd:65:c8:33:ff:31:e0:8f:43:fc:15: c3:e2:ee:1f:7b:c7:22:00:07:fc:f4:c7:83:7b:78:dc:03:d9: 92:e4:69:e0:0a:fd:f5:0d:a9:27:1b:64:6c:a5:c2:2b:c7:01: 97:f2:55:50:f0:b2:6f:b2:22:54:e4:fd:a3:22:6c:bb:c7:b6: 63:de:b7:3e:24:30:df:13:34:4a:01:90:ae:7f:03:3b:2d:72: 3b:4a:93:cc:95:fc:12:f8:fd:0e:e0:d5:33:af:e0:7f:70:8b: da:7e:41:ef:55:8d:ee:dd:5f:a8:8c:c1:ca:cd:aa:08:e9:22: 92:ab:81:03:cc:4b:b9:6d:9e:0f:77:dd:3a:5f:99:f2:20:5a: 9a:29:5b:fe:96:f0:e0:f4:32:95:fc:a1:69:84:a1:72:60:7c: ab:15:72:8d:0a:78:af:b6:6e:e1:76:c4:bc:9b:c0:87:cc:9e: b1:73:06:10:9a:dc:57:d7:42:f2:54:73:81:86:c0:eb:f2:64: 48:4e:44:ad -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt+OOnmuQQUjWbBdQ47Fd/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZiOTMzNmZjYWYzNjU3Y2VkZWJhNTNjNDdlOTQ4MDEwODc3ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qcLc4W71f32S/0LDjHbn2DY5amV 9Br7GDRDuPHk4uDNAlq8qmHjGJiPqvZLebc3WLfAolYjSS1ZdzO9f2NruWdtn267 FrqZYxdhTBpu9j/JY12IGKdci1PDGltPc4pbHOL4PCHPjhGTO1bcKlnzqEe3/P5c jaEdGFcuS3TvnkS5ChGynFYdwKHzM9Cy5o1PtpLjLYxbIPg/xfPlMA4LpCXnWbtz pFvEeOMahn/lrUGzfMOxmQrW68OOGu3mKrrIH5eYQLFNKeDf+ac1NJ6C90TeG9We UYF4FMivBiIGYG9RNYr1pw6Pvp8fMceL5J7uPhZSNZZ4jSvKz2V05caIaQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFJJrkzb8rzZXzt66U8R+lIAQh34gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2VmYmJm MC1lNGZhLTQ0MzEtYjFlNy0wNmEyNGZhNzQ2NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZWZiYmYw LWU0ZmEtNDQzMS1iMWU3LTA2YTI0ZmE3NDY2Ny8xL2ttdVROdnl2TmxmTzNycFR4 SDZVZ0JDSGZpQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCTV1cAwQCuZc8AwQCuaMEAwQCueXQMBsEAgAC MBUDBQMqCiZAAwUDKgpYAAMFAyoNzgAwDQYJKoZIhvcNAQELBQADggEBAJUz5Y4V DtyWKB3xdtVipwDfAgivk8Q3/kcYpEbC/fyFqoPLRjWL7mV38rtdvU0/fiGAdny1 s1btXSTa3I79Zcgz/zHgj0P8FcPi7h97xyIAB/z0x4N7eNwD2ZLkaeAK/fUNqScb ZGylwivHAZfyVVDwsm+yIlTk/aMibLvHtmPetz4kMN8TNEoBkK5/AzstcjtKk8yV /BL4/Q7g1TOv4H9wi9p+Qe9Vje7dX6iMwcrNqgjpIpKrgQPMS7ltng933TpfmfIg WpopW/6W8OD0MpX8oWmEoXJgfKsVco0KeK+2buF2xLybwIfMnrFzBhCa3FfXQvJU c4GGwOvyZEhORK0= -----END CERTIFICATE-----Generated at Mon Jan 26 05:10:48 2026 by rpki-client