This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer File: kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer (raw, json) Hash identifier: zGE4nYroECN4I7V/TC7GjnlPJxGZ4COy1/PVbcpHBzE= Subject key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1228CBD7FDB01970DA6DCC52F29F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57782 AS: 202314 AS: 210089 IP: 2001:67c:1190::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:12:28:cb:d7:fd:b0:19:70:da:6d:cc:52:f2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:fd:da:dd:9e:76:86:0a:b5:5c:ab:fb:29: 63:c9:b6:20:c4:69:df:8d:4a:ca:47:28:06:ed:e4: 41:82:85:a8:71:62:e0:2f:d5:80:a7:4f:c0:c5:3f: 0b:7b:52:13:61:6d:d7:47:cb:3c:67:36:f6:be:45: c9:94:61:61:eb:31:f4:f2:ce:bf:e8:f2:4a:5a:e6: 45:b9:22:3a:e6:93:57:ea:cf:5d:9d:ea:59:b0:2d: a0:06:d0:1a:8d:a5:98:25:84:b5:f5:de:5f:8f:de: 03:30:be:57:fe:27:8d:1f:4f:e3:84:85:aa:05:c8: 0a:9d:72:06:b8:29:e4:61:30:41:40:55:73:35:61: c0:42:25:d5:0a:b6:27:ea:22:6a:20:44:73:9e:2a: 59:40:22:a8:e8:b6:65:96:4e:7e:b0:c8:4c:70:4e: a6:7f:d1:3c:c8:ef:57:c5:76:fc:95:ef:4b:34:a3: ff:48:af:01:b3:d9:e1:c1:55:54:31:23:c5:e4:6b: 9d:0a:16:fb:79:9e:b8:79:c3:cc:7b:fb:c7:71:ab: 08:ce:e2:b1:b4:07:8c:51:ca:15:5a:40:bb:a3:86: 74:a3:0d:89:44:d2:0e:64:5a:08:fc:0b:35:bf:51: b8:27:6b:f0:83:34:a9:d1:82:45:8c:ca:d8:85:38: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1190::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57782 202314 210089 Signature Algorithm: sha256WithRSAEncryption 20:0d:cf:0c:b8:24:09:d2:ec:3d:18:18:53:26:a9:62:b4:2c: bc:25:92:d6:c8:38:02:77:84:07:41:48:67:17:20:e6:8d:f8: 85:97:35:5b:e7:4e:17:81:86:da:ca:b5:b3:96:a4:56:ea:7e: 93:16:3a:ca:d1:e2:65:37:6d:27:aa:e1:fb:d1:fd:23:8f:10: dc:48:d8:48:ca:57:99:24:56:ca:33:4f:c4:85:a1:16:22:2e: cd:8a:63:e9:91:c5:3e:6e:1b:02:e7:6f:31:95:ca:f9:84:4e: d6:d1:5b:66:6d:59:8a:ad:9d:ae:aa:95:88:05:f5:cc:fc:74: de:37:c5:c3:9d:71:ec:93:bd:bb:3c:d5:04:86:47:bc:c6:b7: c1:7f:39:65:b6:06:44:40:36:86:7a:52:94:58:0b:49:1e:54: a8:75:a9:31:1f:fb:2e:09:2e:db:97:25:b2:f7:5b:f2:f5:8c: 3e:ee:cc:06:4d:b8:3c:6d:7f:e6:bc:04:32:cd:bd:f5:92:e6: 03:41:00:f3:6d:71:96:d2:95:b3:2f:3c:19:7b:ed:3e:1d:96: 9f:4e:23:9a:27:0b:aa:05:02:57:ab:c2:00:21:47:8b:2f:de: 42:14:4a:6c:e5:3e:54:88:91:e7:dc:10:eb:64:b9:ae:54:2d: 6c:d2:6e:14 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt26xIoy9f9sBlw2m3MUvKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZjYjMzNzIyYTM0OTMyMTYyODNkYzgwY2FlMGVlOWQ1ODg3NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pr92t2edoYKtVyr+yljybYgxGnf jUrKRygG7eRBgoWocWLgL9WAp0/AxT8Le1ITYW3XR8s8Zzb2vkXJlGFh6zH08s6/ 6PJKWuZFuSI65pNX6s9dnepZsC2gBtAajaWYJYS19d5fj94DML5X/ieNH0/jhIWq BcgKnXIGuCnkYTBBQFVzNWHAQiXVCrYn6iJqIERznipZQCKo6LZllk5+sMhMcE6m f9E8yO9XxXb8le9LNKP/SK8Bs9nhwVVUMSPF5GudChb7eZ64ecPMe/vHcasIzuKx tAeMUcoVWkC7o4Z0ow2JRNIOZFoI/As1v1G4J2vwgzSp0YJFjMrYhThmmQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFJJsszcio0kyFig9yAyuDunViHTyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NjZTAw Y2Y5LTA0YTUtNDNkMS04Yjg5LWVkZmE2MGNkOGQ0YS8yLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2Nl MDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4ZDRhLzIvOTI2Q0IzMzcyMkEz NDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABBnwRkDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMA4bYCAwMWSgIDAzSpMA0G CSqGSIb3DQEBCwUAA4IBAQAgDc8MuCQJ0uw9GBhTJqlitCy8JZLWyDgCd4QHQUhn FyDmjfiFlzVb504XgYbayrWzlqRW6n6TFjrK0eJlN20nquH70f0jjxDcSNhIyleZ JFbKM0/EhaEWIi7NimPpkcU+bhsC528xlcr5hE7W0VtmbVmKrZ2uqpWIBfXM/HTe N8XDnXHsk727PNUEhke8xrfBfzlltgZEQDaGelKUWAtJHlSodakxH/suCS7blyWy 91vy9Yw+7swGTbg8bX/mvAQyzb31kuYDQQDzbXGW0pWzLzwZe+0+HZafTiOaJwuq BQJXq8IAIUeLL95CFEps5T5UiJHn3BDrZLmuVC1s0m4U -----END CERTIFICATE-----Generated at Mon Jan 26 06:57:58 2026 by rpki-client