This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer File: kniPTrt0HAw2mg_TBZTNAQHcdHY.cer (raw, json) Hash identifier: m+oMrhVV+B2sUUh7wGduuFtoJ/afb2a7BeaJxkqxIbk= Subject key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5615304BCA227DFDF239179064FCE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207151 IP: 185.165.64.0/22 IP: 2a0b:6400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:61:53:04:bc:a2:27:df:df:23:91:79:06:4f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:dc:03:9d:cf:4e:92:29:2a:74:0a:71:53: 11:a6:8b:2a:88:1a:2f:8c:f3:b4:89:0d:d5:fa:8f: 5e:97:ac:dc:e3:21:ad:66:b7:03:e7:78:34:88:32: b1:21:ba:ab:af:48:21:dc:a0:85:3b:7c:f6:77:e1: d1:3b:1a:f7:86:d9:a9:28:ba:28:da:00:8c:a6:14: c6:1a:9f:a6:16:1c:ee:36:08:a4:d2:3d:38:2e:6b: af:fc:2a:50:a2:54:2d:a9:8d:91:b2:52:f0:a4:87: 24:dc:bc:b2:b5:b7:b0:04:1f:06:aa:5d:f2:93:c8: dd:52:01:52:1a:05:95:b3:4d:90:2b:38:d3:ec:14: 36:09:38:ba:e9:03:e9:20:30:e6:78:6d:bd:8c:a2: 3c:b1:e2:f9:16:26:39:a0:15:2c:f2:44:09:65:bc: 6a:de:ca:81:00:0f:b5:26:7f:a0:cc:4d:b4:38:78: e1:95:13:05:d9:e2:9f:cf:14:94:74:1e:24:e2:c8: 7c:e5:35:b4:dd:24:3b:0e:e4:ff:b5:6c:9c:13:27: 3a:f5:0f:81:a5:ed:5f:91:09:40:64:58:a2:6e:f7: a4:45:7f:40:51:a7:ab:64:7a:f7:0d:08:83:5f:e2: d8:16:44:fc:c9:8d:1e:b7:93:67:c2:d1:a6:06:89: d8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.64.0/22 IPv6: 2a0b:6400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207151 Signature Algorithm: sha256WithRSAEncryption 65:31:99:12:2e:02:d7:3c:ca:7c:be:31:5d:81:53:81:56:62: 63:b6:41:10:64:38:cb:e3:ed:da:e9:d5:92:50:cf:3d:d2:ee: e5:9a:7b:b1:5b:63:5e:f3:cc:96:c6:b6:9b:67:84:36:d5:84: 5e:b1:20:7c:eb:b5:e2:a2:d6:ac:95:00:73:22:18:4e:3e:11: 4c:79:31:47:35:3a:10:56:56:de:68:90:e0:e0:38:a5:db:97: db:63:75:00:19:88:24:a2:45:65:0d:93:fd:3c:42:8f:a2:b9: 54:de:ce:66:06:24:73:c7:26:0e:0f:9d:df:29:4c:26:92:a9: 8d:1a:a9:67:ff:98:b5:e5:89:cd:96:09:b9:df:de:0c:61:de: ed:06:84:40:88:0d:a9:52:df:27:c7:ee:13:18:cc:6f:75:70: 82:e4:50:81:0e:45:86:98:30:d7:0b:bc:71:c5:33:ef:98:44: 24:09:eb:1f:51:30:82:90:de:90:b4:6a:d5:69:d6:08:c2:1f: 6a:5f:3d:38:50:60:93:5a:a3:7c:48:2b:74:cf:54:ce:a0:14: e3:f0:9b:14:74:29:a1:49:7a:c6:7f:2f:fd:71:57:3f:0d:07: 26:97:12:d5:8d:1c:12:17:40:28:b4:46:01:cd:59:2a:a4:50: 8e:7c:e0:a9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pWFTBLyiJ9/fI5F5Bk/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjc4OGY0ZWJiNzQxYzBjMzY5YTBmZDMwNTk0Y2QwMTAxZGM3NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGPcA53PTpIpKnQKcVMRposqiBov jPO0iQ3V+o9el6zc4yGtZrcD53g0iDKxIbqrr0gh3KCFO3z2d+HROxr3htmpKLoo 2gCMphTGGp+mFhzuNgik0j04Lmuv/CpQolQtqY2RslLwpIck3LyytbewBB8Gql3y k8jdUgFSGgWVs02QKzjT7BQ2CTi66QPpIDDmeG29jKI8seL5FiY5oBUs8kQJZbxq 3sqBAA+1Jn+gzE20OHjhlRMF2eKfzxSUdB4k4sh85TW03SQ7DuT/tWycEyc69Q+B pe1fkQlAZFiibvekRX9AUaerZHr3DQiDX+LYFkT8yY0et5NnwtGmBonYbQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJJ4j067dBwMNpoP0wWUzQEB3HR2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1Lzc3MWU3 Ny1jNjQ5LTQ3ZjMtOTlhOC1kYmZhYzAwZmIwZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvNzcxZTc3 LWM2NDktNDdmMy05OWE4LWRiZmFjMDBmYjBlZi8xL2tuaVBUcnQwSEF3Mm1nX1RC WlROQVFIY2RIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaVAMA0EAgACMAcDBQMqC2QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpLzANBgkqhkiG9w0BAQsFAAOCAQEAZTGZEi4C1zzK fL4xXYFTgVZiY7ZBEGQ4y+Pt2unVklDPPdLu5Zp7sVtjXvPMlsa2m2eENtWEXrEg fOu14qLWrJUAcyIYTj4RTHkxRzU6EFZW3miQ4OA4pduX22N1ABmIJKJFZQ2T/TxC j6K5VN7OZgYkc8cmDg+d3ylMJpKpjRqpZ/+YteWJzZYJud/eDGHe7QaEQIgNqVLf J8fuExjMb3VwguRQgQ5Fhpgw1wu8ccUz75hEJAnrH1EwgpDekLRq1WnWCMIfal89 OFBgk1qjfEgrdM9UzqAU4/CbFHQpoUl6xn8v/XFXPw0HJpcS1Y0cEhdAKLRGAc1Z KqRQjnzgqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:09 2026 by rpki-client