This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer File: knr31AfwRdvqgHcyZbBM5XTQt-M.cer (raw, json) Hash identifier: SXal+UxEwyKfvOlHkzd+rRXjT8WevsMoTsaDNi/D0Hc= Subject key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35D588311123910D91DC6DDE63AFAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.104.140.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d5:88:31:11:23:91:0d:91:dc:6d:de:63:af:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=927af7d407f045dbea80773265b04ce574d0b7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:6d:8f:e7:37:0a:2b:1e:61:75:be:0a:40: 4c:0d:3a:4a:4b:af:a3:bd:e8:d6:89:54:ae:ec:23: 1f:d3:30:19:a5:9d:08:ea:7a:50:e4:93:3c:c8:d9: 73:bc:d6:3c:58:07:fb:bf:33:9a:5b:fd:e2:a0:95: 6f:90:f0:82:ce:bc:0d:5c:6e:e8:61:ca:89:d5:6e: 5d:0c:c0:19:37:1d:0a:ec:44:46:34:2b:09:45:1c: 20:5c:94:d7:8d:59:d2:5a:5e:de:0b:d3:a8:53:24: 8e:31:31:a8:98:c6:2a:e0:23:0b:a5:aa:a1:33:c7: 1c:29:ce:ea:df:81:3e:88:4f:8a:be:a9:27:9b:0b: 18:59:0a:34:cd:40:75:2b:f5:fe:be:2d:17:19:71: 42:f5:68:7d:31:9b:1c:5c:55:99:33:85:d9:ee:f0: 0f:b8:a4:d8:da:05:6b:92:2b:45:c0:cc:0e:b8:68: e7:20:0d:85:c3:d1:23:9b:15:9e:2b:19:58:40:c0: ce:4a:08:35:25:ca:ce:d7:a3:86:35:c6:80:93:67: b7:4c:84:36:b7:a8:b4:2c:1a:03:c7:ee:65:8e:9b: 10:a1:c2:cb:d4:25:8c:ae:e4:a3:c7:52:f6:3b:89: 18:d6:98:3e:4e:c1:8b:6c:3d:a5:02:bd:03:89:05: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.104.140.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:04:25:01:63:06:c3:25:d1:20:72:d4:2a:3d:9a:ad:0a:a6: 7c:a6:7b:4d:0f:bf:43:7c:60:5b:93:ef:13:bc:2d:2c:a5:d7: 36:ef:52:e0:cc:ec:f7:59:98:64:0c:73:52:75:6a:da:93:dc: 8a:10:6e:38:60:be:74:ae:e2:14:d5:cb:33:b5:71:c6:d2:bf: d5:83:69:ff:12:fb:bb:b5:ba:80:53:20:79:5b:74:85:e2:e0: 76:17:ca:d8:2b:d8:4c:bc:0f:fe:35:6f:20:a5:19:29:db:9c: 6e:ff:39:a6:9c:ae:56:14:96:b0:68:14:56:11:ca:1f:5c:55: d3:ea:a9:04:74:7e:c5:aa:61:75:e3:85:ae:fb:dc:56:88:b4: b8:00:fe:cd:f0:99:fd:e1:b9:bf:56:5a:2c:95:05:ac:44:d0: 2a:99:9a:c5:04:cf:a8:29:e0:38:75:4d:30:ed:33:09:3d:5f: 3f:fa:91:b2:93:48:bd:e0:be:6e:50:5e:b9:f6:f3:96:2e:11: f1:f7:a2:56:ff:dc:58:ed:78:7b:a4:18:7a:2e:d3:46:c5:2a: b8:74:43:25:90:c1:6f:5c:cb:32:9f:37:b1:2a:2c:43:34:e3: 2e:f8:d5:5a:1f:40:46:2e:19:93:1f:f6:af:dd:b3:8d:6b:20: 46:28:3c:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NdWIMREjkQ2R3G3eY6+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjdhZjdkNDA3ZjA0NWRiZWE4MDc3MzI2NWIwNGNlNTc0ZDBiN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kptj+c3CiseYXW+CkBMDTpKS6+j vejWiVSu7CMf0zAZpZ0I6npQ5JM8yNlzvNY8WAf7vzOaW/3ioJVvkPCCzrwNXG7o YcqJ1W5dDMAZNx0K7ERGNCsJRRwgXJTXjVnSWl7eC9OoUySOMTGomMYq4CMLpaqh M8ccKc7q34E+iE+KvqknmwsYWQo0zUB1K/X+vi0XGXFC9Wh9MZscXFWZM4XZ7vAP uKTY2gVrkitFwMwOuGjnIA2Fw9EjmxWeKxlYQMDOSgg1JcrO16OGNcaAk2e3TIQ2 t6i0LBoDx+5ljpsQocLL1CWMruSjx1L2O4kY1pg+TsGLbD2lAr0DiQVBKQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJJ699QH8EXb6oB3MmWwTOV00LfjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzZkNWUy OS1hZjZlLTRjOGMtYjBhZC01MTZlMGIzMGViMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNmQ1ZTI5 LWFmNmUtNGM4Yy1iMGFkLTUxNmUwYjMwZWIxMC8xL2tucjMxQWZ3UmR2cWdIY3la YkJNNVhUUXQtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwGiMMA0GCSqGSIb3DQEBCwUAA4IBAQAsBCUB YwbDJdEgctQqPZqtCqZ8pntND79DfGBbk+8TvC0spdc271LgzOz3WZhkDHNSdWra k9yKEG44YL50ruIU1csztXHG0r/Vg2n/Evu7tbqAUyB5W3SF4uB2F8rYK9hMvA/+ NW8gpRkp25xu/zmmnK5WFJawaBRWEcofXFXT6qkEdH7FqmF144Wu+9xWiLS4AP7N 8Jn94bm/VloslQWsRNAqmZrFBM+oKeA4dU0w7TMJPV8/+pGyk0i94L5uUF659vOW LhHx96JW/9xY7Xh7pBh6LtNGxSq4dEMlkMFvXMsynzexKixDNOMu+NVaH0BGLhmT H/av3bONayBGKDzv -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:56 2026 by rpki-client