This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer (raw, json) Hash identifier: FG4Q+2pYnFW7/AD+GwdGoPg0ptJorCgp4kNF5crq62w= Subject key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED001F669724DBCE72633D5A91612E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206993 IP: 185.169.172.0/22 IP: 193.160.34.0 -- 193.160.38.255 IP: 2a0a:5d00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:00:1f:66:97:24:db:ce:72:63:3d:5a:91:61:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:b7:0d:97:f4:4b:37:fd:be:53:76:f5:a4: 01:23:5c:81:a6:7a:8a:b4:fb:2e:66:a8:4a:a8:5c: b5:a8:d2:ec:8f:d8:5c:64:60:d8:d0:8b:39:87:9a: ed:df:69:94:a1:5e:b2:f6:70:f7:e1:78:ff:02:e3: a1:b1:16:1f:bf:68:30:ea:b0:4e:d8:88:e9:b5:f0: d9:a0:e6:f3:e6:38:46:10:df:fb:a1:b2:34:83:d9: 01:cc:97:71:6e:c9:fa:51:0f:a3:97:6a:6f:ba:44: de:bf:0d:38:72:b7:72:25:41:4e:50:2f:3e:ff:cf: ca:62:dd:01:c8:36:30:65:ec:3e:67:70:d7:b7:1c: 85:9c:51:2d:44:40:d0:40:e0:b7:46:db:8e:11:cb: ce:f9:c7:95:b3:7a:16:d7:ae:ae:ef:41:fb:ee:b9: b5:1d:92:75:d0:4b:10:b4:c3:da:4b:dc:7f:21:2a: b1:d3:19:50:d6:86:9d:cf:25:05:22:4e:8f:17:3b: 3f:14:91:f5:40:8f:ce:3c:22:1e:78:87:95:7b:27: 69:66:fa:c1:d2:12:a9:a6:60:10:9b:af:10:6f:15: d3:3d:d0:c5:36:78:a2:aa:ba:c4:3e:72:51:52:5b: 02:93:ce:e2:d6:ae:04:89:45:4d:d7:c6:9d:5e:f5: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.172.0/22 193.160.34.0-193.160.38.255 IPv6: 2a0a:5d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206993 Signature Algorithm: sha256WithRSAEncryption 69:24:76:0a:30:21:8f:e2:e7:d9:fe:6b:3f:c6:db:11:02:a2: b0:52:71:ee:e2:0c:d7:bb:fa:4f:99:81:73:e9:69:fc:1a:c3: ba:1c:93:f4:df:c2:2b:55:dd:e9:e6:99:fd:7c:ad:e1:d7:df: 0d:d4:46:ca:30:bf:65:70:3a:22:b5:83:0d:35:8a:e3:ec:10: 94:5c:5d:1a:95:ec:6e:c3:f5:b9:b7:dc:1a:e6:e8:d2:3e:c9: fa:c7:cf:5f:76:37:c0:13:17:07:42:bb:d2:16:46:28:82:0e: 9d:0d:40:fc:34:c9:12:61:4e:64:22:f3:23:d5:ce:01:cd:a6: 30:39:7e:ca:e8:96:95:4e:7d:0e:d3:b4:08:4c:c8:28:28:ff: 8b:84:9f:9c:dc:a8:72:ba:d5:7f:63:f7:35:cc:79:bf:56:bc: 7d:91:fa:02:6d:b4:89:59:44:c5:46:8a:ae:ba:bf:e2:be:7f: 2e:b5:7f:15:9b:84:f8:ae:35:8c:b4:f3:4a:aa:b7:c3:52:8e: 37:3b:89:31:b3:af:f3:26:ba:83:bf:71:dd:6d:89:02:73:41: 95:0e:04:e8:fa:6a:e3:44:74:33:d3:48:fe:fb:c9:e8:1c:c1: 58:07:3c:bf:1f:fb:e6:d8:ea:88:b2:9f:44:88:62:35:ce:33: 64:5a:ae:9b -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt57QAfZpck285yYz1akWEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjgwZmRjOWU3YTg2NDMwYzhlMjhmNWUzNDllMzE3ZmJiOGExY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27C3DZf0Szf9vlN29aQBI1yBpnqK tPsuZqhKqFy1qNLsj9hcZGDY0Is5h5rt32mUoV6y9nD34Xj/AuOhsRYfv2gw6rBO 2IjptfDZoObz5jhGEN/7obI0g9kBzJdxbsn6UQ+jl2pvukTevw04crdyJUFOUC8+ /8/KYt0ByDYwZew+Z3DXtxyFnFEtREDQQOC3RtuOEcvO+ceVs3oW166u70H77rm1 HZJ10EsQtMPaS9x/ISqx0xlQ1oadzyUFIk6PFzs/FJH1QI/OPCIeeIeVeydpZvrB 0hKppmAQm68QbxXTPdDFNniiqrrEPnJRUlsCk87i1q4EiUVN18adXvV0IwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFJKA/cnnqGQwyOKPXjSeMX+7ihypMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2NmNDk0 Ni1mNWMyLTQ1YWEtOWE0MS1mNDQyOTk4NjVhMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvY2Y0OTQ2 LWY1YzItNDVhYS05YTQxLWY0NDI5OTg2NWEyOC8xL2tvRDl5ZWVvWkRESTRvOWVO SjR4Zjd1S0hLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQCuamsMAwDBAHBoCIDBADBoCYwDQQCAAIwBwMF ACoKXQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyiRMA0GCSqGSIb3DQEBCwUA A4IBAQBpJHYKMCGP4ufZ/ms/xtsRAqKwUnHu4gzXu/pPmYFz6Wn8GsO6HJP038Ir Vd3p5pn9fK3h198N1EbKML9lcDoitYMNNYrj7BCUXF0alexuw/W5t9wa5ujSPsn6 x89fdjfAExcHQrvSFkYogg6dDUD8NMkSYU5kIvMj1c4BzaYwOX7K6JaVTn0O07QI TMgoKP+LhJ+c3KhyutV/Y/c1zHm/Vrx9kfoCbbSJWUTFRoquur/ivn8utX8Vm4T4 rjWMtPNKqrfDUo43O4kxs6/zJrqDv3HdbYkCc0GVDgTo+mrjRHQz00j++8noHMFY Bzy/H/vm2OqIsp9EiGI1zjNkWq6b -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:22 2026 by rpki-client