This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer File: kvSd6GhPEof09ssYXVz33oDJC5Q.cer (raw, json) Hash identifier: 6LObrP8QnXIp0pnjk4Yd0Fw5A7stwxfCt67ZR6a4DyA= Subject key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B55D66BCF7922441C087C1AF9DDF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.139.198.0/23 IP: 45.156.52.0/22 IP: 95.214.172.0/22 IP: 95.214.180.0/22 IP: 185.115.207.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:55:d6:6b:cf:79:22:44:1c:08:7c:1a:f9:dd:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:86:20:e8:67:02:96:93:d1:6b:10:5b:bd: 8c:d9:d7:96:2b:4a:97:e6:3d:8b:6d:a1:9d:78:52: 13:be:21:88:3b:dc:70:ce:bc:2c:cc:6b:5c:40:de: e6:5f:44:11:14:0d:40:e8:69:f1:41:2a:c8:fb:8e: f7:5a:22:0d:ce:14:b5:ea:a0:75:a4:d3:78:b6:81: 60:6d:fd:2f:57:c4:58:fc:fe:ca:48:33:51:a6:8b: 9f:47:67:d9:3d:92:d6:05:63:b2:25:b4:61:07:fc: 1e:36:b2:70:82:6b:83:0e:7a:11:c6:d0:27:6e:f5: f0:59:dd:47:4b:f5:52:56:c5:0f:a1:2c:6f:53:3c: ab:6b:1a:f9:ae:06:6b:cf:c5:cc:7d:7b:95:11:f6: ef:88:86:3c:54:cb:ba:2e:36:ff:7a:f1:aa:f6:88: 67:8f:90:5a:28:e9:38:6a:bf:84:e1:e3:4a:15:07: 2b:c5:59:73:6d:e4:a5:ef:dc:ea:43:31:47:46:1d: 10:1d:0f:db:3f:3c:3d:7a:40:77:a2:ee:e5:61:f9: 71:15:ed:61:2d:c6:31:81:e6:c6:8c:3c:95:d7:a3: 41:4a:02:3e:1f:5f:63:ab:68:75:c1:da:d9:fd:47: d1:c8:78:1f:65:ef:bf:62:43:68:ef:88:ed:13:c7: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.198.0/23 45.156.52.0/22 95.214.172.0/22 95.214.180.0/22 185.115.207.0/24 Signature Algorithm: sha256WithRSAEncryption 77:4f:cc:9f:d1:9b:a8:16:49:61:42:48:e3:d0:3c:a1:a8:45: 8f:ce:00:f7:ec:e8:25:8b:cd:5d:db:5e:c7:fc:41:06:c4:fe: 38:66:57:83:26:1c:e4:6e:0c:2e:c3:98:93:5a:de:fe:32:e7: ae:ce:26:d6:fc:85:0d:a8:d4:84:4f:16:a0:1a:d7:ce:3a:0f: 0d:ac:84:b9:01:d6:c6:86:23:03:58:a7:2d:5b:49:57:28:d5: cd:4f:80:06:ad:dc:8b:dc:e3:ad:4d:d4:82:97:52:98:4b:18: 5b:4e:5c:60:8c:da:4b:27:36:ea:62:40:4a:44:4b:7a:73:03: 51:25:29:3f:3b:0b:82:00:e5:f5:65:99:26:09:07:2a:e9:a3: 13:87:38:4f:cd:01:a2:6c:8b:85:6d:f3:c7:5b:05:42:89:f8: d7:d1:ce:8a:5d:da:a4:9b:12:26:7e:0d:bf:41:05:80:56:ff: 72:93:90:3a:b2:88:c6:9b:af:10:3a:cd:9e:0b:27:77:55:18: e5:95:a5:23:90:e6:60:13:75:e0:46:12:af:8b:b3:83:78:38: 7c:70:b9:18:a7:f5:e9:ba:a6:cc:20:d7:37:9b:f3:6c:c4:9e: ff:11:ff:07:63:26:c4:f7:1b:33:2f:55:46:c3:ec:79:f2:ed: e3:4c:1d:12 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt6W1XWa895IkQcCHwa+d31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmY0OWRlODY4NGYxMjg3ZjRmNmNiMTg1ZDVjZjdkZTgwYzkwYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdeGIOhnApaT0WsQW72M2deWK0qX 5j2LbaGdeFITviGIO9xwzrwszGtcQN7mX0QRFA1A6GnxQSrI+473WiINzhS16qB1 pNN4toFgbf0vV8RY/P7KSDNRpoufR2fZPZLWBWOyJbRhB/weNrJwgmuDDnoRxtAn bvXwWd1HS/VSVsUPoSxvUzyraxr5rgZrz8XMfXuVEfbviIY8VMu6Ljb/evGq9ohn j5BaKOk4ar+E4eNKFQcrxVlzbeSl79zqQzFHRh0QHQ/bPzw9ekB3ou7lYflxFe1h LcYxgebGjDyV16NBSgI+H19jq2h1wdrZ/UfRyHgfZe+/YkNo74jtE8dq3QIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFJL0nehoTxKH9PbLGF1c996AyQuUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzYwOTIz Mzg5LTJiZGUtNDNlMC1iMGQ1LWZjMjQ0YTYzMDNkMC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5 MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvOTJGNDlERTg2ODRG MTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgME AS2LxgMEAi2cNAMEAl/WrAMEAl/WtAMEALlzzzANBgkqhkiG9w0BAQsFAAOCAQEA d0/Mn9GbqBZJYUJI49A8oahFj84A9+zoJYvNXdtex/xBBsT+OGZXgyYc5G4MLsOY k1re/jLnrs4m1vyFDajUhE8WoBrXzjoPDayEuQHWxoYjA1inLVtJVyjVzU+ABq3c i9zjrU3UgpdSmEsYW05cYIzaSyc26mJASkRLenMDUSUpPzsLggDl9WWZJgkHKumj E4c4T80BomyLhW3zx1sFQon419HOil3apJsSJn4Nv0EFgFb/cpOQOrKIxpuvEDrN ngsnd1UY5ZWlI5DmYBN14EYSr4uzg3g4fHC5GKf16bqmzCDXN5vzbMSe/xH/B2Mm xPcbMy9VRsPsefLt40wdEg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:18 2026 by rpki-client