This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer File: _KrlFMX5lAORQ1YU15QEvuEgmzs.cer (raw, json) Hash identifier: VytohsJj01ylcwUE9OH5KY6cFrZl3cbYXtsC4ksSzZk= Subject key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF4BF72A9BF70612978D93EF7EA45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.111.245.0/24 IP: 2001:67c:12b8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f4:bf:72:a9:bf:70:61:29:78:d9:3e:f7:ea:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcaae514c5f9940391435614d79404bee1209b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:c4:b6:65:ca:e2:f0:58:18:5b:c5:1b:2f: 50:c3:12:06:24:c9:f1:51:91:f6:6c:f0:7d:50:b2: ed:24:25:87:ce:59:d9:7d:cf:24:4d:50:4b:62:ed: 9c:cb:9c:d3:20:cf:5c:30:78:b3:f3:02:53:a7:11: c3:85:4b:a9:65:3b:92:e8:21:db:81:8a:a1:b7:43: 67:75:d6:29:f5:ca:7c:97:92:c8:2a:90:67:4f:62: 83:3f:84:67:f7:02:85:0d:0f:2b:f1:d6:23:e0:81: fd:7e:cd:7e:47:8d:99:3a:86:48:d6:fc:fe:91:76: ad:5f:1b:f5:62:42:00:97:32:30:0d:45:c4:16:42: 7d:91:d6:7f:c7:df:4e:3c:88:fb:0c:7e:ba:cc:e3: 08:86:3f:df:c9:a5:bc:5c:c2:f5:12:90:53:56:92: 70:da:c1:ec:7f:36:dc:0c:b1:88:d0:47:6b:70:d0: d0:a0:03:66:20:6e:2c:eb:55:10:bf:2d:f5:7c:81: 14:49:98:e8:88:36:a4:aa:d9:43:a6:ba:6d:7e:30: 5f:d1:5a:bb:a1:7e:14:a4:d3:3b:f6:77:64:7e:0c: 49:35:0c:70:ed:55:1c:91:15:f6:60:f1:4b:8c:b6: e0:c5:d8:30:52:16:19:07:6f:58:ab:1f:52:88:63: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.111.245.0/24 IPv6: 2001:67c:12b8::/48 Signature Algorithm: sha256WithRSAEncryption 85:86:33:8d:ad:61:ae:ae:e0:1e:0c:e0:9b:e7:a6:6b:e1:b2: c7:3a:9d:fb:cd:32:3f:16:f7:92:68:db:ca:33:94:3f:fa:54: e4:24:26:1f:36:97:73:3e:9e:f6:b6:35:58:42:3a:c8:ff:33: 21:fe:b2:05:42:84:3f:a3:54:86:b0:5e:24:aa:87:56:37:b7: c3:eb:c8:bf:de:19:63:d7:43:44:a2:e6:a8:b6:08:bb:17:f7: 70:b4:ae:3b:4f:9a:95:68:85:06:f5:2b:3a:58:c4:2d:73:e1: 87:9e:82:6a:39:2c:a9:63:bb:92:08:d6:01:00:1d:e9:e3:d9: e5:cc:d9:b6:df:6e:9a:8d:77:69:dd:c1:9a:62:23:27:6d:7f: 26:a6:1e:dc:ea:4e:7d:49:b4:12:c1:d0:59:af:2a:01:ac:ca: 56:10:be:a4:f2:92:7e:b0:87:09:2d:03:db:37:a6:28:91:cb: 00:d6:37:14:c5:57:ab:2e:bb:d0:08:e2:5d:aa:2a:9e:73:fc: fe:b7:11:8f:d8:75:39:99:f0:e2:97:f3:c6:9d:87:f1:32:11: 59:64:24:4c:06:b2:3f:fb:29:c7:c2:36:02:d1:04:ae:71:24: 1c:1a:50:e4:53:26:70:44:7a:10:d2:01:52:5e:d2:b9:bf:9b: 91:a2:dc:6f -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt26vS/cqm/cGEpeNk+9+pFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2FhZTUxNGM1Zjk5NDAzOTE0MzU2MTRkNzk0MDRiZWUxMjA5YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6DEtmXK4vBYGFvFGy9QwxIGJMnx UZH2bPB9ULLtJCWHzlnZfc8kTVBLYu2cy5zTIM9cMHiz8wJTpxHDhUupZTuS6CHb gYqht0NnddYp9cp8l5LIKpBnT2KDP4Rn9wKFDQ8r8dYj4IH9fs1+R42ZOoZI1vz+ kXatXxv1YkIAlzIwDUXEFkJ9kdZ/x99OPIj7DH66zOMIhj/fyaW8XML1EpBTVpJw 2sHsfzbcDLGI0EdrcNDQoANmIG4s61UQvy31fIEUSZjoiDakqtlDprptfjBf0Vq7 oX4UpNM79ndkfgxJNQxw7VUckRX2YPFLjLbgxdgwUhYZB29Yqx9SiGMmpQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFPyq5RTF+ZQDkUNWFNeUBL7hIJs7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzU2MmUx ZC05NTJhLTRmZWEtOWU0YS02N2E5OGUyNTZjYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNTYyZTFk LTk1MmEtNGZlYS05ZTRhLTY3YTk4ZTI1NmNjNy8xL19LcmxGTVg1bEFPUlExWVUx NVFFdnVFZ216cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAsG/1MA8EAgACMAkDBwAgAQZ8ErgwDQYJKoZI hvcNAQELBQADggEBAIWGM42tYa6u4B4M4Jvnpmvhssc6nfvNMj8W95Jo28ozlD/6 VOQkJh82l3M+nva2NVhCOsj/MyH+sgVChD+jVIawXiSqh1Y3t8PryL/eGWPXQ0Si 5qi2CLsX93C0rjtPmpVohQb1KzpYxC1z4Yeegmo5LKlju5II1gEAHenj2eXM2bbf bpqNd2ndwZpiIydtfyamHtzqTn1JtBLB0FmvKgGsylYQvqTykn6whwktA9s3piiR ywDWNxTFV6suu9AI4l2qKp5z/P63EY/YdTmZ8OKX88adh/EyEVlkJEwGsj/7KcfC NgLRBK5xJBwaUORTJnBEehDSAVJe0rm/m5Gi3G8= -----END CERTIFICATE-----Generated at Thu Jan 1 14:22:56 2026 by rpki-client