This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer File: kkGtDn_CK_urVnvon2PZgF5euao.cer (raw, json) Hash identifier: V/IVP/LdPYChUlyzIt7ISFgBbzQ150CMEiBFHiU+pUs= Subject key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED0FB25A2B06E34FB7B8FD2DFF1A28 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57845 AS: 61199 IP: 92.63.160.0/21 IP: 109.205.199.0/24 IP: 141.138.144.0/21 IP: 178.20.248.0/21 IP: 185.69.100.0/22 IP: 185.70.64.0/22 IP: 2a00:1c58::/32 IP: 2a01:a680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0f:b2:5a:2b:06:e3:4f:b7:b8:fd:2d:ff:1a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:d5:f4:52:f3:b6:0c:af:66:85:1e:0f:20: eb:e5:b4:8f:74:cb:f8:f1:0b:92:78:4e:c4:c7:50: 22:e0:98:94:bd:89:59:0f:bd:79:14:7c:c0:97:ac: 33:d6:ed:8e:f2:81:42:11:4a:af:d1:f9:5f:74:9c: d8:66:92:ee:cf:9f:5a:35:2a:af:ae:ad:b2:7e:bf: b5:4a:34:89:00:4d:68:8e:66:c2:a9:f8:19:a5:aa: d0:32:8f:e1:9e:62:6f:66:8b:1b:9f:1b:67:0f:04: d5:88:58:fc:96:69:36:b3:b6:f6:7e:34:5f:99:ec: 2f:e2:73:54:22:f6:68:70:b4:1c:1b:84:46:f0:d0: cc:c3:f0:8a:d0:55:ff:a9:d8:a1:eb:b6:b0:e7:f2: 86:c1:90:6b:ed:9b:e1:80:03:f6:56:07:62:b1:62: a8:65:3e:30:59:da:16:22:e6:1e:70:98:d3:43:b1: ad:14:3a:ca:14:85:36:cb:ed:83:4b:56:48:2e:4c: 19:dd:45:05:8e:0a:a5:0a:2b:24:27:27:63:8d:69: f2:b4:35:16:3b:30:33:47:e8:6b:28:a0:3b:11:19: 46:7e:70:b9:bc:0d:22:16:ee:88:e6:30:48:56:cc: a7:44:9e:cc:ca:f0:98:b7:92:48:cf:0b:ee:95:bd: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.160.0/21 109.205.199.0/24 141.138.144.0/21 178.20.248.0/21 185.69.100.0/22 185.70.64.0/22 IPv6: 2a00:1c58::/32 2a01:a680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57845 61199 Signature Algorithm: sha256WithRSAEncryption a2:ab:ea:f5:d5:46:e4:e6:fc:90:94:c1:2d:d3:3f:2a:aa:8e: b7:0b:7c:f7:5a:43:1b:b2:84:96:da:74:bb:e8:ff:69:31:da: d9:af:2f:2d:53:7c:d3:cf:0c:de:87:9f:3b:c3:ec:03:46:76: 32:56:dd:54:27:db:3e:5b:61:98:df:b9:7e:c9:48:79:fc:6e: 6b:17:a5:55:45:2f:d3:ba:8f:ca:d7:d9:fd:1d:7f:a5:d4:fb: 94:90:c4:f1:fe:63:db:8f:f8:a7:6d:b5:29:7c:a6:3d:de:21: 21:7a:9b:2f:e7:c8:37:13:30:ea:4e:a5:30:79:7a:22:13:8a: 25:56:1e:60:82:20:62:2e:03:4f:0d:93:9c:7c:92:cd:99:ba: 82:ec:06:ec:e5:8e:e0:01:fb:8e:23:97:04:c4:9a:e7:6e:a8: 35:91:18:96:bc:0c:f2:df:b6:34:90:b0:99:49:fe:f6:b2:0a: 51:21:0c:55:a9:d9:ce:ca:60:53:49:4e:69:a6:9e:c4:c9:70: b5:0c:d7:85:69:0e:d1:7d:76:62:2d:13:37:cc:74:6a:bd:45: bc:52:37:67:43:72:54:5e:24:7c:0f:49:91:3b:88:6c:da:04: 5b:d0:c1:d2:eb:e9:c7:c7:a2:44:e5:48:e1:55:19:99:54:82: 67:a8:e3:6f -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt87Q+yWisG40+3uP0t/xooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQxYWQwZTdmYzIyYmZiYWI1NjdiZTg5ZjYzZDk4MDVlNWViOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbjV9FLztgyvZoUeDyDr5bSPdMv4 8QuSeE7Ex1Ai4JiUvYlZD715FHzAl6wz1u2O8oFCEUqv0flfdJzYZpLuz59aNSqv rq2yfr+1SjSJAE1ojmbCqfgZparQMo/hnmJvZosbnxtnDwTViFj8lmk2s7b2fjRf mewv4nNUIvZocLQcG4RG8NDMw/CK0FX/qdih67aw5/KGwZBr7ZvhgAP2VgdisWKo ZT4wWdoWIuYecJjTQ7GtFDrKFIU2y+2DS1ZILkwZ3UUFjgqlCiskJydjjWnytDUW OzAzR+hrKKA7ERlGfnC5vA0iFu6I5jBIVsynRJ7MyvCYt5JIzwvulb0vAQIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2ZiMWE2 ZC00MTM4LTRjNGYtYWVkOS00NTQ0YzYxMDk3MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZmIxYTZk LTQxMzgtNGM0Zi1hZWQ5LTQ1NDRjNjEwOTcyOS8xL2trR3REbl9DS191clZudm9u MlBaZ0Y1ZXVhby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQDXD+gAwQAbc3HAwQDjYqQAwQDshT4AwQCuUVk AwQCuUZAMBQEAgACMA4DBQAqABxYAwUDKgGmgDAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMA4fUCAwDvDzANBgkqhkiG9w0BAQsFAAOCAQEAoqvq9dVG5Ob8kJTBLdM/ KqqOtwt891pDG7KEltp0u+j/aTHa2a8vLVN8088M3oefO8PsA0Z2MlbdVCfbPlth mN+5fslIefxuaxelVUUv07qPytfZ/R1/pdT7lJDE8f5j24/4p221KXymPd4hIXqb L+fINxMw6k6lMHl6IhOKJVYeYIIgYi4DTw2TnHySzZm6guwG7OWO4AH7jiOXBMSa 526oNZEYlrwM8t+2NJCwmUn+9rIKUSEMVanZzspgU0lOaaaexMlwtQzXhWkO0X12 Yi0TN8x0ar1FvFI3Z0NyVF4kfA9JkTuIbNoEW9DB0uvpx8eiROVI4VUZmVSCZ6jj bw== -----END CERTIFICATE-----Generated at Fri Jan 2 08:16:26 2026 by rpki-client