This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer (raw, json) Hash identifier: NKkVGE8AQNnFXrxfF2+0p2NWAERrwYGPt8X3smNK8PI= Subject key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F45EFB94A670CEEE0F3D314376419 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.235.132.0/22 IP: 185.32.240.0/22 IP: 2a03:7b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:45:ef:b9:4a:67:0c:ee:e0:f3:d3:14:37:64:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:7b:40:22:b3:2b:29:5f:7f:e6:97:6a:e1: 2a:45:b1:ed:1d:33:11:9a:78:17:61:60:1b:48:25: dc:26:a5:46:42:c8:4b:7f:c1:86:20:cc:e8:ab:6d: 56:14:b0:b4:c9:e3:af:fc:4f:c7:9a:73:c7:42:70: 7a:9f:a8:94:86:41:ea:ac:02:aa:69:41:0b:c0:df: 4b:6b:45:51:31:c8:a1:ce:2d:8c:d3:b5:e9:c0:16: 1d:03:be:6e:e4:53:35:c7:53:c6:fd:d7:fb:d1:df: e4:65:31:d3:92:a5:32:e7:c7:05:27:67:49:e1:be: 5a:86:1d:62:69:c0:de:d4:50:32:d5:c0:14:a4:57: 04:8b:e2:d5:15:0e:f6:b8:38:25:e9:8a:19:a9:9e: f4:79:e0:0f:d3:2a:1a:92:b7:bb:f7:94:02:36:59: 69:33:43:c1:e0:74:38:0b:5f:b2:3f:23:7f:69:61: 53:d0:07:70:25:d6:34:12:3b:56:71:d2:0e:45:3f: 19:73:3c:8e:43:f7:cd:11:ed:48:3b:45:df:59:a5: 09:93:d8:31:58:66:aa:8a:2d:48:6f:c7:f4:64:72: 09:31:35:70:6b:72:52:bc:63:25:bb:e5:46:97:08: 50:88:0c:bc:07:0d:18:5a:7e:43:f0:30:25:15:71: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.132.0/22 185.32.240.0/22 IPv6: 2a03:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 95:44:51:af:17:08:2e:c4:2d:6f:67:d8:f8:f6:50:04:2b:e6: de:5d:50:b0:64:02:35:cc:8a:85:ce:8c:b8:a9:b5:21:ad:09: d8:5a:7d:a4:68:83:17:7f:27:dc:c8:ca:73:5d:bc:55:96:16: d8:53:c3:34:b1:10:49:ff:20:13:32:58:01:14:93:a5:23:6e: f8:58:e7:6d:fe:ee:54:f5:a8:3c:19:9f:36:3b:7e:88:13:71: ae:f1:fb:6b:d8:19:44:3d:e2:27:c6:e3:31:8c:2b:c9:e8:78: 3c:de:60:28:d3:ab:76:81:0c:02:b0:70:a3:28:ba:c6:86:90: 1d:2f:7c:bd:53:a3:f5:f6:60:f5:8f:1f:f8:da:85:30:a9:6d: a1:9f:b3:4e:f7:2e:36:1c:b4:9f:76:a6:99:a9:1b:50:f5:38: da:a7:bd:45:1b:4b:1d:31:7d:69:e8:5b:b3:39:2b:8f:83:cd: 36:9d:07:48:91:30:b9:d5:69:fa:0a:6c:7f:00:a9:80:97:c9: f7:d4:08:a5:a3:b5:d0:6f:bf:94:3e:19:3f:13:1b:0e:37:ce: d1:aa:ae:26:32:c2:5b:a3:05:ce:62:b8:dd:ee:45:b3:12:d4: ee:35:3b:16:cc:11:97:10:8e:71:24:87:e9:33:10:3c:23:51: bb:9f:31:14 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8f0XvuUpnDO7g89MUN2QZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQ4ZjEzMWIxZTEyMDdmYjQ5MDgyYjBlMDY0MmZkMWE2M2UxYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswF7QCKzKylff+aXauEqRbHtHTMR mngXYWAbSCXcJqVGQshLf8GGIMzoq21WFLC0yeOv/E/HmnPHQnB6n6iUhkHqrAKq aUELwN9La0VRMcihzi2M07XpwBYdA75u5FM1x1PG/df70d/kZTHTkqUy58cFJ2dJ 4b5ahh1iacDe1FAy1cAUpFcEi+LVFQ72uDgl6YoZqZ70eeAP0yoakre795QCNllp M0PB4HQ4C1+yPyN/aWFT0AdwJdY0EjtWcdIORT8ZczyOQ/fNEe1IO0XfWaUJk9gx WGaqii1Ib8f0ZHIJMTVwa3JSvGMlu+VGlwhQiAy8Bw0YWn5D8DAlFXFl4QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFJJI8TGx4SB/tJCCsOBkL9GmPhqmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzc3NTM1 Zi00NzNiLTQzZDMtYWY0My1lNDgxNzUxZDY4NGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNzc1MzVm LTQ3M2ItNDNkMy1hZjQzLWU0ODE3NTFkNjg0Zi8xL2tranhNYkhoSUgtMGtJS3c0 R1F2MGFZLUdxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCW+uEAwQCuSDwMA0EAgACMAcDBQAqA3tAMA0G CSqGSIb3DQEBCwUAA4IBAQCVRFGvFwguxC1vZ9j49lAEK+beXVCwZAI1zIqFzoy4 qbUhrQnYWn2kaIMXfyfcyMpzXbxVlhbYU8M0sRBJ/yATMlgBFJOlI274WOdt/u5U 9ag8GZ82O36IE3Gu8ftr2BlEPeInxuMxjCvJ6Hg83mAo06t2gQwCsHCjKLrGhpAd L3y9U6P19mD1jx/42oUwqW2hn7NO9y42HLSfdqaZqRtQ9Tjap71FG0sdMX1p6Fuz OSuPg802nQdIkTC51Wn6Cmx/AKmAl8n31Ailo7XQb7+UPhk/ExsON87Rqq4mMsJb owXOYrjd7kWzEtTuNTsWzBGXEI5xJIfpMxA8I1G7nzEU -----END CERTIFICATE-----Generated at Mon Jan 12 06:29:49 2026 by rpki-client