This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer File: kqH7oqss0QEUipWef4wI96Qbw8U.cer (raw, json) Hash identifier: kAIdfZssWGuu8ajJEwtwDYyp0sdyg2YVuUiivNzuEos= Subject key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A374F08F155C086B68A977490383A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205415 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:74:f0:8f:15:5c:08:6b:68:a9:77:49:03:83:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2a:bf:c5:34:57:b4:e0:4d:19:b6:96:53:6c: 7c:2e:fb:e5:b9:4b:9b:a2:ae:c9:79:84:55:65:b7: a4:08:8f:a0:fe:82:42:18:24:cb:7a:4c:1e:df:eb: d0:37:35:3a:66:ec:c9:ff:be:37:48:b6:09:ee:0d: 95:ae:3a:8a:03:93:f2:fc:02:86:b5:07:61:a6:bd: d2:44:f9:59:1e:a5:4c:9b:c0:33:8b:9a:26:ad:2e: 59:c2:e4:b6:e3:3d:59:29:a6:43:7c:ec:7a:13:61: 5e:08:20:bb:92:37:25:cf:8c:0b:aa:1c:10:bc:a8: c4:21:25:a4:f1:3f:73:c9:51:b9:a9:00:36:40:4c: 4a:b6:f9:69:b6:49:b7:b0:d0:5f:ba:78:ff:0d:d1: 53:24:db:74:04:8f:e7:f8:4f:0e:6b:5a:ee:3f:3d: 69:4b:d6:69:3e:36:09:1b:94:78:b2:da:79:d3:d9: 56:91:62:1b:54:01:bc:f8:20:1f:f4:48:29:a8:ce: 8a:d5:63:e9:fc:f2:d8:6a:a9:66:b3:f6:da:78:b0: e7:6d:15:60:3a:e5:cf:9a:df:84:fe:b9:89:54:e4: 26:51:fe:70:43:b6:38:1b:87:0c:da:d6:2e:0a:49: d0:a5:11:b9:51:ca:fa:64:e1:24:ae:a7:41:d2:f5: 26:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205415 Signature Algorithm: sha256WithRSAEncryption 4e:89:15:6c:27:2e:cd:c2:80:3b:89:d1:8e:f9:1b:e3:07:bd: b3:c9:67:be:0e:03:25:e3:0c:e2:1b:7b:ca:67:02:b0:bb:02: 43:b0:ae:5c:7b:14:3e:c4:e3:ec:9c:bd:43:eb:80:c4:20:11: 55:aa:3d:07:8c:c1:8a:5c:01:09:95:aa:b2:84:b3:4a:62:57: 3f:cb:e3:fd:16:d6:93:d4:57:7d:1d:07:5b:85:06:cd:ff:79: 31:bf:e7:1a:46:38:dd:17:54:f8:c0:da:fe:a6:13:64:75:75: e5:ba:41:88:27:0f:3b:11:58:4e:9f:35:25:c9:00:41:14:59: df:ad:da:f1:0f:60:d6:1a:f6:95:21:06:05:cb:7d:f3:62:dd: 5c:84:50:87:f0:61:5b:56:4d:c4:99:44:d2:4e:f6:a1:bc:cc: 7c:ee:b2:4a:bb:e0:58:18:4b:31:48:0a:d1:bd:99:71:38:c5: 42:a9:b2:fe:dd:07:f5:2c:d4:57:86:32:32:7e:d1:c4:c9:ac: da:d4:7f:36:da:39:99:fc:46:63:d5:d0:ed:41:ef:2d:b7:c9: 93:68:a8:a3:31:32:91:e8:62:2f:0e:ea:81:89:6f:2d:d9:f4: bc:e5:66:75:78:53:7a:c8:ea:df:3d:ce:ff:02:39:f4:e6:c3: d0:1a:d9:be -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o3TwjxVcCGtoqXdJA4OhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmExZmJhMmFiMmNkMTAxMTQ4YTk1OWU3ZjhjMDhmN2E0MWJjM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iq/xTRXtOBNGbaWU2x8LvvluUub oq7JeYRVZbekCI+g/oJCGCTLekwe3+vQNzU6ZuzJ/743SLYJ7g2VrjqKA5Py/AKG tQdhpr3SRPlZHqVMm8Azi5omrS5ZwuS24z1ZKaZDfOx6E2FeCCC7kjclz4wLqhwQ vKjEISWk8T9zyVG5qQA2QExKtvlptkm3sNBfunj/DdFTJNt0BI/n+E8Oa1ruPz1p S9ZpPjYJG5R4stp509lWkWIbVAG8+CAf9EgpqM6K1WPp/PLYaqlms/baeLDnbRVg OuXPmt+E/rmJVOQmUf5wQ7Y4G4cM2tYuCknQpRG5Ucr6ZOEkrqdB0vUmRwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJKh+6KrLNEBFIqVnn+MCPekG8PFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2RkODI2 OC1mMjlmLTQzYjUtOWE1Zi1kYzljM2FlN2UzMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZGQ4MjY4 LWYyOWYtNDNiNS05YTVmLWRjOWMzYWU3ZTMwYi8xL2txSDdvcXNzMFFFVWlwV2Vm NHdJOTZRYnc4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMiZzANBgkqhkiG9w0BAQsFAAOCAQEATokVbCcuzcKA O4nRjvkb4we9s8lnvg4DJeMM4ht7ymcCsLsCQ7CuXHsUPsTj7Jy9Q+uAxCARVao9 B4zBilwBCZWqsoSzSmJXP8vj/RbWk9RXfR0HW4UGzf95Mb/nGkY43RdU+MDa/qYT ZHV15bpBiCcPOxFYTp81JckAQRRZ363a8Q9g1hr2lSEGBct982LdXIRQh/BhW1ZN xJlE0k72obzMfO6ySrvgWBhLMUgK0b2ZcTjFQqmy/t0H9SzUV4YyMn7RxMms2tR/ Nto5mfxGY9XQ7UHvLbfJk2ioozEykehiLw7qgYlvLdn0vOVmdXhTesjq3z3O/wI5 9ObD0BrZvg== -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:24 2026 by rpki-client