This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer (raw, json) Hash identifier: qytWCnqLqFFnLUAQZcUfktn5HN1j+q5gzauKS+DMimA= Subject key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E923C229389F7EDC4AAD3020F0D5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208435 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:92:3c:22:93:89:f7:ed:c4:aa:d3:02:0f:0d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9309372464c59a3dd8ecd63215b01819706558a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:40:8e:2d:73:5a:3a:34:e6:04:70:98:84: 16:6d:11:18:8a:ab:13:2c:96:ca:60:2a:05:05:b5: 0b:44:57:8d:d7:fa:f9:ca:32:bc:dd:ee:03:42:b0: 85:51:36:0a:42:db:e3:d8:a8:dd:c2:ce:bf:99:25: 6c:3d:65:ff:2f:a3:84:de:18:ee:14:aa:a5:c2:27: 5e:33:ab:c7:8f:d3:f9:94:73:56:e5:86:57:be:a0: c0:bd:cb:64:08:c2:98:17:13:0f:f4:f1:81:d0:b2: 9c:d3:91:cf:1b:2e:61:77:75:cd:0d:c5:74:4b:c7: b2:9c:27:70:af:74:83:12:df:6a:36:7a:84:7c:49: a1:a1:69:84:97:2a:db:9f:98:3e:2e:81:b6:9c:aa: 57:1e:9d:82:49:f9:9e:2a:11:10:9d:ff:b7:10:63: eb:46:54:04:09:dc:9a:9f:89:f2:83:fe:c2:fc:f2: 79:a8:09:b7:47:5e:2a:98:87:e1:36:94:09:60:a5: cc:5a:e3:4d:f9:5a:69:3a:2a:d1:89:9a:e6:d2:72: 1d:a9:22:7f:83:cf:d4:2d:d2:9d:38:bf:62:18:e8: 5c:23:3c:0b:25:8c:ce:63:30:fa:eb:fe:60:34:bd: ff:9a:01:6c:fd:0d:ef:cb:7e:30:6b:c5:53:b1:be: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208435 Signature Algorithm: sha256WithRSAEncryption 34:5d:77:00:36:4b:86:7a:43:3f:0c:3c:18:c7:c3:08:92:b0: b1:c2:1e:94:c1:b2:19:4d:66:46:72:a6:d2:56:cf:ed:3a:f8: 8a:fb:5a:9c:c4:a3:e0:0d:1c:e8:6c:40:2d:fa:77:31:10:23: 06:d1:64:8b:dd:1a:bb:55:e4:42:3b:b3:8d:62:ee:1f:8a:8b: bf:f3:90:c2:02:be:95:04:da:4f:e3:73:51:05:fe:89:bf:d7: d3:fd:66:8f:54:95:ff:51:65:e8:ad:41:a3:52:25:32:3e:d3: 67:ff:d6:d1:16:53:dc:d1:81:ac:3c:99:aa:c9:d6:0a:bf:a8: 67:d1:39:35:14:24:09:b6:cc:0e:db:86:ba:49:a2:77:4d:67: 21:fb:59:94:94:65:92:5a:d3:61:bb:87:7e:35:e2:d7:9d:f8: 0f:3d:1e:d9:74:e4:b4:0e:8e:88:57:c6:7b:23:e3:72:b3:f8: 6e:77:f8:e9:66:83:12:4f:1d:8e:18:36:21:12:49:79:50:a5: 99:a7:d8:90:e4:fb:3b:5a:b9:29:c3:1a:f5:bb:96:45:12:dd: 1b:f7:aa:2a:f5:de:ac:4e:45:a3:40:d5:a3:23:db:e6:bf:90: 3f:fb:23:69:ed:14:1b:c3:6a:9e:a7:e2:74:4f:3a:09:04:3b: 75:fa:0d:2d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fpI8IpOJ9+3EqtMCDw1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzA5MzcyNDY0YzU5YTNkZDhlY2Q2MzIxNWIwMTgxOTcwNjU1OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0xAji1zWjo05gRwmIQWbREYiqsT LJbKYCoFBbULRFeN1/r5yjK83e4DQrCFUTYKQtvj2Kjdws6/mSVsPWX/L6OE3hju FKqlwideM6vHj9P5lHNW5YZXvqDAvctkCMKYFxMP9PGB0LKc05HPGy5hd3XNDcV0 S8eynCdwr3SDEt9qNnqEfEmhoWmElyrbn5g+LoG2nKpXHp2CSfmeKhEQnf+3EGPr RlQECdyan4nyg/7C/PJ5qAm3R14qmIfhNpQJYKXMWuNN+VppOirRiZrm0nIdqSJ/ g8/ULdKdOL9iGOhcIzwLJYzOYzD66/5gNL3/mgFs/Q3vy34wa8VTsb7p1wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJMJNyRkxZo92OzWMhWwGBlwZVimMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2VjZmFm Yy05MTE1LTRlYzItYWUxMS0wN2YxMjU5ZmViMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZWNmYWZj LTkxMTUtNGVjMi1hZTExLTA3ZjEyNTlmZWIxMy8xL2t3azNKR1RGbWozWTdOWXlG YkFZR1hCbFdLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuMzANBgkqhkiG9w0BAQsFAAOCAQEANF13ADZLhnpD Pww8GMfDCJKwscIelMGyGU1mRnKm0lbP7Tr4ivtanMSj4A0c6GxALfp3MRAjBtFk i90au1XkQjuzjWLuH4qLv/OQwgK+lQTaT+NzUQX+ib/X0/1mj1SV/1Fl6K1Bo1Il Mj7TZ//W0RZT3NGBrDyZqsnWCr+oZ9E5NRQkCbbMDtuGukmid01nIftZlJRlklrT YbuHfjXi1534Dz0e2XTktA6OiFfGeyPjcrP4bnf46WaDEk8djhg2IRJJeVClmafY kOT7O1q5KcMa9buWRRLdG/eqKvXerE5Fo0DVoyPb5r+QP/sjae0UG8NqnqfidE86 CQQ7dfoNLQ== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:16 2026 by rpki-client