This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer File: KWWTt0fnalZJJRG7NhLk1eTL5-w.cer (raw, json) Hash identifier: QWeyABOp4uLCByLs7sDpVMMytbqFKW6w8Na7ZtS+z4U= Subject key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AAB7EB3C3FA92CB627555B62E738F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57433 AS: 59592 AS: 60461 AS: 62454 IP: 37.114.32.0/19 IP: 43.251.160.0/22 IP: 94.154.48.0/21 IP: 103.252.88.0/22 IP: 176.100.32.0/21 IP: 185.14.92.0/22 IP: 2a00:ccc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ab:7e:b3:c3:fa:92:cb:62:75:55:b6:2e:73:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:b1:fe:7a:dd:6b:33:d5:1f:d1:c6:1d:7d: 40:83:a4:d9:9c:2a:54:1a:64:cf:d9:60:30:3e:bf: 33:5d:b3:e4:90:9b:4c:55:11:09:0b:81:61:62:95: 65:fa:43:89:a1:e1:26:08:bc:0f:3b:c9:ec:1d:f9: 1e:d5:5a:ee:4e:9a:f4:76:2f:09:43:34:f7:82:7b: 6e:9c:8c:38:90:32:a3:f8:ec:ab:3c:8b:19:c3:a9: 27:40:42:04:2f:25:2b:c5:bf:5e:c2:e1:da:89:f7: 75:5c:f9:f7:bd:ee:d8:6b:a5:a7:b9:e1:7f:a8:64: 0b:e2:96:bc:27:ac:3a:b8:ec:05:eb:44:36:88:1f: a1:03:20:a3:3e:66:ec:a6:b9:ea:4b:0c:78:e4:06: 25:0e:d1:9a:35:c6:db:6a:bb:9f:a9:61:3d:cb:d4: 04:6c:6c:3e:bd:57:9c:96:8f:06:5b:61:e9:ec:ea: cd:69:26:1a:98:a8:25:25:2a:6e:30:98:b8:be:93: 5c:e6:a3:28:d4:43:45:0b:85:5e:25:71:a9:af:c5: 16:8c:11:53:c8:df:6b:7d:70:b4:eb:69:ca:cf:80: 57:ef:8d:a0:bf:02:91:c0:b4:96:58:f7:1c:99:74: e5:15:21:63:04:5e:b1:15:ef:76:99:62:29:f1:d4: c2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.32.0/19 43.251.160.0/22 94.154.48.0/21 103.252.88.0/22 176.100.32.0/21 185.14.92.0/22 IPv6: 2a00:ccc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57433 59592 60461 62454 Signature Algorithm: sha256WithRSAEncryption 43:ad:54:3b:9a:03:bd:de:00:e6:a5:d1:6c:0c:b3:ef:8a:9d: 47:6c:60:b7:cd:b0:5c:b3:67:16:34:66:20:db:7a:52:6e:0b: 33:36:bc:a0:3d:bb:1c:92:a5:a3:c2:80:a3:55:7d:52:77:d1: 10:c1:45:37:bb:f7:1c:27:0e:9d:58:f8:19:19:23:8e:ff:fb: 6a:85:f8:cb:04:2c:14:5a:20:a5:05:bb:5e:ef:f7:14:6c:3a: 2f:84:a9:0c:38:c7:b3:d7:af:4a:ae:ae:63:0b:7e:dc:74:f3: d4:e8:7a:47:1f:49:09:98:98:e2:9f:75:a8:80:22:b1:74:d4: 74:68:4a:05:26:33:b0:6f:a6:a8:11:3d:a4:52:5e:b0:48:e6: 7d:23:4d:69:8b:2d:62:3c:dc:dd:62:ac:b6:21:13:6b:cf:48: 82:d0:0c:32:59:57:77:b5:b7:9d:d7:40:0d:b5:f0:ff:e9:4f: e9:ff:b4:b0:ff:35:31:77:fa:bc:cf:aa:72:e4:2a:46:3b:ec: 36:fb:9c:df:06:c2:6f:de:bf:f7:d6:85:d8:2f:e4:50:b4:8c: 87:70:0a:f9:ff:96:58:63:30:dd:d4:22:75:ae:c3:56:39:c8: 72:fe:32:05:2a:08:e8:90:51:ae:07:5f:ed:f8:ec:ac:44:b7: f8:c2:d4:38 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt6Wqt+s8P6kstidVW2LnOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTY1OTNiNzQ3ZTc2YTU2NDkyNTExYmIzNjEyZTRkNWU0Y2JlN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznGx/nrdazPVH9HGHX1Ag6TZnCpU GmTP2WAwPr8zXbPkkJtMVREJC4FhYpVl+kOJoeEmCLwPO8nsHfke1VruTpr0di8J QzT3gntunIw4kDKj+OyrPIsZw6knQEIELyUrxb9ewuHaifd1XPn3ve7Ya6WnueF/ qGQL4pa8J6w6uOwF60Q2iB+hAyCjPmbsprnqSwx45AYlDtGaNcbbarufqWE9y9QE bGw+vVeclo8GW2Hp7OrNaSYamKglJSpuMJi4vpNc5qMo1ENFC4VeJXGpr8UWjBFT yN9rfXC062nKz4BX742gvwKRwLSWWPccmXTlFSFjBF6xFe92mWIp8dTCywIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFCllk7dH52pWSSURuzYS5NXky+fsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2M1OGJk Yy0xNGU3LTQ5OWMtOWQ5Yy0xYjdjYmIwOGQ3M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvYzU4YmRj LTE0ZTctNDk5Yy05ZDljLTFiN2NiYjA4ZDczZi8xL0tXV1R0MGZuYWxaSkpSRzdO aExrMWVUTDUtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFJXIgAwQCK/ugAwQDXpowAwQCZ/xYAwQDsGQg AwQCuQ5cMA0EAgACMAcDBQMqAMzAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwDg WQIDAOjIAgMA7C0CAwDz9jANBgkqhkiG9w0BAQsFAAOCAQEAQ61UO5oDvd4A5qXR bAyz74qdR2xgt82wXLNnFjRmINt6Um4LMza8oD27HJKlo8KAo1V9UnfREMFFN7v3 HCcOnVj4GRkjjv/7aoX4ywQsFFogpQW7Xu/3FGw6L4SpDDjHs9evSq6uYwt+3HTz 1Oh6Rx9JCZiY4p91qIAisXTUdGhKBSYzsG+mqBE9pFJesEjmfSNNaYstYjzc3WKs tiETa89IgtAMMllXd7W3nddADbXw/+lP6f+0sP81MXf6vM+qcuQqRjvsNvuc3wbC b96/99aF2C/kULSMh3AK+f+WWGMw3dQida7DVjnIcv4yBSoI6JBRrgdf7fjsrES3 +MLUOA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:25:03 2026 by rpki-client