This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer File: Kw51nA6mfY_3IqrIh8fszs3tPsc.cer (raw, json) Hash identifier: nVBXXpFnSsg4MVFBUCaBJMRm6NzFAGFOHsaEpBLpHew= Subject key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECCCD729D06938FBFDE934FE0D180E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31007 IP: 91.235.114.0/23 IP: 194.6.249.0/24 IP: 2001:67c:2cc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cc:d7:29:d0:69:38:fb:fd:e9:34:fe:0d:18:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:5e:93:28:0a:88:d2:49:39:be:36:56:4b: bb:63:35:22:43:ed:53:75:e4:38:d8:df:73:e7:38: f2:c2:94:72:cd:dc:09:1e:77:91:fe:d2:aa:d2:52: 66:ac:f8:21:c3:a4:7e:05:e9:b6:4e:b0:54:62:31: 23:ec:f7:fa:1c:2e:36:f1:b9:09:9c:6c:2f:4e:cd: d1:3e:c7:a7:e8:eb:b2:f0:e1:71:c9:9c:f0:a1:85: ea:95:59:2e:b9:8a:4f:ab:17:69:7b:cc:45:aa:ca: e1:22:31:c5:74:3c:f6:9c:d6:b2:22:b1:ba:3c:ce: de:b1:89:00:53:ca:41:88:85:fc:b9:4b:15:57:70: d3:f5:ea:dd:fe:e4:fc:7a:9b:3c:d9:2e:f5:bd:30: a7:e1:26:69:33:15:59:0c:57:15:7f:75:f5:b9:a3: 54:a5:d6:7c:e6:3b:aa:06:b8:9b:b1:91:fd:dc:d2: 42:f6:4a:0c:a6:d0:5a:d2:83:71:0a:b2:2e:43:61: 94:f7:aa:82:9e:e0:79:9c:7e:e6:42:b8:49:99:f4: f8:c2:11:a3:c7:2d:c6:83:17:97:ed:e9:c2:e0:b8: d0:c5:02:79:7a:1c:bf:0c:34:ec:57:ac:4e:cb:68: 99:ad:c8:9d:46:b8:70:ae:4c:4a:b3:b9:0d:3e:bc: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.114.0/23 194.6.249.0/24 IPv6: 2001:67c:2cc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31007 Signature Algorithm: sha256WithRSAEncryption 87:0c:6f:27:b1:df:b2:ff:0a:7b:d8:14:69:6b:3c:6d:18:3d: 2f:fd:70:b3:a0:5e:6e:19:7a:a5:ac:1c:45:2e:05:49:b1:26: 9d:ed:7a:73:4d:76:46:d1:2d:63:d8:72:b9:42:87:fa:c1:50: 25:1e:64:82:2d:a3:0e:96:11:ce:69:ab:84:8f:9a:bb:5e:bd: 2d:5b:4e:d5:a0:09:13:1b:ae:ee:fd:06:66:c6:c7:70:c0:1b: d0:a2:b6:00:6f:b4:7f:b6:cf:9b:93:21:12:f6:af:6b:cc:3b: 19:70:ea:e4:7b:f1:ab:36:27:39:9e:ab:da:f1:93:fc:91:a8: 6d:84:04:76:92:57:30:89:75:8a:9a:81:10:c4:13:fb:1f:c0: 00:4a:c7:25:84:6a:14:3e:c7:a6:97:2a:55:47:f5:24:0f:b3: 72:7e:f1:ac:f3:b0:76:a2:eb:49:5f:09:67:91:9b:3c:30:ad: f0:d8:30:c1:e2:80:7e:6d:b8:7e:86:33:83:02:c8:15:a4:69: f1:44:12:fc:6a:27:ff:d6:ed:85:68:88:e1:2a:48:da:23:7b: ed:c8:46:4d:ba:9c:59:d7:fe:5c:e2:6e:57:15:3e:4a:e8:6d: 96:25:6a:12:c3:06:55:06:ca:fd:d6:fc:49:da:38:b1:81:9e: e8:1a:79:d7 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt57MzXKdBpOPv96TT+DRgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjBlNzU5YzBlYTY3ZDhmZjcyMmFhYzg4N2M3ZWNjZWNkZWQzZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPFekygKiNJJOb42Vku7YzUiQ+1T deQ42N9z5zjywpRyzdwJHneR/tKq0lJmrPghw6R+Bem2TrBUYjEj7Pf6HC428bkJ nGwvTs3RPsen6Ouy8OFxyZzwoYXqlVkuuYpPqxdpe8xFqsrhIjHFdDz2nNayIrG6 PM7esYkAU8pBiIX8uUsVV3DT9erd/uT8eps82S71vTCn4SZpMxVZDFcVf3X1uaNU pdZ85juqBribsZH93NJC9koMptBa0oNxCrIuQ2GU96qCnuB5nH7mQrhJmfT4whGj xy3GgxeX7enC4LjQxQJ5ehy/DDTsV6xOy2iZrcidRrhwrkxKs7kNPryDyQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFCsOdZwOpn2P9yKqyIfH7M7N7T7HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2Q0ZGIw My1lOGFkLTQwMjctOWNlOC01NWUxZmY3ZjMyZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvZDRkYjAz LWU4YWQtNDAyNy05Y2U4LTU1ZTFmZjdmMzJmOS8xL0t3NTFuQTZtZllfM0lxcklo OGZzenMzdFBzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQBW+tyAwQAwgb5MA8EAgACMAkDBwAgAQZ8Asww GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICeR8wDQYJKoZIhvcNAQELBQADggEBAIcM byex37L/CnvYFGlrPG0YPS/9cLOgXm4ZeqWsHEUuBUmxJp3tenNNdkbRLWPYcrlC h/rBUCUeZIItow6WEc5pq4SPmrtevS1bTtWgCRMbru79BmbGx3DAG9CitgBvtH+2 z5uTIRL2r2vMOxlw6uR78as2Jzmeq9rxk/yRqG2EBHaSVzCJdYqagRDEE/sfwABK xyWEahQ+x6aXKlVH9SQPs3J+8azzsHai60lfCWeRmzwwrfDYMMHigH5tuH6GM4MC yBWkafFEEvxqJ//W7YVoiOEqSNoje+3IRk26nFnX/lziblcVPkrobZYlahLDBlUG yv3W/EnaOLGBnugaedc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:39 2026 by rpki-client