This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer File: _kWQZfcoEX0ccLjFTNqPRh24BHU.cer (raw, json) Hash identifier: hgf380AeuNUpMz7Cdhid5hmEeLNHX/VD0+bKIwUfHtc= Subject key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81EBEE8F76BB2891E2EDD6B264FFDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198244 IP: 91.232.232.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:eb:ee:8f:76:bb:28:91:e2:ed:d6:b2:64:ff:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe459065f728117d1c70b8c54cda8f461db80475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:8a:23:99:05:7f:6c:9d:1b:32:3f:71:3d: ce:7a:5a:0c:f9:b0:03:72:54:f3:ed:54:08:78:fd: 7b:90:df:65:0f:65:0f:ae:70:58:32:1a:dc:67:31: 8c:da:09:95:dc:97:02:68:82:11:c5:08:a3:47:05: 24:b0:7e:f1:fa:79:2c:f4:a9:8c:e6:2c:34:48:86: 6f:74:84:ae:6c:87:6c:82:ae:f3:4e:d0:4f:11:0b: 7e:cb:b7:0a:9f:a2:1a:54:d2:7b:7a:ba:1d:21:47: fb:64:f6:4d:ec:79:3b:cd:ef:b6:4c:95:4f:39:67: 76:63:f5:51:70:a3:a4:a1:a0:c9:5d:91:af:01:eb: d2:73:9e:80:96:9b:74:15:79:5d:8e:ce:0c:8b:ec: 0f:7e:2c:7a:c0:23:00:fd:c8:a7:9b:58:1c:c8:11: 14:70:2c:27:28:86:de:18:9e:c1:ad:62:8d:49:90: e8:17:63:ce:df:0f:e9:b0:78:6e:04:35:46:21:81: 69:04:00:fd:cc:ea:f4:09:8c:77:c7:d5:6f:32:fe: 18:48:1d:c2:89:f9:4b:b7:7e:76:ee:cb:96:bb:f2: d9:76:91:b5:f0:d9:4a:b6:dd:36:73:c7:c1:f1:1a: 4b:e6:5a:b1:bb:95:a5:15:38:c0:e1:89:0b:43:c1: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.232.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198244 Signature Algorithm: sha256WithRSAEncryption 71:e0:74:ef:8c:2b:66:8a:8d:33:73:b5:9d:dc:13:d3:42:99: 58:a5:37:b9:69:5b:fa:b6:87:ed:63:2c:d8:10:7d:2e:42:cd: 36:93:c5:33:32:fc:32:fc:a9:32:ab:dc:6c:49:61:3a:3a:d1: 0e:cc:67:8a:6a:7f:09:bc:f5:56:ca:13:17:48:6d:05:15:55: b3:f6:8e:e6:16:4e:ac:52:94:f5:39:73:ba:f9:1f:e2:06:34: a8:3f:5b:3c:c3:9b:4e:55:bc:a4:ea:8b:f0:bb:d1:9d:20:74: b5:76:0d:81:2e:bd:f6:00:4a:b7:3f:19:cf:b5:27:df:7b:30: 2c:30:64:ab:c8:2c:95:b2:a2:2a:03:a8:d3:53:ac:76:e3:a5: 72:3e:bb:13:cf:56:56:30:14:b4:c2:60:39:78:d6:0f:af:dc: ed:e7:d0:0f:1b:0e:1a:de:83:91:55:ff:16:18:80:f4:fd:a8: 15:ce:e0:c8:9d:6d:71:b7:b4:7e:85:ff:0c:03:31:03:8c:cb: 2b:58:2f:f6:e0:1d:35:cf:c1:2e:4c:a7:27:af:6c:05:be:fb: 2c:3d:83:06:d1:0b:24:00:fb:19:b2:92:e4:de:fc:a0:c6:02: 40:15:32:73:99:9b:27:ce:e1:59:75:cb:ac:d3:f8:c6:3b:07: ec:cb:94:76 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gevuj3a7KJHi7dayZP/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTQ1OTA2NWY3MjgxMTdkMWM3MGI4YzU0Y2RhOGY0NjFkYjgwNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnGKI5kFf2ydGzI/cT3OeloM+bAD clTz7VQIeP17kN9lD2UPrnBYMhrcZzGM2gmV3JcCaIIRxQijRwUksH7x+nks9KmM 5iw0SIZvdISubIdsgq7zTtBPEQt+y7cKn6IaVNJ7erodIUf7ZPZN7Hk7ze+2TJVP OWd2Y/VRcKOkoaDJXZGvAevSc56Alpt0FXldjs4Mi+wPfix6wCMA/cinm1gcyBEU cCwnKIbeGJ7BrWKNSZDoF2PO3w/psHhuBDVGIYFpBAD9zOr0CYx3x9VvMv4YSB3C iflLt3527suWu/LZdpG18NlKtt02c8fB8RpL5lqxu5WlFTjA4YkLQ8H+eQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFP5FkGX3KBF9HHC4xUzaj0YduAR1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzA2MDIy Mi01NzQxLTRlMjMtOTdkNi1kNjNhMjNjZjExNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMDYwMjIy LTU3NDEtNGUyMy05N2Q2LWQ2M2EyM2NmMTE0Yy8xL19rV1FaZmNvRVgwY2NMakZU TnFQUmgyNEJIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+joMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMGZDANBgkqhkiG9w0BAQsFAAOCAQEAceB074wrZoqNM3O1ndwT00KZWKU3uWlb +raH7WMs2BB9LkLNNpPFMzL8MvypMqvcbElhOjrRDsxnimp/Cbz1VsoTF0htBRVV s/aO5hZOrFKU9Tlzuvkf4gY0qD9bPMObTlW8pOqL8LvRnSB0tXYNgS699gBKtz8Z z7Un33swLDBkq8gslbKiKgOo01OsduOlcj67E89WVjAUtMJgOXjWD6/c7efQDxsO Gt6DkVX/FhiA9P2oFc7gyJ1tcbe0foX/DAMxA4zLK1gv9uAdNc/BLkynJ69sBb77 LD2DBtELJAD7GbKS5N78oMYCQBUyc5mbJ87hWXXLrNP4xjsH7MuUdg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:05 2026 by rpki-client