This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer (raw, json) Hash identifier: YIStHzaeZPJjZpX07poh0Kh+OZsTwgQUuSCCHZxiFGk= Subject key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759170FE6EA13F9C9304891362D1CE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.83.208.0/22 IP: 185.80.244.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:17:0f:e6:ea:13:f9:c9:30:48:91:36:2d:1c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:c0:49:fd:4b:b7:e2:99:91:38:f8:0f:6d: f1:c4:c2:2c:0b:f9:dd:be:d9:7c:3b:8c:1a:7d:25: a0:47:cf:08:f2:ae:17:17:69:14:45:21:02:5e:48: c7:6c:09:2f:b1:86:2c:4b:2e:d8:f1:f3:4c:71:3b: 8e:fa:c3:8d:35:14:3f:7d:1f:73:8a:e3:ad:c6:42: ec:fc:d4:4a:e5:5d:d1:9b:01:62:7b:de:ce:ca:32: 31:43:4f:05:a6:1d:8d:07:57:8b:a6:39:8f:17:d3: 06:35:64:a0:9f:fe:fc:41:3c:af:2f:ae:18:14:0e: 83:f4:92:12:fa:ac:fe:50:14:be:84:32:75:88:8d: 14:0c:b5:7c:f8:57:a2:0c:da:43:63:82:92:11:0f: df:3d:82:31:bc:8c:85:00:c6:0c:0d:bc:1f:dc:c1: f1:ac:79:d7:10:5c:21:c3:b9:4f:fb:7d:a5:14:90: 9c:ec:3e:74:0b:de:97:d9:e0:3b:4f:65:b6:7d:dd: f3:c5:44:c6:19:28:40:94:1d:8e:00:1a:6f:95:f3: f1:c9:28:f0:cf:79:91:5e:8d:25:f7:ca:43:04:55: d6:39:14:91:00:0f:19:c0:9b:b1:85:02:98:9e:ee: d6:b6:de:d0:22:a7:1a:b4:85:17:eb:2e:cd:37:5d: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.208.0/22 185.80.244.0/24 Signature Algorithm: sha256WithRSAEncryption 93:1a:eb:f1:cb:bf:bc:4a:b0:06:bb:4d:66:ab:6c:56:20:30: 07:90:d3:c4:cc:ea:49:ee:03:84:7a:ab:fe:24:dd:e6:b2:4b: d8:21:e8:e1:4f:d6:77:19:88:0b:7a:aa:ed:12:cf:64:eb:32: 79:6c:ce:f8:26:29:14:22:2e:1c:fb:b5:cb:bd:14:ad:42:e4: 5d:d0:77:5b:7c:2c:bd:98:58:3a:44:c1:45:2b:71:c4:11:49: bb:d3:ab:47:8b:a5:5c:a3:8d:fe:dd:65:6d:8c:d4:a4:07:71: 5f:3f:e7:29:66:c7:25:23:fe:ab:bf:83:a5:a1:7c:f6:22:9d: 5a:84:a4:61:0e:2c:92:26:ad:c2:dc:cf:e5:1a:a3:c6:a1:a0: dd:90:d3:f9:03:d5:42:0d:0e:fd:c6:4e:c2:a3:63:f3:17:30: fd:71:d1:21:cc:e5:48:46:a5:e5:4b:1d:5c:4f:21:28:b3:c0: 8b:35:65:65:12:59:ee:1b:8e:17:1b:ef:cb:66:f3:55:6f:1d: de:e6:32:1b:40:07:2f:f8:99:11:19:f4:e8:b8:98:f1:62:23: 92:02:af:81:54:1b:e8:01:c3:6e:3a:59:ae:ad:8e:e2:50:96: 5b:3a:82:46:6e:03:e7:cd:80:33:28:49:89:c4:85:32:16:27: e8:37:9b:46 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt3WRcP5uoT+ckwSJE2LRzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmU1ODhkYTRhNmNmMDQxM2ZmYjMwMTZiZTQ2NzhlYzk5YTk4ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UbASf1Lt+KZkTj4D23xxMIsC/nd vtl8O4wafSWgR88I8q4XF2kURSECXkjHbAkvsYYsSy7Y8fNMcTuO+sONNRQ/fR9z iuOtxkLs/NRK5V3RmwFie97OyjIxQ08Fph2NB1eLpjmPF9MGNWSgn/78QTyvL64Y FA6D9JIS+qz+UBS+hDJ1iI0UDLV8+FeiDNpDY4KSEQ/fPYIxvIyFAMYMDbwf3MHx rHnXEFwhw7lP+32lFJCc7D50C96X2eA7T2W2fd3zxUTGGShAlB2OABpvlfPxySjw z3mRXo0l98pDBFXWORSRAA8ZwJuxhQKYnu7Wtt7QIqcatIUX6y7NN11cWQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHLliNpKbPBBP/swFr5GeOyZqY35MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzMzZmIw Zi04Mjc1LTQ0NjEtOGU3MC1mNmMyY2Q2N2Y4NTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMzNmYjBm LTgyNzUtNDQ2MS04ZTcwLWY2YzJjZDY3Zjg1OS8xL2N1V0kya3BzOEVFXy16QVd2 a1o0N0ptcGpmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLVPQAwQAuVD0MA0GCSqGSIb3DQEBCwUAA4IB AQCTGuvxy7+8SrAGu01mq2xWIDAHkNPEzOpJ7gOEeqv+JN3mskvYIejhT9Z3GYgL eqrtEs9k6zJ5bM74JikUIi4c+7XLvRStQuRd0HdbfCy9mFg6RMFFK3HEEUm706tH i6Vco43+3WVtjNSkB3FfP+cpZsclI/6rv4OloXz2Ip1ahKRhDiySJq3C3M/lGqPG oaDdkNP5A9VCDQ79xk7Co2PzFzD9cdEhzOVIRqXlSx1cTyEos8CLNWVlElnuG44X G+/LZvNVbx3e5jIbQAcv+JkRGfTouJjxYiOSAq+BVBvoAcNuOlmurY7iUJZbOoJG bgPnzYAzKEmJxIUyFifoN5tG -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:40 2026 by rpki-client