This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer File: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer (raw, json) Hash identifier: EaJSnpCCqX3k5s0HkJKhppcZLHPL34kJ0xTHydI8f6A= Subject key identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9BA8FC95DF272282853C2E62D1B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48215 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9b:a8:fc:95:df:27:22:82:85:3c:2e:62:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:f9:e2:c6:16:5b:38:8a:cb:18:41:cb:d6: 22:a0:8d:8c:17:3a:e4:2c:cb:f3:31:0c:21:07:3f: e1:38:3f:d7:aa:62:1d:af:43:a4:07:fe:e9:0d:fa: 6e:0d:48:c5:ba:a9:33:d2:0b:38:ce:1f:b7:77:96: 6a:30:97:1c:ae:69:c7:c9:9b:c7:f9:6f:fc:d5:a6: bd:fe:51:eb:a8:e9:d5:e8:0e:95:5b:5f:b2:fc:23: 06:26:18:72:24:74:f8:5a:ee:47:ca:b2:fb:92:c6: c8:3c:76:0a:c4:28:e9:9d:a9:d8:f5:c2:7f:94:91: 48:1a:01:a7:97:66:61:1e:a9:77:17:98:be:aa:51: 81:45:b5:0e:9d:a4:ff:6a:84:42:0b:2b:16:c6:44: 50:41:7d:5c:82:ff:55:39:b3:bb:bd:89:8f:60:f2: 69:44:c4:20:c8:60:71:c8:3f:bc:89:d4:6d:f7:88: c6:01:7f:91:8e:e5:d7:e8:79:22:22:7d:4b:0f:cb: e5:24:34:bf:05:49:37:c3:49:6a:4e:87:36:53:ab: c8:52:67:7b:d1:6f:cd:6a:6d:c8:85:3b:86:e6:5f: 36:78:a3:c2:06:6a:d1:37:e8:d1:ee:fc:2f:e1:7d: ea:58:f0:a7:a8:3a:eb:7b:0b:7f:f9:fe:b9:3b:d3: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48215 Signature Algorithm: sha256WithRSAEncryption 4e:69:04:c5:b3:ed:f3:9b:87:d1:c4:7d:58:4a:62:c1:25:8b: fa:dc:ea:21:c0:1f:c6:5a:bf:33:2e:86:2b:f7:23:b2:e7:c4: 25:96:61:65:e9:e7:d4:37:ad:cd:8d:ac:81:25:bb:eb:92:79: bc:a2:62:53:0c:c8:6e:ac:c5:ee:f9:15:7c:d2:c2:d8:71:55: 41:eb:92:7f:bc:0d:56:0e:10:87:b5:05:8d:8e:04:cf:d7:f9: 0a:89:1e:4a:46:02:24:60:74:0e:54:bb:e8:c9:56:93:c1:32: c3:e2:a0:90:a5:55:79:e5:90:1b:9e:af:45:b1:b4:5d:da:58: c8:04:6a:f5:29:92:a2:96:fd:52:14:2f:62:a2:bd:e1:d3:b8: 94:da:b5:40:82:f3:e1:3a:b6:c7:1d:bb:45:ce:47:07:32:cc: fb:79:bb:32:82:47:c1:a9:27:dd:81:20:7f:94:40:d7:30:57: 7f:36:d1:22:99:b3:75:c8:ed:81:80:7f:bf:a3:4f:0c:12:dc: 84:ab:39:c3:c8:21:1b:9c:14:72:f8:3a:13:60:d2:77:6f:2a: 9b:f3:9d:e7:85:e3:66:3f:8a:61:da:9a:fd:8b:0a:d1:3e:12: b8:f8:01:77:55:62:34:31:82:d4:e0:54:88:11:26:fc:18:e9: 87:57:24:2b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt265uo/JXfJyKChTwuYtGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGY1OTI4Yzc1MmFkOWEwOGNmZWIxYjg4ZjQ2M2MzYzBkZDJlODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUD54sYWWziKyxhBy9YioI2MFzrk LMvzMQwhBz/hOD/XqmIdr0OkB/7pDfpuDUjFuqkz0gs4zh+3d5ZqMJccrmnHyZvH +W/81aa9/lHrqOnV6A6VW1+y/CMGJhhyJHT4Wu5HyrL7ksbIPHYKxCjpnanY9cJ/ lJFIGgGnl2ZhHql3F5i+qlGBRbUOnaT/aoRCCysWxkRQQX1cgv9VObO7vYmPYPJp RMQgyGBxyD+8idRt94jGAX+RjuXX6HkiIn1LD8vlJDS/BUk3w0lqToc2U6vIUmd7 0W/Nam3IhTuG5l82eKPCBmrRN+jR7vwv4X3qWPCnqDrrewt/+f65O9OptwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJD1kox1KtmgjP6xuI9GPDwN0uhdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzMxYTIw YS03N2QwLTRhYzgtYTA5Zi0wNGE2Y2Q4MTZhMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMzFhMjBh LTc3ZDAtNGFjOC1hMDlmLTA0YTZjZDgxNmEwMy8xL2tQV1NqSFVxMmFDTV9yRzRq MFk4UEEzUzZGMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8VzANBgkqhkiG9w0BAQsFAAOCAQEATmkExbPt85uH 0cR9WEpiwSWL+tzqIcAfxlq/My6GK/cjsufEJZZhZenn1DetzY2sgSW765J5vKJi UwzIbqzF7vkVfNLC2HFVQeuSf7wNVg4Qh7UFjY4Ez9f5CokeSkYCJGB0DlS76MlW k8Eyw+KgkKVVeeWQG56vRbG0XdpYyARq9SmSopb9UhQvYqK94dO4lNq1QILz4Tq2 xx27Rc5HBzLM+3m7MoJHwakn3YEgf5RA1zBXfzbRIpmzdcjtgYB/v6NPDBLchKs5 w8ghG5wUcvg6E2DSd28qm/Od54XjZj+KYdqa/YsK0T4SuPgBd1ViNDGC1OBUiBEm /Bjph1ckKw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:13 2026 by rpki-client