This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer File: kUXq2NPxKEQCtvdWFKhyV1A84bw.cer (raw, json) Hash identifier: q4YRsIsY8fTctrk5P7rm/VPyeCbIais9gYyq6aoB1Wc= Subject key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B16A2F5FD0755E048B1150D491DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.81.140.0/24 IP: 86.105.15.0/24 IP: 86.106.72.0/23 IP: 89.32.154.0/23 IP: 89.32.198.0/23 IP: 89.34.220.0/23 IP: 89.36.77.0/24 IP: 89.36.89.0/24 IP: 89.36.193.0/24 IP: 89.38.108.0/22 IP: 89.39.188.0/24 IP: 89.40.162.0/23 IP: 89.40.200.0/24 IP: 89.41.25.0/24 IP: 89.43.160.0/22 IP: 89.45.32.0/23 IP: 89.45.210.0/23 IP: 89.47.60.0/23 IP: 89.47.244.0/23 IP: 93.113.168.0/23 IP: 93.113.222.0/23 IP: 93.114.70.0/23 IP: 93.115.98.0/23 IP: 94.177.80.0/21 IP: 94.177.120.0/23 IP: 185.32.24.0/22 IP: 188.208.30.0/24 IP: 188.212.128.0/23 IP: 188.214.26.0/24 IP: 188.215.234.0/24 IP: 188.241.180.0/23 IP: 188.241.195.0/24 IP: 195.191.124.0/23 IP: 2a04:5280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b1:6a:2f:5f:d0:75:5e:04:8b:11:50:d4:91:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9145ead8d3f1284402b6f75614a87257503ce1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:80:19:99:66:72:ea:33:51:fc:85:a9:0d: 50:12:7a:7f:3f:98:d0:5a:a3:13:0e:6b:52:ec:a0: b4:b1:be:9d:76:59:9b:5f:83:de:63:de:42:05:fb: e4:80:ad:00:74:8b:b7:e1:dc:d8:ac:2d:52:47:56: 51:61:61:31:72:12:f4:c4:6a:09:f4:16:45:84:54: 1f:81:cb:c2:ae:04:ba:cc:0d:35:64:0f:95:c9:4b: dd:61:e5:fe:30:79:54:84:9d:ee:d7:3d:1a:63:60: 4d:2f:88:67:0a:4a:b7:f2:36:9a:56:2e:2e:58:3f: ec:37:1f:fa:8d:92:4c:98:31:a5:ea:24:3f:17:06: b9:db:5b:e6:38:00:03:ff:f9:f6:3a:45:e3:5b:cd: 8c:6d:21:10:56:11:bf:5f:49:2b:8d:6f:b7:b1:44: db:de:2f:e9:c7:ed:39:d3:cb:d9:e0:5c:2f:d8:e9: 0e:b0:f4:59:6c:85:d2:97:80:43:06:fa:7e:13:98: 36:9b:e4:9a:d6:b3:a7:e7:b9:a7:67:14:f1:cc:c6: 5d:32:56:f0:d6:a8:79:08:4c:fe:ef:bc:6e:8a:70: 85:61:d7:90:4e:ca:8a:77:80:4c:a1:0f:12:3e:06: c4:dd:36:b5:8d:96:f7:6b:1a:30:be:a8:7f:f7:32: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.140.0/24 86.105.15.0/24 86.106.72.0/23 89.32.154.0/23 89.32.198.0/23 89.34.220.0/23 89.36.77.0/24 89.36.89.0/24 89.36.193.0/24 89.38.108.0/22 89.39.188.0/24 89.40.162.0/23 89.40.200.0/24 89.41.25.0/24 89.43.160.0/22 89.45.32.0/23 89.45.210.0/23 89.47.60.0/23 89.47.244.0/23 93.113.168.0/23 93.113.222.0/23 93.114.70.0/23 93.115.98.0/23 94.177.80.0/21 94.177.120.0/23 185.32.24.0/22 188.208.30.0/24 188.212.128.0/23 188.214.26.0/24 188.215.234.0/24 188.241.180.0/23 188.241.195.0/24 195.191.124.0/23 IPv6: 2a04:5280::/29 Signature Algorithm: sha256WithRSAEncryption 2d:87:f9:6b:bc:47:b3:06:3e:5a:9d:0a:c2:f1:53:65:6d:7e: 6e:0a:f5:1d:51:fe:05:73:a8:e9:ce:fd:08:5e:dc:fc:06:5d: ae:18:26:14:14:8c:b4:ad:c4:5c:3d:ae:bc:58:41:cb:53:a3: f1:26:a5:56:5e:1c:bf:20:21:69:b3:ce:fa:79:a7:5d:26:0a: 1f:96:00:89:af:e7:f3:9f:1c:76:49:ae:32:e5:c3:02:e2:74: 58:d7:ae:ad:57:82:de:94:db:63:27:34:33:fb:54:9f:67:5e: f4:7b:58:b7:f0:b9:54:43:f0:02:48:7c:62:1e:e8:26:6e:d1: 6c:99:c1:9c:d4:44:78:fc:a1:32:63:fb:79:9a:6d:fc:0f:58: f2:78:52:89:da:bc:51:e7:f5:aa:7f:e0:55:19:41:b4:ea:6b: 41:d6:62:1c:a9:0a:37:d9:a4:64:7b:86:63:27:8d:ea:1e:74: 2f:93:31:9c:4d:41:b4:35:5a:e5:00:6d:50:ba:08:f2:0f:51: d2:76:3e:5e:c9:2b:5b:54:61:6c:4d:04:8a:b1:cf:ee:77:19: c6:ac:a9:5d:e0:7e:b0:20:b6:de:04:56:d2:a0:52:53:28:a9: 11:db:c0:cb:9c:bc:c2:2c:bd:e1:80:ed:94:3f:c6:14:1e:c7: 38:d7:48:62 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISAZt6yLFqL1/QdV4EixFQ1JHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQ1ZWFkOGQzZjEyODQ0MDJiNmY3NTYxNGE4NzI1NzUwM2NlMWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvSAGZlmcuozUfyFqQ1QEnp/P5jQ WqMTDmtS7KC0sb6ddlmbX4PeY95CBfvkgK0AdIu34dzYrC1SR1ZRYWExchL0xGoJ 9BZFhFQfgcvCrgS6zA01ZA+VyUvdYeX+MHlUhJ3u1z0aY2BNL4hnCkq38jaaVi4u WD/sNx/6jZJMmDGl6iQ/Fwa521vmOAAD//n2OkXjW82MbSEQVhG/X0krjW+3sUTb 3i/px+0508vZ4Fwv2OkOsPRZbIXSl4BDBvp+E5g2m+Sa1rOn57mnZxTxzMZdMlbw 1qh5CEz+77xuinCFYdeQTsqKd4BMoQ8SPgbE3Ta1jZb3axowvqh/9zLWBwIDAQAB o4IDWDCCA1QwHQYDVR0OBBYEFJFF6tjT8ShEArb3VhSocldQPOG8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2E1MjM1 Zi02MmZiLTRhYmItODAzNy0yYWQxOTUyNjRjNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYTUyMzVm LTYyZmItNGFiYi04MDM3LTJhZDE5NTI2NGM3Mi8xL2tVWHEyTlB4S0VRQ3R2ZFdG S2h5VjFBODRidy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHyBggrBgEF BQcBBwEB/wSB4jCB3zCBzQQCAAEwgcYDBABNUYwDBABWaQ8DBAFWakgDBAFZIJoD BAFZIMYDBAFZItwDBABZJE0DBABZJFkDBABZJMEDBAJZJmwDBABZJ7wDBAFZKKID BABZKMgDBABZKRkDBAJZK6ADBAFZLSADBAFZLdIDBAFZLzwDBAFZL/QDBAFdcagD BAFdcd4DBAFdckYDBAFdc2IDBANesVADBAFesXgDBAK5IBgDBAC80B4DBAG81IAD BAC81hoDBAC81+oDBAG88bQDBAC88cMDBAHDv3wwDQQCAAIwBwMFAyoEUoAwDQYJ KoZIhvcNAQELBQADggEBAC2H+Wu8R7MGPlqdCsLxU2Vtfm4K9R1R/gVzqOnO/Qhe 3PwGXa4YJhQUjLStxFw9rrxYQctTo/EmpVZeHL8gIWmzzvp5p10mCh+WAImv5/Of HHZJrjLlwwLidFjXrq1Xgt6U22MnNDP7VJ9nXvR7WLfwuVRD8AJIfGIe6CZu0WyZ wZzURHj8oTJj+3mabfwPWPJ4UonavFHn9ap/4FUZQbTqa0HWYhypCjfZpGR7hmMn jeoedC+TMZxNQbQ1WuUAbVC6CPIPUdJ2Pl7JK1tUYWxNBIqxz+53GcasqV3gfrAg tt4EVtKgUlMoqRHbwMucvMIsveGA7ZQ/xhQexzjXSGI= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:34 2026 by rpki-client