This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer File: kW-Aw18gLrAnZkGb-30oISX_4Vg.cer (raw, json) Hash identifier: +A+9daZQBTm//PTNWdlEDGPAa2NlNIXjz3dsNpL2qTg= Subject key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F88132EFFD6612E7D353D371BBD08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58273 IP: 5.83.8.0/21 IP: 148.252.16.0/20 IP: 185.89.32.0/22 IP: 185.159.91.0/24 IP: 185.201.32.0/22 IP: 194.113.44.0/22 IP: 2a01:6240::/29 IP: 2a10:cb80::/29 IP: 2a14:8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:88:13:2e:ff:d6:61:2e:7d:35:3d:37:1b:bd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=916f80c35f202eb02766419bfb7d282125ffe158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:f0:be:e8:d9:de:ef:56:8e:ef:9a:21:11: 04:07:00:42:d3:cc:3e:17:79:f5:43:d9:bb:d6:3a: 7b:aa:f9:27:92:6d:f7:c0:db:17:49:ab:04:9d:e8: 63:26:11:96:f0:3b:77:37:a5:7e:a9:8f:0a:b9:9b: 49:c9:f4:17:79:33:67:38:27:a1:cb:03:0d:9c:ea: 7e:21:06:77:2b:02:a2:39:da:97:4c:41:6a:28:67: fc:e8:94:be:f8:ac:94:a8:eb:92:ef:dd:2b:45:a3: 4f:9e:9f:c3:55:7d:77:bb:99:da:58:d6:d7:2e:70: 3d:c3:41:3b:2b:58:ec:5d:c5:19:92:9d:21:48:eb: 15:90:a1:59:96:d1:9a:2d:be:2a:f1:83:32:03:6a: 6a:55:2a:51:13:2e:e0:48:f4:08:8f:71:b4:74:d7: 76:4f:36:d6:0a:39:3d:88:56:36:23:74:c0:47:04: 68:a7:6e:6e:33:84:ed:12:85:05:c3:44:9d:64:99: af:99:be:4c:f6:c6:76:19:62:e1:f8:95:fc:a4:c7: 9f:1d:02:f2:ed:f5:b0:38:88:fd:46:11:77:1d:8f: bd:a2:2e:13:c6:30:b0:d1:97:74:d3:d1:f9:61:9c: b1:59:c1:a7:41:93:9f:45:8a:6b:b5:89:69:c6:5d: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.8.0/21 148.252.16.0/20 185.89.32.0/22 185.159.91.0/24 185.201.32.0/22 194.113.44.0/22 IPv6: 2a01:6240::/29 2a10:cb80::/29 2a14:8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58273 Signature Algorithm: sha256WithRSAEncryption 39:e2:63:fd:44:3f:b6:cf:9e:ed:ff:1f:d3:e7:a4:d2:58:68: 18:d7:1c:ee:49:c0:bb:cf:13:62:30:e9:89:81:31:25:90:f7: 97:d5:6b:41:fe:de:c7:b7:43:f8:4d:f1:eb:93:5c:b4:8f:a7: 90:bd:7b:61:1c:21:57:7b:4c:94:ab:f8:da:ec:41:4a:2b:63: a3:98:44:ee:8f:df:6d:f0:3a:dc:cb:d1:bc:6b:a7:c3:f1:a8: 1e:e8:92:cc:a4:ef:dc:c9:d7:f2:d2:aa:62:e4:05:0b:ed:51: d2:a1:50:89:a7:10:35:4a:93:d4:eb:ae:28:0e:13:8c:5b:f5: fd:da:a9:39:ba:8b:2c:f1:77:40:07:46:4b:6f:12:44:a2:70: 86:89:b4:5f:8a:98:a5:b0:06:d1:e1:70:ab:87:6a:29:5b:d8: b0:cb:52:92:fb:18:db:d2:0f:00:74:05:af:59:e8:54:ff:d4: ca:21:67:91:de:a1:11:d2:41:76:63:75:be:5e:f7:40:44:15: 51:d4:53:bc:b8:c7:59:67:a6:e3:65:54:ff:2a:da:41:68:4f: 7c:82:35:08:fa:10:90:0b:94:72:c3:b6:0c:71:36:d1:94:2c: 37:19:ce:eb:e0:af:b5:9d:70:44:bd:5b:5a:02:4c:3c:b1:29: 9f:6d:e2:8d -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt8f4gTLv/WYS59NT03G70IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTZmODBjMzVmMjAyZWIwMjc2NjQxOWJmYjdkMjgyMTI1ZmZlMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZfwvujZ3u9Wju+aIREEBwBC08w+ F3n1Q9m71jp7qvknkm33wNsXSasEnehjJhGW8Dt3N6V+qY8KuZtJyfQXeTNnOCeh ywMNnOp+IQZ3KwKiOdqXTEFqKGf86JS++KyUqOuS790rRaNPnp/DVX13u5naWNbX LnA9w0E7K1jsXcUZkp0hSOsVkKFZltGaLb4q8YMyA2pqVSpREy7gSPQIj3G0dNd2 TzbWCjk9iFY2I3TARwRop25uM4TtEoUFw0SdZJmvmb5M9sZ2GWLh+JX8pMefHQLy 7fWwOIj9RhF3HY+9oi4TxjCw0Zd009H5YZyxWcGnQZOfRYprtYlpxl24fwIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzhkOWFj MS1kMzVkLTRlMzItYjgzZi1jMTBjYzk1M2JkMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvOGQ5YWMx LWQzNWQtNGUzMi1iODNmLWMxMGNjOTUzYmQxYi8xL2tXLUF3MThnTHJBblprR2It MzBvSVNYXzRWZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTAqBAIAATAkAwQDBVMIAwQElPwQAwQCuVkgAwQAuZ9bAwQCuckg AwQCwnEsMBsEAgACMBUDBQMqAWJAAwUDKhDLgAMFAyoUCMAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAOOhMA0GCSqGSIb3DQEBCwUAA4IBAQA54mP9RD+2z57t/x/T 56TSWGgY1xzuScC7zxNiMOmJgTElkPeX1WtB/t7Ht0P4TfHrk1y0j6eQvXthHCFX e0yUq/ja7EFKK2OjmETuj99t8Drcy9G8a6fD8age6JLMpO/cydfy0qpi5AUL7VHS oVCJpxA1SpPU664oDhOMW/X92qk5uoss8XdAB0ZLbxJEonCGibRfipilsAbR4XCr h2opW9iwy1KS+xjb0g8AdAWvWehU/9TKIWeR3qER0kF2Y3W+XvdARBVR1FO8uMdZ Z6bjZVT/KtpBaE98gjUI+hCQC5Ryw7YMcTbRlCw3Gc7r4K+1nXBEvVtaAkw8sSmf beKN -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:36 2026 by rpki-client