This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer File: kWAz3VV0R5Zb2u-LRySl5308Ba4.cer (raw, json) Hash identifier: BOeacT6gOGLdomHZwJi39WWDPcbgyg9dInwZHLIIVsc= Subject key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A26BB7FD431BCF9740CF8E08A98AB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29574 IP: 194.146.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6b:b7:fd:43:1b:cf:97:40:cf:8e:08:a9:8a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=916033dd557447965bdaef8b4724a5e77d3c05ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:a2:ee:e6:4f:d2:68:d0:f1:56:4a:54:02: 49:e1:f4:7b:07:80:6a:57:1b:e6:c5:a4:6f:27:ec: 7b:4c:ef:3d:92:a9:26:b2:b4:aa:be:6a:2a:7f:98: ae:16:82:8b:6b:fb:06:3b:f2:2e:dd:79:47:17:b0: ad:6b:15:37:13:97:3e:1c:a2:ff:21:6a:a1:18:4e: 97:bd:c7:ad:65:4d:48:1a:31:56:38:7a:51:4b:a0: f5:0e:ee:f9:f0:e5:99:5e:85:ce:e1:5e:01:8b:d9: 56:cd:f5:62:94:ad:05:c9:48:bb:dd:21:a6:38:93: f5:38:49:58:d1:30:fd:cc:dd:ea:50:f1:e7:57:fd: b5:95:61:e8:dd:8b:e2:af:40:10:da:a3:90:44:ba: ed:63:69:95:ef:a8:d7:0c:cf:60:73:53:f0:b8:14: b9:60:af:7f:3e:b1:96:3c:8f:f0:ab:1e:6d:28:3f: ad:f0:af:25:bc:b0:56:fb:a4:07:23:1e:0f:08:bf: a5:5e:d7:35:82:45:d1:d1:83:21:1e:34:04:7f:02: 4e:18:8b:f1:21:77:20:87:ec:0f:54:31:2d:34:3c: dc:37:55:88:0d:37:c8:5d:40:6a:53:8b:92:d4:f8: 31:f6:03:68:ca:c9:f2:e1:95:ca:1e:84:8c:87:b0: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29574 Signature Algorithm: sha256WithRSAEncryption 84:aa:b7:eb:4a:d9:72:68:3f:19:8f:1c:0f:ea:9a:9b:22:28: f4:a8:4d:74:e9:9c:ec:b3:15:16:ca:03:02:2d:19:3b:0b:14: f2:11:70:01:46:40:55:a2:d4:4c:b9:72:36:51:e2:16:58:1e: 1a:a8:3f:10:97:67:39:ad:1a:6f:bc:7c:34:e3:95:91:dd:9c: 9c:ec:85:81:12:d9:a1:45:8a:e3:35:56:65:73:06:62:29:79: a0:a9:59:21:96:d5:20:be:19:0b:27:cc:d1:6d:9b:0f:9b:12: 82:5a:c7:17:d5:c3:29:ea:d2:75:2f:cb:71:55:1a:e9:8a:ae: 3b:5e:93:34:84:ee:42:4d:75:4a:d4:4a:a6:a1:31:64:f9:82: 14:09:7a:e0:ef:c2:6a:da:bb:ff:10:16:7c:98:54:82:9e:77: 3a:f7:50:72:3f:c3:a5:1b:ac:37:8a:f8:ac:ed:0a:1d:cd:7b: ba:8b:b1:0d:c9:3d:5a:d7:6e:d1:3a:d2:c7:93:44:3f:23:b6: f6:c0:6f:f4:27:fa:cd:5d:b7:03:b9:7b:32:72:bf:ee:0f:fe: 6c:8d:a0:10:e0:01:e5:5e:3e:29:bb:33:21:c4:af:54:50:ca: a5:49:07:8c:7c:d4:36:75:f9:66:d1:dd:1f:08:9c:bf:c5:73: 29:37:8f:5d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4omu3/UMbz5dAz44IqYqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTYwMzNkZDU1NzQ0Nzk2NWJkYWVmOGI0NzI0YTVlNzdkM2MwNWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy2i7uZP0mjQ8VZKVAJJ4fR7B4Bq VxvmxaRvJ+x7TO89kqkmsrSqvmoqf5iuFoKLa/sGO/Iu3XlHF7CtaxU3E5c+HKL/ IWqhGE6XvcetZU1IGjFWOHpRS6D1Du758OWZXoXO4V4Bi9lWzfVilK0FyUi73SGm OJP1OElY0TD9zN3qUPHnV/21lWHo3Yvir0AQ2qOQRLrtY2mV76jXDM9gc1PwuBS5 YK9/PrGWPI/wqx5tKD+t8K8lvLBW+6QHIx4PCL+lXtc1gkXR0YMhHjQEfwJOGIvx IXcgh+wPVDEtNDzcN1WIDTfIXUBqU4uS1Pgx9gNoysny4ZXKHoSMh7DdhQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJFgM91VdEeWW9rvi0ckped9PAWuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2JjNTFm NC02MWYyLTRmYWEtYTAyYS02MDI5MzY1Mzk0MDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYmM1MWY0 LTYxZjItNGZhYS1hMDJhLTYwMjkzNjUzOTQwNS8xL2tXQXozVlYwUjVaYjJ1LUxS eVNsNTMwOEJhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwpKMMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnOGMA0GCSqGSIb3DQEBCwUAA4IBAQCEqrfrStlyaD8ZjxwP6pqbIij0qE106Zzs sxUWygMCLRk7CxTyEXABRkBVotRMuXI2UeIWWB4aqD8Ql2c5rRpvvHw045WR3Zyc 7IWBEtmhRYrjNVZlcwZiKXmgqVkhltUgvhkLJ8zRbZsPmxKCWscX1cMp6tJ1L8tx VRrpiq47XpM0hO5CTXVK1EqmoTFk+YIUCXrg78Jq2rv/EBZ8mFSCnnc691ByP8Ol G6w3ivis7QodzXu6i7ENyT1a127ROtLHk0Q/I7b2wG/0J/rNXbcDuXsycr/uD/5s jaAQ4AHlXj4puzMhxK9UUMqlSQeMfNQ2dflm0d0fCJy/xXMpN49d -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:37 2026 by rpki-client