This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kWV5napb3fL1Nt2BtybPrtDmCFs.cer File: kWV5napb3fL1Nt2BtybPrtDmCFs.cer (raw, json) Hash identifier: Bbh80MUyZ1oY/of5zu3wZtCY+vEbVqXmDDy7Gh8ZJQ0= Subject key identifier: 91:65:79:9D:AA:5B:DD:F2:F5:36:DD:81:B7:26:CF:AE:D0:E6:08:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77593B09D24D038C07CDE184E784FA1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213465 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3b:09:d2:4d:03:8c:07:cd:e1:84:e7:84:fa:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9165799daa5bddf2f536dd81b726cfaed0e6085b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:81:62:e3:86:14:91:2f:6b:50:9d:c8:25: 2e:4a:88:06:df:72:60:bb:a8:00:57:a4:28:34:e8: 34:ba:db:57:ed:10:55:02:58:3b:1a:66:e8:68:5d: da:2a:90:ef:a7:13:72:c1:b4:e7:2f:7e:6d:73:5c: 7d:04:e4:28:09:a8:31:9f:eb:00:e3:c8:e6:42:26: 74:cb:0d:e4:48:94:96:fb:14:20:93:b9:19:03:37: d2:29:f9:93:1c:6b:7d:d1:c0:db:b4:a9:99:4b:a8: 1b:74:28:65:13:f0:68:fd:d8:c4:87:82:d8:77:70: 9b:88:2f:b3:d5:42:2e:42:79:35:e3:09:28:3c:64: 56:89:20:13:0e:0d:50:5e:bf:25:92:95:85:f6:5b: dd:66:c2:4a:55:2c:34:a6:40:f8:90:5e:c6:ef:07: f6:ae:2a:2b:a9:0e:ad:36:09:89:49:cd:56:03:3f: de:e8:2e:c1:7c:ca:38:88:f9:5e:ac:f4:ac:33:69: cc:df:04:b6:ef:d0:3a:fd:48:5f:ee:44:db:ee:5f: f7:80:cf:eb:c1:9c:1e:72:d8:80:6c:4c:7c:e7:6d: bb:21:0a:79:b9:66:ce:84:45:b7:51:2e:a9:c6:b6: f5:46:24:6f:0e:a9:bc:16:8a:84:5e:f4:e1:60:07: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:79:9D:AA:5B:DD:F2:F5:36:DD:81:B7:26:CF:AE:D0:E6:08:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213465 Signature Algorithm: sha256WithRSAEncryption 27:e2:ef:8c:11:de:17:cf:4e:52:57:cb:24:e2:33:dc:aa:da: 0e:7e:15:d0:a3:2c:17:94:4f:ae:a0:00:48:30:26:07:04:5a: 71:9e:4d:9b:c8:c2:a5:76:88:fa:1d:44:a1:8b:52:c6:7e:c7: 86:6f:72:01:48:5d:4a:de:3b:da:88:84:7b:cf:d3:c0:a5:07: 18:d9:e8:84:da:b2:b0:4a:4a:a9:5c:9e:92:99:9d:81:fe:7f: cc:76:6e:1b:99:a0:47:73:4e:ce:15:2c:67:01:50:ab:ba:c5: 89:83:22:4d:67:24:00:7b:33:87:8b:f5:63:93:3e:ad:a9:8d: a8:2f:27:44:f4:3c:fc:13:97:e5:e9:4e:eb:ef:f4:a7:b6:97: 66:7c:5c:c4:7a:b7:73:4c:b7:43:da:de:00:12:45:7c:54:f2: 23:aa:96:e6:27:a2:db:56:cf:d1:44:7f:47:3b:78:2e:cb:c5: ee:1b:ea:4d:45:b6:56:0d:30:b1:46:92:d0:bc:93:c8:55:af: 40:a1:71:63:b8:be:e0:5c:85:50:5c:13:f9:5b:ab:8b:fa:f7: f4:69:05:a4:5f:e7:4f:91:c3:c7:0d:79:52:c0:50:84:d1:a1: 6e:29:4c:95:25:92:2a:d3:51:6c:dd:af:f9:ac:96:00:c8:3a: ff:f4:80:75 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WTsJ0k0DjAfN4YTnhPoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTY1Nzk5ZGFhNWJkZGYyZjUzNmRkODFiNzI2Y2ZhZWQwZTYwODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zmBYuOGFJEva1CdyCUuSogG33Jg u6gAV6QoNOg0uttX7RBVAlg7GmboaF3aKpDvpxNywbTnL35tc1x9BOQoCagxn+sA 48jmQiZ0yw3kSJSW+xQgk7kZAzfSKfmTHGt90cDbtKmZS6gbdChlE/Bo/djEh4LY d3CbiC+z1UIuQnk14wkoPGRWiSATDg1QXr8lkpWF9lvdZsJKVSw0pkD4kF7G7wf2 riorqQ6tNgmJSc1WAz/e6C7BfMo4iPlerPSsM2nM3wS279A6/Uhf7kTb7l/3gM/r wZwectiAbEx85227IQp5uWbOhEW3US6pxrb1RiRvDqm8FoqEXvThYAfNjQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJFleZ2qW93y9Tbdgbcmz67Q5ghbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzVhODFh OS0yZDRkLTRiMjYtOTFkMS1lYTE3ZGEyMjg0ZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvNWE4MWE5 LTJkNGQtNGIyNi05MWQxLWVhMTdkYTIyODRmZi8xL2tXVjVuYXBiM2ZMMU50MkJ0 eWJQcnREbUNGcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNB2TANBgkqhkiG9w0BAQsFAAOCAQEAJ+LvjBHeF89O UlfLJOIz3KraDn4V0KMsF5RPrqAASDAmBwRacZ5Nm8jCpXaI+h1EoYtSxn7Hhm9y AUhdSt472oiEe8/TwKUHGNnohNqysEpKqVyekpmdgf5/zHZuG5mgR3NOzhUsZwFQ q7rFiYMiTWckAHszh4v1Y5M+ramNqC8nRPQ8/BOX5elO6+/0p7aXZnxcxHq3c0y3 Q9reABJFfFTyI6qW5iei21bP0UR/Rzt4LsvF7hvqTUW2Vg0wsUaS0LyTyFWvQKFx Y7i+4FyFUFwT+Vuri/r39GkFpF/nT5HDxw15UsBQhNGhbilMlSWSKtNRbN2v+ayW AMg6//SAdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:08 2026 by rpki-client