This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer (raw, json) Hash identifier: Eo1CWiM1EdMg3HDYEJN5+zPbZSNR0piU3FtSFI65OUI= Subject key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12634FBD50C5F62DB4598A65DAD0F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60670 AS: 207924 IP: 45.155.108.0/22 IP: 62.68.95.0/24 IP: 185.180.184.0/22 IP: 2a0a:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:63:4f:bd:50:c5:f6:2d:b4:59:8a:65:da:d0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:3b:20:e3:ce:d0:e7:af:7f:d0:dc:d2:b5: 4b:a8:b5:e0:f1:0d:81:25:04:6f:01:e8:9e:1c:8b: bb:63:21:50:e8:90:6b:cb:29:4d:aa:c3:03:57:68: 23:ba:76:ef:16:cb:7d:94:5d:37:a9:78:90:01:90: fe:8c:59:88:65:a8:1c:fb:3c:33:f2:97:65:b7:28: 96:6e:63:54:79:a1:6f:49:d3:b5:97:b1:cb:39:62: 7c:6b:bd:8b:07:f9:91:50:d2:a5:a7:ca:4d:b4:95: aa:c1:77:86:9b:0e:ea:d3:65:e8:dc:19:4a:e4:f7: fb:3a:a2:4b:e0:dc:d6:6d:8b:49:9b:47:03:e2:c4: 5f:13:75:64:8d:fd:9f:f9:16:b7:f1:da:fa:da:1b: 34:e0:b5:ad:57:c3:c5:cc:e2:77:a7:c1:72:5b:b9: 89:d4:b4:c1:85:2b:c5:2d:7f:22:be:2c:e4:5e:2a: 71:4f:57:10:f3:53:2d:21:9d:0e:7a:78:90:05:c9: 8e:c7:0d:82:46:cd:58:3a:d1:07:b2:2a:3d:3f:68: 54:13:5a:03:9f:1e:d1:84:12:fb:5e:cf:bc:e0:78: de:ad:2e:55:8e:24:99:73:a9:64:18:fd:3c:be:e2: f7:ed:23:c1:de:26:db:32:08:43:6a:20:36:95:12: 40:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.108.0/22 62.68.95.0/24 185.180.184.0/22 IPv6: 2a0a:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60670 207924 Signature Algorithm: sha256WithRSAEncryption 91:a2:ed:f6:ee:f4:e9:f0:35:32:3c:e4:4f:60:27:ff:38:84: 79:39:92:ac:89:63:fb:64:38:13:d1:cd:f9:f6:10:21:07:aa: 49:bb:6a:27:00:11:a9:aa:4f:ed:b0:f6:87:85:de:25:17:cd: 40:85:4e:a7:5e:b4:51:93:5f:8e:6c:57:55:7e:3d:aa:dc:46: f7:3b:70:e4:59:a8:0b:fa:72:4f:30:e5:cd:30:56:59:ac:05: da:a2:e5:ea:d8:00:d5:d2:13:da:c1:0a:d6:24:24:1f:62:4c: a4:e7:1f:75:c8:c5:2f:64:c6:99:3d:ad:40:2a:4d:60:78:c9: e1:8d:d0:0e:ea:c5:28:cd:4e:c4:a6:8f:25:ea:f2:3c:7b:c6: 89:ce:7e:4f:02:47:e0:c9:27:8a:fa:f2:b6:14:e7:b5:66:e8: aa:91:0b:1a:3b:76:56:bb:63:c6:6d:9a:09:b5:df:94:8f:38: 42:34:59:56:1c:33:12:3d:76:ff:a1:06:66:5e:0c:10:23:6f: c8:2b:32:d5:a2:10:5b:78:50:34:01:64:2e:39:8a:21:c9:9e: e6:9e:00:c8:72:d2:53:bd:ac:fc:42:1d:41:9a:67:20:5d:60: 36:15:5d:0a:a9:9f:45:1c:d8:26:fe:6e:f8:2a:ff:39:df:5b: 80:f4:df:02 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt8EmNPvVDF9i20WYpl2tDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmVmZjYxNjI1MDJlYTNiNTJmZDhjYTNhZTEwOGQxM2Q2YmZmNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvag7IOPO0Oevf9Dc0rVLqLXg8Q2B JQRvAeieHIu7YyFQ6JBryylNqsMDV2gjunbvFst9lF03qXiQAZD+jFmIZagc+zwz 8pdltyiWbmNUeaFvSdO1l7HLOWJ8a72LB/mRUNKlp8pNtJWqwXeGmw7q02Xo3BlK 5Pf7OqJL4NzWbYtJm0cD4sRfE3Vkjf2f+Ra38dr62hs04LWtV8PFzOJ3p8FyW7mJ 1LTBhSvFLX8ivizkXipxT1cQ81MtIZ0OeniQBcmOxw2CRs1YOtEHsio9P2hUE1oD nx7RhBL7Xs+84HjerS5VjiSZc6lkGP08vuL37SPB3ibbMghDaiA2lRJAfwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzc5NDNh MC1jY2FiLTQyNjAtYmQ1MS1hZmU4OWFhY2M0OTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvNzk0M2Ew LWNjYWItNDI2MC1iZDUxLWFmZTg5YWFjYzQ5Mi8xL2t1XzJGaVVDNmp0U19ZeWpy aENORTlhXzlsSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLZtsAwQAPkRfAwQCubS4MA0EAgACMAcDBQMq Cq2AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDs/gIDAyw0MA0GCSqGSIb3DQEB CwUAA4IBAQCRou327vTp8DUyPORPYCf/OIR5OZKsiWP7ZDgT0c359hAhB6pJu2on ABGpqk/tsPaHhd4lF81AhU6nXrRRk1+ObFdVfj2q3Eb3O3DkWagL+nJPMOXNMFZZ rAXaouXq2ADV0hPawQrWJCQfYkyk5x91yMUvZMaZPa1AKk1geMnhjdAO6sUozU7E po8l6vI8e8aJzn5PAkfgySeK+vK2FOe1ZuiqkQsaO3ZWu2PGbZoJtd+UjzhCNFlW HDMSPXb/oQZmXgwQI2/IKzLVohBbeFA0AWQuOYohyZ7mngDIctJTvaz8Qh1Bmmcg XWA2FV0KqZ9FHNgm/m74Kv8531uA9N8C -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:54 2026 by rpki-client