This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer File: kucgRlxc0NqcahO0T6DYb2SeUFU.cer (raw, json) Hash identifier: vzZGPRv5o72ZOBLn4T2ARecYYlUPM5H9hvPeVrRawkM= Subject key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11E92DDB2CAF5AFA6D4E0184C39815 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44984 AS: 206344 IP: 147.161.2.0/23 IP: 185.175.84.0/22 IP: 185.189.32.0/22 IP: 2a0b:d880::/29 IP: 2a0b:df00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e9:2d:db:2c:af:5a:fa:6d:4e:01:84:c3:98:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:0a:89:23:22:d4:c1:c6:9d:ec:1a:bd:1c: 33:56:7b:cd:c3:31:19:35:f3:42:cf:6e:de:62:42: 6b:9b:45:a1:f0:53:6f:3b:ac:80:22:a0:b1:41:60: 4c:9c:cf:db:7b:4c:3f:a6:28:4d:85:38:0d:a5:d2: 6f:d0:c1:5a:01:32:9c:8b:d2:26:2e:15:24:a7:e4: c9:01:99:cd:de:90:4a:96:90:c2:e3:76:94:fb:d4: 0f:59:3f:78:56:2b:1f:f9:7d:99:02:44:36:7d:dd: 41:29:49:c8:64:c8:70:3f:53:24:bb:36:a6:f2:f3: 48:54:3b:e0:aa:15:18:5e:eb:eb:50:36:0d:69:ec: a6:ea:98:27:bd:9d:3c:5a:d3:0e:f1:ce:0f:81:39: 77:de:41:55:53:8d:2e:99:fa:bf:e6:e9:73:d8:ff: c0:52:e4:6d:b5:01:7d:6d:76:c9:ba:af:49:e3:7d: 74:78:0f:74:f5:6c:be:8b:e9:4b:3e:94:e0:13:28: 32:82:74:1a:9d:97:06:84:bd:6c:da:56:9c:88:bd: af:ac:06:3e:e5:58:4d:72:9e:50:6b:01:96:c4:66: 35:d2:8b:57:7e:2d:38:3c:87:0a:de:62:a6:a6:0d: 23:20:5d:d0:9a:20:fd:8d:29:2f:77:b4:16:ea:6f: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.2.0/23 185.175.84.0/22 185.189.32.0/22 IPv6: 2a0b:d880::/29 2a0b:df00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44984 206344 Signature Algorithm: sha256WithRSAEncryption 79:f4:65:c0:ae:5d:a1:98:86:d3:52:e9:5f:20:12:07:02:95: 11:fb:f8:83:a3:c4:b4:dd:23:a6:de:44:16:90:46:92:d9:9a: c9:3a:87:3e:dc:32:1b:4f:cf:2b:fe:f8:79:1a:1b:6f:8d:e7: e0:d3:1a:92:e8:01:3e:61:de:bd:10:e9:fb:5f:d3:6c:21:43: 22:0e:4c:f2:2a:6b:a5:22:10:de:83:cc:bc:23:13:7e:6b:49: 52:ff:ca:a4:ab:0b:4a:03:9b:50:c2:c9:83:da:59:18:90:83: 13:e3:30:bf:24:1e:aa:05:05:a0:da:36:43:83:e5:19:6c:b2: 32:65:4b:3d:90:9c:3f:30:26:be:65:76:2f:4f:7b:d2:12:29: 69:e0:85:e1:97:d4:f1:58:bb:50:37:19:cd:db:9a:3c:26:4f: 1b:d4:6e:dc:f1:a6:65:93:4b:79:7d:c3:c8:f7:bc:eb:15:1c: 05:a8:2a:1b:7e:3d:f9:1d:52:61:87:5a:a8:07:cb:c2:77:4c: da:63:c1:b0:44:48:74:d5:3b:74:63:11:6a:61:65:f7:af:a7: 91:09:c0:6f:f8:0a:56:9e:56:bb:23:80:34:f7:70:1b:8c:7a: 8f:da:95:bb:a6:92:86:7c:82:37:2c:9c:ee:62:3f:4d:92:a3: d0:d2:6f:4d -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8Eekt2yyvWvptTgGEw5gVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmU3MjA0NjVjNWNkMGRhOWM2YTEzYjQ0ZmEwZDg2ZjY0OWU1MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHIKiSMi1MHGnewavRwzVnvNwzEZ NfNCz27eYkJrm0Wh8FNvO6yAIqCxQWBMnM/be0w/pihNhTgNpdJv0MFaATKci9Im LhUkp+TJAZnN3pBKlpDC43aU+9QPWT94Visf+X2ZAkQ2fd1BKUnIZMhwP1Mkuzam 8vNIVDvgqhUYXuvrUDYNaeym6pgnvZ08WtMO8c4PgTl33kFVU40umfq/5ulz2P/A UuRttQF9bXbJuq9J4310eA909Wy+i+lLPpTgEygygnQanZcGhL1s2laciL2vrAY+ 5VhNcp5QawGWxGY10otXfi04PIcK3mKmpg0jIF3QmiD9jSkvd7QW6m+BaQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFJLnIEZcXNDanGoTtE+g2G9knlBVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2Y4YTll Yi03ZjhkLTRiZjctODNkOS05MDk2ZTE2NzRlMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZjhhOWVi LTdmOGQtNGJmNy04M2Q5LTkwOTZlMTY3NGUyMi8xL2t1Y2dSbHhjME5xY2FoTzBU NkRZYjJTZVVGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQBk6ECAwQCua9UAwQCub0gMBQEAgACMA4DBQMq C9iAAwUAKgvfADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAr7gCAwMmCDANBgkq hkiG9w0BAQsFAAOCAQEAefRlwK5doZiG01LpXyASBwKVEfv4g6PEtN0jpt5EFpBG ktmayTqHPtwyG0/PK/74eRobb43n4NMakugBPmHevRDp+1/TbCFDIg5M8iprpSIQ 3oPMvCMTfmtJUv/KpKsLSgObUMLJg9pZGJCDE+MwvyQeqgUFoNo2Q4PlGWyyMmVL PZCcPzAmvmV2L0970hIpaeCF4ZfU8Vi7UDcZzduaPCZPG9Ru3PGmZZNLeX3DyPe8 6xUcBagqG349+R1SYYdaqAfLwndM2mPBsERIdNU7dGMRamFl96+nkQnAb/gKVp5W uyOANPdwG4x6j9qVu6aShnyCNyyc7mI/TZKj0NJvTQ== -----END CERTIFICATE-----Generated at Fri Jan 2 16:29:21 2026 by rpki-client