This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer (raw, json) Hash identifier: czt51Jpx4TBJqsglZ2VmOhcjpehf8h5d6SVBNTAkNn4= Subject key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F72FDD5790329E6D5D5CB9813BBD7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211997 IP: 185.233.32.0/24 IP: 2a10:d780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:72:fd:d5:79:03:29:e6:d5:d5:cb:98:13:bb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92ec295476ca1d934db04d00244fc5079b9c9748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:f4:89:a2:1e:8c:61:e4:eb:8e:1b:97:e6: cd:e7:9c:ee:b7:75:39:9d:0f:28:b8:2d:2d:26:ba: 6b:18:a2:dd:37:2c:14:e7:02:23:fa:04:62:ef:6a: 01:4b:99:1c:ad:9d:51:ed:7b:1e:00:61:d0:8d:83: 04:af:6e:c0:f5:1d:3c:33:34:db:43:af:0f:70:aa: 84:05:18:90:4c:51:27:6f:75:c1:35:51:55:48:5d: f9:06:ed:2b:4f:48:68:5b:21:59:be:4a:3a:8e:41: cb:8e:32:12:d6:99:8c:68:7a:b1:96:04:12:c1:c6: 8e:21:46:c4:fb:6c:6b:c1:18:07:14:dd:6a:a8:d3: 3c:8d:c6:4c:64:e4:34:fa:29:2f:a5:20:6a:03:58: 5d:a9:80:05:c2:9d:b0:99:46:b2:bf:df:74:1e:c4: 34:04:42:15:75:89:5f:01:e3:15:34:41:bd:76:5e: f3:18:50:1d:9b:09:10:1f:4f:d9:92:71:5e:f0:6d: 4e:71:70:20:68:1b:8a:6c:47:6d:4b:1c:c0:b1:12: e9:67:f3:e6:09:34:e8:d3:55:3c:f6:2b:40:82:70: 2b:06:c0:e7:e4:45:28:0f:04:17:af:5d:a0:83:e2: f2:ff:ae:1d:02:dc:27:98:3a:0e:56:9a:24:49:ee: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.32.0/24 IPv6: 2a10:d780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211997 Signature Algorithm: sha256WithRSAEncryption 40:80:5b:00:67:80:9c:6f:b8:0f:a4:c6:d0:af:61:22:56:08: 5a:49:26:54:20:81:d6:e5:f5:f5:db:a4:4b:27:f3:f6:10:72: 6d:f3:27:15:5e:1e:db:58:03:c5:b2:f0:40:33:b6:59:f5:78: d6:8f:54:aa:74:b0:67:b6:4c:11:1d:19:3f:48:15:c3:0d:a5: 0c:34:6e:2f:b1:b8:d0:8c:a2:68:89:c3:11:c8:29:f8:ea:ab: 72:4d:21:2f:68:d5:1d:4d:e9:d9:57:3d:17:42:42:44:9d:01: e1:b3:5e:ad:dc:82:97:23:75:26:70:08:b9:d5:08:df:d8:5b: b5:eb:39:2c:56:86:df:bf:b6:5f:bb:0c:48:b4:f7:37:41:24: 57:b8:7a:87:43:b2:12:09:96:3f:50:05:35:b0:69:79:21:d9: 41:ea:a5:d8:fe:ef:aa:6d:0e:21:8a:c1:11:9f:35:6c:34:a2: 4e:d2:71:74:b3:2c:84:dd:35:0b:2a:ae:88:52:7e:3b:90:01: d3:d8:dc:27:ff:62:c8:6c:c5:32:0a:46:43:e4:18:ca:76:d6: 83:8c:ff:b3:10:89:d4:e6:1b:14:9e:1e:ab:27:a1:7d:fa:69: 29:f5:3b:fc:2f:e9:cd:74:87:36:88:14:0c:2d:63:46:43:e9: db:58:99:d4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f3L91XkDKebV1cuYE7vXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmVjMjk1NDc2Y2ExZDkzNGRiMDRkMDAyNDRmYzUwNzliOWM5NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfD0iaIejGHk644bl+bN55zut3U5 nQ8ouC0tJrprGKLdNywU5wIj+gRi72oBS5kcrZ1R7XseAGHQjYMEr27A9R08MzTb Q68PcKqEBRiQTFEnb3XBNVFVSF35Bu0rT0hoWyFZvko6jkHLjjIS1pmMaHqxlgQS wcaOIUbE+2xrwRgHFN1qqNM8jcZMZOQ0+ikvpSBqA1hdqYAFwp2wmUayv990HsQ0 BEIVdYlfAeMVNEG9dl7zGFAdmwkQH0/ZknFe8G1OcXAgaBuKbEdtSxzAsRLpZ/Pm CTTo01U89itAgnArBsDn5EUoDwQXr12gg+Ly/64dAtwnmDoOVpokSe4kJwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJLsKVR2yh2TTbBNACRPxQebnJdIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzU4Mzk0 YS04Y2Y2LTRiMTEtYmVjYi0zYmE2OTEzMTQ1OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNTgzOTRh LThjZjYtNGIxMS1iZWNiLTNiYTY5MTMxNDU4Yi8xL2t1d3BWSGJLSFpOTnNFMEFK RV9GQjV1Y2wwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuekgMA0EAgACMAcDBQMqENeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8HTANBgkqhkiG9w0BAQsFAAOCAQEAQIBbAGeAnG+4 D6TG0K9hIlYIWkkmVCCB1uX19dukSyfz9hBybfMnFV4e21gDxbLwQDO2WfV41o9U qnSwZ7ZMER0ZP0gVww2lDDRuL7G40IyiaInDEcgp+Oqrck0hL2jVHU3p2Vc9F0JC RJ0B4bNerdyClyN1JnAIudUI39hbtes5LFaG37+2X7sMSLT3N0EkV7h6h0OyEgmW P1AFNbBpeSHZQeql2P7vqm0OIYrBEZ81bDSiTtJxdLMshN01CyquiFJ+O5AB09jc J/9iyGzFMgpGQ+QYynbWg4z/sxCJ1OYbFJ4eqyehffppKfU7/C/pzXSHNogUDC1j RkPp21iZ1A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:13 2026 by rpki-client