This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer (raw, json) Hash identifier: bbFY2iJR3CWW75ELtEW6IADRo5wHDjoB3UyQj0rCVkw= Subject key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36E6912E1C5594DF3733D15B69FB9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.49.252.0/22 IP: 2a01:a660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e6:91:2e:1c:55:94:df:37:33:d1:5b:69:fb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:5c:39:1a:47:bf:d1:07:3d:6a:86:a6:89: cf:94:e7:29:bc:6a:04:f0:41:07:fe:df:e0:42:6f: 06:e3:5e:bf:c0:93:ff:15:71:54:ac:41:9c:2c:b1: 18:cf:03:27:2c:ce:07:0d:04:3a:0c:e1:5f:bf:68: 8e:73:96:99:cb:cf:f9:a0:28:2f:22:6d:e2:5f:49: 21:23:12:4f:df:5b:d3:71:33:dd:c9:ee:35:de:9a: 71:76:8c:62:57:8d:fb:48:70:43:3c:6b:35:cf:e6: 1a:14:d0:11:8c:5d:19:72:20:ff:46:ad:bb:cd:72: fc:5a:7a:f9:23:83:73:db:3c:8e:f1:c9:59:21:d2: 6b:1d:17:85:10:0d:72:07:b0:2b:af:09:c4:88:e0: b0:ba:86:3c:3f:c7:83:6e:d7:96:4c:39:97:7f:66: aa:0e:4d:9d:64:15:0a:50:8d:ec:e2:b9:e8:a2:06: 93:5b:94:11:5d:89:03:e6:8c:8e:f6:16:6f:9b:89: b2:f9:df:36:62:84:54:2f:dd:54:dc:23:2e:4b:89: 54:fb:82:2a:2f:bf:95:7d:f0:fd:e6:33:f0:01:c4: 59:1b:ce:46:bc:ec:aa:bc:26:47:d6:f3:f2:6f:6d: 66:13:9e:24:09:df:6c:31:18:85:a1:7c:9b:ce:58: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.252.0/22 IPv6: 2a01:a660::/32 Signature Algorithm: sha256WithRSAEncryption 20:4b:0e:96:3e:7b:93:72:db:20:cf:e6:de:4d:08:63:57:8f: 5d:02:c9:a1:8c:53:95:a5:a9:0b:9f:b1:d7:3e:83:d6:1e:ed: 73:85:b8:74:c4:68:41:68:6b:b8:16:f7:5b:d9:53:27:b5:1f: 36:be:2f:ff:80:07:a5:2f:a0:b1:8a:0c:4d:81:17:30:5f:6d: 1a:ac:8b:27:c3:31:ef:78:25:43:1f:b2:5f:7a:f9:6b:fa:1c: 3e:e0:a8:0d:72:76:56:d3:a9:f5:12:52:c0:fc:52:67:6f:83: 7c:88:88:fb:ea:69:a7:e6:1c:e8:a9:4b:d7:3c:7a:61:f1:a3: f3:22:bf:a9:3f:b6:3d:f2:d2:00:ee:d4:49:86:ad:69:76:5e: b3:1b:a8:3c:a4:73:68:80:2a:f7:54:32:ac:43:56:e5:0f:b0: 4c:22:61:30:58:d0:ae:98:be:73:3a:c6:ac:ce:17:6a:10:f9: 0b:a8:8d:01:a2:9d:d5:22:f7:cc:ab:5c:e4:94:c0:fe:93:c5: d0:65:7c:82:e3:f0:c1:23:64:2c:06:de:7c:6b:75:06:dd:aa: 73:7a:86:89:0a:c1:83:93:30:62:f4:35:7a:de:9b:6f:28:2d: 54:11:41:73:bb:00:8c:5f:cf:04:f6:9e:87:88:cf:6c:07:b4: 19:3e:df:c8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NuaRLhxVlN83M9FbafuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmY4NTYyMmUyMmZjOTZjZWFjZjczMTE0ZDg5MGY0ZjNhYTdkNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ9cORpHv9EHPWqGponPlOcpvGoE 8EEH/t/gQm8G416/wJP/FXFUrEGcLLEYzwMnLM4HDQQ6DOFfv2iOc5aZy8/5oCgv Im3iX0khIxJP31vTcTPdye413ppxdoxiV437SHBDPGs1z+YaFNARjF0ZciD/Rq27 zXL8Wnr5I4Nz2zyO8clZIdJrHReFEA1yB7ArrwnEiOCwuoY8P8eDbteWTDmXf2aq Dk2dZBUKUI3s4rnoogaTW5QRXYkD5oyO9hZvm4my+d82YoRUL91U3CMuS4lU+4Iq L7+VffD95jPwAcRZG85GvOyqvCZH1vPyb21mE54kCd9sMRiFoXybzlhlDwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJL4ViLiL8ls6s9zEU2JD086p9SVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzEwMDBl Yi1mZmQwLTRmZTMtYjdhZi0wNzM4YzIzMzRlN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvMTAwMGVi LWZmZDAtNGZlMy1iN2FmLTA3MzhjMjMzNGU3Zi8xL2t2aFdJdUl2eVd6cXozTVJU WWtQVHpxbjFKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTH8MA0EAgACMAcDBQAqAaZgMA0GCSqGSIb3 DQEBCwUAA4IBAQAgSw6WPnuTctsgz+beTQhjV49dAsmhjFOVpakLn7HXPoPWHu1z hbh0xGhBaGu4Fvdb2VMntR82vi//gAelL6CxigxNgRcwX20arIsnwzHveCVDH7Jf evlr+hw+4KgNcnZW06n1ElLA/FJnb4N8iIj76mmn5hzoqUvXPHph8aPzIr+pP7Y9 8tIA7tRJhq1pdl6zG6g8pHNogCr3VDKsQ1blD7BMImEwWNCumL5zOsaszhdqEPkL qI0Bop3VIvfMq1zklMD+k8XQZXyC4/DBI2QsBt58a3UG3apzeoaJCsGDkzBi9DV6 3ptvKC1UEUFzuwCMX88E9p6HiM9sB7QZPt/I -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:53 2026 by rpki-client