This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer File: KZWUToTcN7pqQtaLseK5pEIehKQ.cer (raw, json) Hash identifier: BB1B/ontCqJhfQD+p707ftcKVZa9Xy5RnfEbt9rm+b4= Subject key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9ECB4447D6BFABD0B1B21FB5E2E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48520 IP: 185.114.184.0/22 IP: 185.214.20.0/22 IP: 194.104.96.0/24 IP: 2a06:7100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:cb:44:47:d6:bf:ab:d0:b1:b2:1f:b5:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:a2:bc:d4:46:4a:05:ef:0e:a5:bb:e8:23: a5:ea:30:3e:08:b1:68:dc:86:b0:06:65:2c:53:61: ec:f5:78:8e:9c:1b:f0:17:fd:22:66:be:27:dc:6d: 5d:be:5c:3c:e3:b8:c4:58:4e:7b:44:34:b5:76:9e: e7:2b:51:c8:56:b0:75:28:48:79:5f:f8:2f:dd:7f: 85:73:57:6a:1f:a6:f8:f3:47:e1:c5:cf:5d:a1:ad: 59:71:eb:04:2c:f1:27:f1:26:6e:b1:b1:60:17:77: d5:a9:57:e4:1b:6e:48:d6:e4:15:89:a1:3e:c2:a6: 44:a7:0f:f9:c9:c4:03:f3:2b:20:76:4d:17:d9:d4: ed:d8:cd:ee:67:4d:71:f6:78:46:10:9a:d5:f0:50: 33:ec:68:8f:39:02:7b:f1:db:d2:29:d7:23:5b:b8: 84:0e:0e:2c:c0:ca:9d:0c:6c:7f:2a:be:85:3d:aa: be:2c:7b:9f:f4:75:6a:55:73:34:0a:47:8c:1e:dc: 93:1b:f8:dc:5e:60:04:d5:ea:c1:34:c2:e2:c7:70: b2:52:57:d3:6e:b4:1d:4b:59:cc:4c:49:e9:4b:0f: 0e:0d:1c:a6:59:55:7f:21:85:33:4c:38:6c:d0:c5: a6:db:08:b6:a4:50:46:2c:3a:2a:64:3e:9f:10:3d: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.184.0/22 185.214.20.0/22 194.104.96.0/24 IPv6: 2a06:7100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48520 Signature Algorithm: sha256WithRSAEncryption 6e:4d:c4:15:ad:e1:44:05:7b:d4:18:79:76:b8:16:10:84:10: 3f:6f:fc:fe:6e:9e:c8:e7:4b:2e:75:81:0c:80:13:61:20:95: f3:a5:a5:18:18:3c:f9:55:2c:75:1f:e3:90:9f:a1:2e:f8:ed: 47:fe:79:b0:b5:b2:23:90:fd:56:cf:71:13:c1:6f:a3:85:7d: 67:63:34:54:3c:b3:36:4d:9b:c2:56:97:e7:cc:ba:9a:a9:1d: 2b:f6:72:0f:c9:11:21:c2:09:8a:03:e0:4e:76:a0:0d:b0:90: 3d:d1:a3:e3:fc:a0:c6:5a:9b:8f:ae:73:5f:d8:61:f9:db:0f: 15:49:f6:57:8d:fa:11:ac:8a:3c:26:35:76:fe:59:2a:f3:ce: e0:6e:80:90:8d:38:8f:fb:a2:8f:30:52:51:98:71:1b:1c:e8: bc:79:dc:72:8d:ef:4a:8c:32:3f:d6:10:95:0e:b9:65:f9:28: 5e:1b:32:01:99:9a:2a:6d:c3:27:c5:91:84:ff:e1:a8:db:b4: f9:d6:0d:af:e3:cd:5f:6e:e1:d6:d8:95:83:0e:60:f4:a3:2f: 5f:6d:fb:36:dc:ba:6c:f0:ad:e8:83:fd:46:70:d7:54:f3:58: ec:79:df:2f:9b:7f:92:50:59:6c:90:a1:ce:22:85:b1:48:8f: 74:aa:73:ac -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt2657LREfWv6vQsbIfteLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTk1OTQ0ZTg0ZGMzN2JhNmE0MmQ2OGJiMWUyYjlhNDQyMWU4NGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIOivNRGSgXvDqW76COl6jA+CLFo 3IawBmUsU2Hs9XiOnBvwF/0iZr4n3G1dvlw847jEWE57RDS1dp7nK1HIVrB1KEh5 X/gv3X+Fc1dqH6b480fhxc9doa1ZcesELPEn8SZusbFgF3fVqVfkG25I1uQViaE+ wqZEpw/5ycQD8ysgdk0X2dTt2M3uZ01x9nhGEJrV8FAz7GiPOQJ78dvSKdcjW7iE Dg4swMqdDGx/Kr6FPaq+LHuf9HVqVXM0CkeMHtyTG/jcXmAE1erBNMLix3CyUlfT brQdS1nMTEnpSw8ODRymWVV/IYUzTDhs0MWm2wi2pFBGLDoqZD6fED2wdwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFCmVlE6E3De6akLWi7HiuaRCHoSkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2ExMjA2 OS1hMDYxLTQ0MmUtOWJmYi0zMzhiZGQ0MzllZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYTEyMDY5 LWEwNjEtNDQyZS05YmZiLTMzOGJkZDQzOWVlMS8xL0taV1VUb1RjTjdwcVF0YUxz ZUs1cEVJZWhLUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuXK4AwQCudYUAwQAwmhgMA0EAgACMAcDBQMq BnEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9iDANBgkqhkiG9w0BAQsFAAOC AQEAbk3EFa3hRAV71Bh5drgWEIQQP2/8/m6eyOdLLnWBDIATYSCV86WlGBg8+VUs dR/jkJ+hLvjtR/55sLWyI5D9Vs9xE8Fvo4V9Z2M0VDyzNk2bwlaX58y6mqkdK/Zy D8kRIcIJigPgTnagDbCQPdGj4/ygxlqbj65zX9hh+dsPFUn2V436EayKPCY1dv5Z KvPO4G6AkI04j/uijzBSUZhxGxzovHncco3vSowyP9YQlQ65ZfkoXhsyAZmaKm3D J8WRhP/hqNu0+dYNr+PNX27h1tiVgw5g9KMvX237Nty6bPCt6IP9RnDXVPNY7Hnf L5t/klBZbJChziKFsUiPdKpzrA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:21 2026 by rpki-client