This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer (raw, json) Hash identifier: 1lg/leGqH4ytmmvx9KXQhfALeDm98Pbc3M9syhqec00= Subject key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7CDBB345A2B79B9C293DED2DFB852BF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 10:56:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.83.208.0/22 IP: 185.80.244.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:db:b3:45:a2:b7:9b:9c:29:3d:ed:2d:fb:85:2b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 10:56:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:c0:49:fd:4b:b7:e2:99:91:38:f8:0f:6d: f1:c4:c2:2c:0b:f9:dd:be:d9:7c:3b:8c:1a:7d:25: a0:47:cf:08:f2:ae:17:17:69:14:45:21:02:5e:48: c7:6c:09:2f:b1:86:2c:4b:2e:d8:f1:f3:4c:71:3b: 8e:fa:c3:8d:35:14:3f:7d:1f:73:8a:e3:ad:c6:42: ec:fc:d4:4a:e5:5d:d1:9b:01:62:7b:de:ce:ca:32: 31:43:4f:05:a6:1d:8d:07:57:8b:a6:39:8f:17:d3: 06:35:64:a0:9f:fe:fc:41:3c:af:2f:ae:18:14:0e: 83:f4:92:12:fa:ac:fe:50:14:be:84:32:75:88:8d: 14:0c:b5:7c:f8:57:a2:0c:da:43:63:82:92:11:0f: df:3d:82:31:bc:8c:85:00:c6:0c:0d:bc:1f:dc:c1: f1:ac:79:d7:10:5c:21:c3:b9:4f:fb:7d:a5:14:90: 9c:ec:3e:74:0b:de:97:d9:e0:3b:4f:65:b6:7d:dd: f3:c5:44:c6:19:28:40:94:1d:8e:00:1a:6f:95:f3: f1:c9:28:f0:cf:79:91:5e:8d:25:f7:ca:43:04:55: d6:39:14:91:00:0f:19:c0:9b:b1:85:02:98:9e:ee: d6:b6:de:d0:22:a7:1a:b4:85:17:eb:2e:cd:37:5d: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.208.0/22 185.80.244.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:83:b8:b5:01:51:50:bf:57:a2:4e:b8:40:5d:c8:a1:d0:be: 77:71:d3:84:86:7c:a3:ef:2c:80:60:71:a1:a4:3f:0f:57:d2: 09:4b:84:89:98:2a:37:77:b4:bb:f7:7f:d9:b7:51:d7:12:b3: cb:22:54:25:8e:50:a7:a5:7f:4d:b9:46:6a:8b:0a:db:10:b5: ee:73:07:dd:38:ed:aa:b3:59:03:a8:f8:c3:db:e7:37:25:cb: 03:de:e6:ce:1d:28:31:92:1c:6f:37:c5:ee:04:52:7c:1d:49: 6d:90:2e:c0:c3:7d:35:29:37:7e:fc:22:0f:24:c5:36:dc:93: a7:a6:13:3e:49:05:81:4a:30:73:06:4d:ca:60:32:79:bf:e9: 06:a1:ad:59:a2:20:93:23:0f:d0:57:16:5d:0a:9c:19:79:26: a4:ab:67:9f:e4:8b:27:b3:44:f8:3f:98:83:12:19:25:cb:11: bc:d6:dc:09:a1:08:e6:2f:46:71:24:b4:04:7d:a4:7c:db:79: b3:d6:08:b1:56:1a:d0:fb:5c:bc:a2:89:15:ec:39:36:5f:c6: a4:60:81:85:b1:42:d3:ad:a6:25:17:ce:89:23:e5:47:17:95: 71:a7:08:d5:19:6d:63:f1:4b:2b:03:87:cd:fe:16:46:3d:64: f8:09:fd:79 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZp827NForebnCk97S37hSv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMTA1NjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmU1ODhkYTRhNmNmMDQxM2ZmYjMwMTZiZTQ2NzhlYzk5YTk4ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UbASf1Lt+KZkTj4D23xxMIsC/nd vtl8O4wafSWgR88I8q4XF2kURSECXkjHbAkvsYYsSy7Y8fNMcTuO+sONNRQ/fR9z iuOtxkLs/NRK5V3RmwFie97OyjIxQ08Fph2NB1eLpjmPF9MGNWSgn/78QTyvL64Y FA6D9JIS+qz+UBS+hDJ1iI0UDLV8+FeiDNpDY4KSEQ/fPYIxvIyFAMYMDbwf3MHx rHnXEFwhw7lP+32lFJCc7D50C96X2eA7T2W2fd3zxUTGGShAlB2OABpvlfPxySjw z3mRXo0l98pDBFXWORSRAA8ZwJuxhQKYnu7Wtt7QIqcatIUX6y7NN11cWQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHLliNpKbPBBP/swFr5GeOyZqY35MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzMzZmIw Zi04Mjc1LTQ0NjEtOGU3MC1mNmMyY2Q2N2Y4NTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMzNmYjBm LTgyNzUtNDQ2MS04ZTcwLWY2YzJjZDY3Zjg1OS8xL2N1V0kya3BzOEVFXy16QVd2 a1o0N0ptcGpmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLVPQAwQAuVD0MA0GCSqGSIb3DQEBCwUAA4IB AQB+g7i1AVFQv1eiTrhAXcih0L53cdOEhnyj7yyAYHGhpD8PV9IJS4SJmCo3d7S7 93/Zt1HXErPLIlQljlCnpX9NuUZqiwrbELXucwfdOO2qs1kDqPjD2+c3JcsD3ubO HSgxkhxvN8XuBFJ8HUltkC7Aw301KTd+/CIPJMU23JOnphM+SQWBSjBzBk3KYDJ5 v+kGoa1ZoiCTIw/QVxZdCpwZeSakq2ef5Isns0T4P5iDEhklyxG81twJoQjmL0Zx JLQEfaR823mz1gixVhrQ+1y8ookV7Dk2X8akYIGFsULTraYlF86JI+VHF5VxpwjV GW1j8UsrA4fN/hZGPWT4Cf15 -----END CERTIFICATE-----Generated at Sat Dec 6 06:09:18 2025 by rpki-client