This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer File: kPwsEuoXAhuorOBiGJfwhW2sJVk.cer (raw, json) Hash identifier: OB5mDwytnWUwSnfcmb9fdchuVp+v1IKHymw8jUFx35k= Subject key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB1A5BBE140EFA762CA2BD3726A650 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215009 IP: 2.59.118.0/24 IP: 80.68.153.0/24 IP: 2a12:ae80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1a:5b:be:14:0e:fa:76:2c:a2:bd:37:26:a6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fc2c12ea17021ba8ace0621897f0856dac2559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:b3:3f:c3:22:3a:21:e4:69:ba:e7:9d:e0: 49:5a:ec:54:7f:c6:e4:36:60:83:2e:4f:db:82:ad: 3d:37:af:ce:4d:6d:62:b1:f7:57:de:74:9a:c1:a2: 7d:26:74:3a:2f:2c:1b:c8:98:58:d6:07:63:75:b5: 12:a9:6b:3b:fd:9b:16:d9:f1:f3:44:93:af:ae:e3: 9a:f9:a9:73:06:68:20:07:46:66:0c:52:cc:2e:35: 40:9d:42:b4:7a:d2:e9:42:07:98:66:64:f2:96:b6: 47:40:89:1b:2f:05:71:f4:28:af:e0:27:8a:dc:72: e8:ac:b5:b9:25:0f:fb:c6:a1:5a:05:7c:d8:95:9f: 33:f4:ce:3e:9e:cb:1b:2a:66:dd:82:55:55:d8:fb: 07:12:f7:3c:5d:e1:16:97:83:ee:b4:d8:eb:f1:b3: c0:eb:fc:55:8c:ca:5c:e8:e9:af:cc:e1:6b:fd:ea: 4d:ad:72:7a:40:b1:2d:8a:fc:6f:1d:49:59:09:e4: a8:b1:a2:a2:dd:fb:e9:f0:60:8a:a7:58:ed:32:8d: ff:6e:25:f1:54:cf:87:a7:60:b9:96:1e:a1:db:cf: de:3f:32:f2:e9:8b:9e:f5:ff:99:44:6b:d7:ff:a1: 0e:fc:fe:32:88:1d:25:15:e7:36:fe:8f:5c:1f:6d: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.118.0/24 80.68.153.0/24 IPv6: 2a12:ae80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215009 Signature Algorithm: sha256WithRSAEncryption 36:ad:af:1f:b8:38:c1:6b:1e:2c:d8:f5:fb:40:33:a2:8f:36: 85:0f:fb:c0:b3:ed:e1:ca:ba:c2:ca:8b:0a:a7:08:63:24:96: d3:5c:af:7f:a2:20:d4:6e:1d:eb:c3:dc:c6:c2:a5:1e:53:e8: 01:67:8a:81:8f:b1:12:8a:27:3a:a6:2d:86:24:04:a5:c9:5d: 84:2c:44:3d:a6:53:a9:4f:b8:56:78:19:c8:c5:88:48:af:7b: c8:a4:48:a8:19:93:50:fa:52:83:5d:d6:d4:e2:c8:ae:e7:af: 8c:33:b1:e7:e2:0c:88:43:c8:30:be:e1:ca:04:41:4c:40:19: 6f:e5:41:c2:cc:f1:62:04:dd:88:a1:8c:6d:77:61:98:44:f4: f6:7b:71:7a:90:11:d3:46:50:b2:25:a3:6b:83:ae:63:f5:1c: a5:4f:c6:44:fb:b2:85:ed:a7:53:d8:34:3c:31:6a:f8:4d:a4: de:e2:26:bf:80:d1:4e:5e:28:b3:34:b4:e9:32:0c:fa:07:4a: 47:63:18:b3:aa:ec:9c:5a:4d:e6:08:87:07:87:27:6e:e7:c5: 74:d9:62:aa:f8:aa:be:97:b4:c6:94:49:42:b9:f6:fc:cc:54: 36:c3:4b:92:84:54:6c:ed:d5:72:78:05:ea:87:7b:f8:f1:26: b5:c9:00:8d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yxpbvhQO+nYsor03JqZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZjMmMxMmVhMTcwMjFiYThhY2UwNjIxODk3ZjA4NTZkYWMyNTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWyzP8MiOiHkabrnneBJWuxUf8bk NmCDLk/bgq09N6/OTW1isfdX3nSawaJ9JnQ6LywbyJhY1gdjdbUSqWs7/ZsW2fHz RJOvruOa+alzBmggB0ZmDFLMLjVAnUK0etLpQgeYZmTylrZHQIkbLwVx9Civ4CeK 3HLorLW5JQ/7xqFaBXzYlZ8z9M4+nssbKmbdglVV2PsHEvc8XeEWl4PutNjr8bPA 6/xVjMpc6OmvzOFr/epNrXJ6QLEtivxvHUlZCeSosaKi3fvp8GCKp1jtMo3/biXx VM+Hp2C5lh6h28/ePzLy6Yue9f+ZRGvX/6EO/P4yiB0lFec2/o9cH22v6QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJD8LBLqFwIbqKzgYhiX8IVtrCVZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzk1MWJj ZS0yODUwLTQ5NDMtOGYwMC1kYjJjNTdmNGVmMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvOTUxYmNl LTI4NTAtNDk0My04ZjAwLWRiMmM1N2Y0ZWYxNi8xL2tQd3NFdW9YQWh1b3JPQmlH SmZ3aFcyc0pWay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAAjt2AwQAUESZMA0EAgACMAcDBQMqEq6AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNH4TANBgkqhkiG9w0BAQsFAAOCAQEANq2v H7g4wWseLNj1+0Azoo82hQ/7wLPt4cq6wsqLCqcIYySW01yvf6Ig1G4d68PcxsKl HlPoAWeKgY+xEoonOqYthiQEpcldhCxEPaZTqU+4VngZyMWISK97yKRIqBmTUPpS g13W1OLIruevjDOx5+IMiEPIML7hygRBTEAZb+VBwszxYgTdiKGMbXdhmET09ntx epAR00ZQsiWja4OuY/UcpU/GRPuyhe2nU9g0PDFq+E2k3uImv4DRTl4oszS06TIM +gdKR2MYs6rsnFpN5giHB4cnbufFdNliqviqvpe0xpRJQrn2/MxUNsNLkoRUbO3V cngF6od7+PEmtckAjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:36 2026 by rpki-client