This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer File: kUqlV8PT0ea38FJcNMwdSIpakpQ.cer (raw, json) Hash identifier: ExNfAuNFjH353aCd0JKN6UNOzpl00NiVk2P7qkL7Nzs= Subject key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF22918B3D8659479AB503B2FC6462B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 103.17.201.0 -- 103.17.203.255 IP: 103.86.36.0/23 IP: 103.124.156.0/23 IP: 110.34.32.0/24 IP: 110.34.37.0 -- 110.34.38.255 IP: 116.204.164.0 -- 116.204.166.255 IP: 150.107.48.0/22 IP: 192.144.78.0/23 IP: 222.167.192.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:29:18:b3:d8:65:94:79:ab:50:3b:2f:c6:46:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:3b:77:61:be:d9:69:57:7f:a5:37:c0:9b: c8:7f:9b:77:f3:2b:ed:b1:8b:88:66:9e:1e:ca:cd: 7b:9b:bf:db:f5:ae:70:84:55:3f:16:0e:be:81:d1: d7:a0:36:6e:ea:33:ce:f1:38:72:49:7c:b1:10:17: 90:79:38:66:9b:13:d6:e8:e0:30:9c:78:22:81:59: 3d:3b:b4:62:c0:68:87:35:7c:f3:4c:11:4d:2c:60: 4d:d2:57:a5:3b:32:b5:fc:87:d1:7d:0c:0c:ce:9e: c7:44:8b:a6:5b:6d:5c:7e:07:92:05:41:69:a9:5c: 7f:ee:30:a9:f9:b9:7d:bb:94:ed:18:5e:80:51:59: 6b:4a:06:90:fc:e8:f4:6d:4d:72:a2:2c:1c:0a:dc: 72:27:61:66:69:fd:c3:93:22:0a:e5:70:bb:1c:35: 66:34:45:fb:b9:60:d5:12:45:b4:57:da:8b:4f:27: 25:46:77:88:3d:e6:1b:43:b1:39:12:46:b7:f3:75: 05:f4:8e:c0:6b:09:de:3a:da:35:e7:4e:68:33:04: 57:be:d4:41:7f:ec:f1:ca:55:45:8d:69:f7:3d:0c: 20:53:50:2f:70:57:76:32:ff:de:dd:05:a6:30:5c: a3:75:e9:c5:23:af:35:bb:c1:3c:52:5b:3c:46:86: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.201.0-103.17.203.255 103.86.36.0/23 103.124.156.0/23 110.34.32.0/24 110.34.37.0-110.34.38.255 116.204.164.0-116.204.166.255 150.107.48.0/22 192.144.78.0/23 222.167.192.0/18 Signature Algorithm: sha256WithRSAEncryption 6e:40:98:44:f2:af:d7:0c:8c:21:89:e9:0d:b2:60:65:79:4a: 2f:cb:16:c5:9d:35:d2:09:1b:81:79:3e:f3:85:42:e1:06:bb: 0c:90:a2:66:1d:d6:a8:34:b2:be:47:5a:4c:57:b3:ba:05:0a: 05:46:af:cb:2d:db:e2:25:74:56:e3:a3:90:ec:3e:ac:06:f6: e3:d4:cd:16:d0:78:e4:20:e4:24:78:ea:6a:95:2b:be:70:52: e0:eb:48:8e:11:4e:c2:a7:86:83:28:14:05:b3:78:a8:5b:ea: f0:7e:2a:bf:c8:db:a8:96:db:7e:15:85:65:2e:f3:13:b8:92: 0a:1a:82:c5:20:36:b5:9d:16:a2:4c:3a:7f:53:ca:af:d7:d9: fe:0f:c2:e2:be:01:63:f1:f3:e6:01:09:41:44:c5:2e:33:60: 15:cd:26:57:d7:ff:f4:17:1a:5d:1d:73:8d:6c:3b:54:ac:0e: cc:2a:93:5a:b9:20:2e:d7:29:32:ff:42:02:e6:87:66:da:f0: 81:dd:bc:56:f6:72:42:9f:28:d0:d1:2e:b6:7f:03:fe:32:49: 1e:f4:85:86:3a:e7:3b:93:0c:4a:51:8b:cb:a8:19:bc:72:98: 16:c0:2b:bb:48:c2:9a:36:1d:02:94:7e:b5:ac:61:74:77:d6: 7f:ba:09:7f -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt/8ikYs9hllHmrUDsvxkYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTRhYTU1N2MzZDNkMWU2YjdmMDUyNWMzNGNjMWQ0ODhhNWE5Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCQ7d2G+2WlXf6U3wJvIf5t38yvt sYuIZp4eys17m7/b9a5whFU/Fg6+gdHXoDZu6jPO8ThySXyxEBeQeThmmxPW6OAw nHgigVk9O7RiwGiHNXzzTBFNLGBN0lelOzK1/IfRfQwMzp7HRIumW21cfgeSBUFp qVx/7jCp+bl9u5TtGF6AUVlrSgaQ/Oj0bU1yoiwcCtxyJ2Fmaf3DkyIK5XC7HDVm NEX7uWDVEkW0V9qLTyclRneIPeYbQ7E5Eka383UF9I7AawneOto1505oMwRXvtRB f+zxylVFjWn3PQwgU1AvcFd2Mv/e3QWmMFyjdenFI681u8E8Uls8Robb+QIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFJFKpVfD09Hmt/BSXDTMHUiKWpKUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2RiOTdk MC0yOGYyLTQzMjktYjg1Ni00YTM0OGU3YmU0NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvZGI5N2Qw LTI4ZjItNDMyOS1iODU2LTRhMzQ4ZTdiZTQ0MS8xL2tVcWxWOFBUMGVhMzhGSmNO TXdkU0lwYWtwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF BwEHAQH/BFgwVjBUBAIAATBOMAwDBABnEckDBAJnEcgDBAFnViQDBAFnfJwDBABu IiAwDAMEAG4iJQMEAG4iJjAMAwQCdMykAwQAdMymAwQClmswAwQBwJBOAwQG3qfA MA0GCSqGSIb3DQEBCwUAA4IBAQBuQJhE8q/XDIwhiekNsmBleUovyxbFnTXSCRuB eT7zhULhBrsMkKJmHdaoNLK+R1pMV7O6BQoFRq/LLdviJXRW46OQ7D6sBvbj1M0W 0HjkIOQkeOpqlSu+cFLg60iOEU7Cp4aDKBQFs3ioW+rwfiq/yNuoltt+FYVlLvMT uJIKGoLFIDa1nRaiTDp/U8qv19n+D8LivgFj8fPmAQlBRMUuM2AVzSZX1//0Fxpd HXONbDtUrA7MKpNauSAu1yky/0IC5odm2vCB3bxW9nJCnyjQ0S62fwP+Mkke9IWG Ouc7kwxKUYvLqBm8cpgWwCu7SMKaNh0ClH61rGF0d9Z/ugl/ -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:27 2026 by rpki-client