This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer File: kpWx8dzY-mrB73iCeMSJ4V6srnA.cer (raw, json) Hash identifier: LDzkKX+1lz8m2gNB6kaPeMmLjkW/A9QvDK4KcYJmqaw= Subject key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80AB42BCFA9722B8BFC1EB80857C25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8560 AS: 51862 IP: 5.250.176.0/20 IP: 46.16.72.0/21 IP: 78.137.96.0/21 IP: 81.173.112.0/22 IP: 82.165.0.0/16 IP: 85.184.248.0/22 IP: 87.106.0.0/16 IP: 157.97.104.0/21 IP: 185.48.116.0/22 IP: 185.132.32.0/22 IP: 194.126.206.0/24 IP: 194.164.4.0 -- 194.164.11.255 IP: 194.164.16.0/20 IP: 194.164.48.0/20 IP: 194.164.88.0/21 IP: 194.164.120.0/21 IP: 194.164.160.0/20 IP: 194.164.192.0/20 IP: 195.20.224.0/19 IP: 212.132.64.0/18 IP: 212.227.0.0/16 IP: 213.165.64.0/19 IP: 213.244.192.0/24 IP: 217.72.192.0/20 IP: 217.154.0.0 -- 217.154.11.255 IP: 217.154.13.0 -- 217.154.24.255 IP: 217.154.26.0/23 IP: 217.154.29.0/24 IP: 217.154.32.0 -- 217.154.38.255 IP: 217.154.40.0 -- 217.154.45.255 IP: 217.154.47.0 -- 217.154.48.255 IP: 217.154.50.0 -- 217.154.71.255 IP: 217.154.74.0 -- 217.154.89.255 IP: 217.154.91.0 -- 217.154.95.255 IP: 217.154.97.0 -- 217.154.102.255 IP: 217.154.105.0 -- 217.154.108.255 IP: 217.154.112.0 -- 217.154.121.255 IP: 217.154.124.0 -- 217.154.126.255 IP: 217.154.128.0 -- 217.154.130.255 IP: 217.154.136.0/24 IP: 217.154.139.0 -- 217.154.140.255 IP: 217.154.142.0 -- 217.154.150.255 IP: 217.154.152.0 -- 217.154.156.255 IP: 217.154.159.0 -- 217.154.175.255 IP: 217.154.177.0 -- 217.154.186.255 IP: 217.154.188.0 -- 217.154.208.255 IP: 217.154.210.0 -- 217.154.218.255 IP: 217.154.220.0/24 IP: 217.154.222.0 -- 217.154.229.255 IP: 217.154.231.0 -- 217.154.235.255 IP: 217.154.237.0 -- 217.154.245.255 IP: 217.154.247.0 -- 217.154.255.255 IP: 217.160.0.0/16 IP: 2001:8d8::/29 IP: 2a02:2478::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ab:42:bc:fa:97:22:b8:bf:c1:eb:80:85:7c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:a5:58:4c:5b:42:51:c3:b4:f4:28:eb:df: d3:46:c8:a0:5a:0a:b8:c7:50:63:9f:88:59:26:60: c0:09:fe:9e:84:d5:37:da:16:c9:c7:55:01:f1:c5: 54:aa:51:1d:78:87:df:a3:84:bb:99:49:fa:ab:6e: cc:b5:85:02:e7:33:ac:72:5f:8c:a1:00:ea:a7:5e: d9:93:a3:cd:fe:a0:ce:a3:d1:78:0e:cf:d7:d6:ad: 6c:00:43:1c:c5:e3:40:11:60:5a:56:90:fa:fa:d8: de:95:6c:08:2a:49:95:4e:2a:2f:a0:3d:02:09:94: 07:31:ec:a7:88:3d:c7:ec:11:02:ce:a8:7a:ad:d9: 2e:c6:14:41:2f:c3:0e:3f:9e:81:ed:e2:4a:1e:88: 1f:eb:c1:f6:46:a3:f1:78:5d:a1:7a:79:8b:35:27: ed:44:ad:3c:91:c0:6d:01:8a:9c:07:28:47:50:a5: c2:f0:38:9d:c6:46:31:44:d7:b1:23:bb:f0:ed:e1: 04:0c:ee:f2:fa:29:a6:77:d6:f0:a9:f4:bf:ab:d7: ed:08:d2:2c:85:a0:b3:09:96:61:cf:78:b7:f4:c0: c5:60:56:2f:c4:1f:a1:03:f9:c6:3f:53:72:43:25: b5:b1:e5:a0:6e:65:85:1c:3e:75:92:49:5d:de:f6: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.176.0/20 46.16.72.0/21 78.137.96.0/21 81.173.112.0/22 82.165.0.0/16 85.184.248.0/22 87.106.0.0/16 157.97.104.0/21 185.48.116.0/22 185.132.32.0/22 194.126.206.0/24 194.164.4.0-194.164.11.255 194.164.16.0/20 194.164.48.0/20 194.164.88.0/21 194.164.120.0/21 194.164.160.0/20 194.164.192.0/20 195.20.224.0/19 212.132.64.0/18 212.227.0.0/16 213.165.64.0/19 213.244.192.0/24 217.72.192.0/20 217.154.0.0-217.154.11.255 217.154.13.0-217.154.24.255 217.154.26.0/23 217.154.29.0/24 217.154.32.0-217.154.38.255 217.154.40.0-217.154.45.255 217.154.47.0-217.154.48.255 217.154.50.0-217.154.71.255 217.154.74.0-217.154.89.255 217.154.91.0-217.154.95.255 217.154.97.0-217.154.102.255 217.154.105.0-217.154.108.255 217.154.112.0-217.154.121.255 217.154.124.0-217.154.126.255 217.154.128.0-217.154.130.255 217.154.136.0/24 217.154.139.0-217.154.140.255 217.154.142.0-217.154.150.255 217.154.152.0-217.154.156.255 217.154.159.0-217.154.175.255 217.154.177.0-217.154.186.255 217.154.188.0-217.154.208.255 217.154.210.0-217.154.218.255 217.154.220.0/24 217.154.222.0-217.154.229.255 217.154.231.0-217.154.235.255 217.154.237.0-217.154.245.255 217.154.247.0-217.154.255.255 217.160.0.0/16 IPv6: 2001:8d8::/29 2a02:2478::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8560 51862 Signature Algorithm: sha256WithRSAEncryption 56:83:c4:38:b4:6d:c8:fa:40:ee:cc:8f:b4:85:85:47:c0:6f: 2a:c7:7e:ff:9f:f7:bb:24:ac:b4:3e:fb:fc:f6:65:6d:74:02: 96:d1:2d:b1:76:cd:af:28:88:67:78:fb:61:91:72:c5:5b:77: a5:f7:d9:82:6b:6b:09:ef:23:33:af:bb:a7:2d:b9:02:83:a6: 8f:0f:19:5b:af:28:29:01:2c:a1:e4:74:ac:04:48:dc:41:62: 52:55:c3:48:1f:c9:6c:aa:39:ad:b0:44:7a:62:83:c9:30:a3: d8:8a:ea:1c:08:da:c2:53:d3:8d:89:cf:ff:59:39:ce:7e:d2: 41:4b:f6:21:1b:7e:27:ad:6a:15:02:b7:20:38:0c:02:e5:ca: 1d:53:9b:40:03:6f:05:72:4a:62:e0:76:92:e6:ed:18:e4:d9: 37:94:15:6b:28:3f:fe:ec:27:d1:60:1e:28:f6:37:77:04:af: 34:25:e1:60:5a:03:56:e2:fb:b6:46:c3:c6:9f:0e:ae:7a:c6: 69:98:73:a1:87:0f:73:e2:4b:8b:af:38:e6:3e:b9:48:37:35: 83:8f:55:a4:a0:33:50:c5:0c:b0:e8:10:da:7a:7a:6d:3c:bb: ce:7d:b3:25:39:ba:17:35:4a:26:f8:6b:a2:5b:d2:6e:5d:10: 2f:85:d5:a1 -----BEGIN CERTIFICATE----- MIIHsjCCBpqgAwIBAgISAZt8gKtCvPqXIri/weuAhXwlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjk1YjFmMWRjZDhmYTZhYzFlZjc4ODI3OGM0ODllMTVlYWNhZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WqlWExbQlHDtPQo69/TRsigWgq4 x1Bjn4hZJmDACf6ehNU32hbJx1UB8cVUqlEdeIffo4S7mUn6q27MtYUC5zOscl+M oQDqp17Zk6PN/qDOo9F4Ds/X1q1sAEMcxeNAEWBaVpD6+tjelWwIKkmVTiovoD0C CZQHMeyniD3H7BECzqh6rdkuxhRBL8MOP56B7eJKHogf68H2RqPxeF2henmLNSft RK08kcBtAYqcByhHUKXC8DidxkYxRNexI7vw7eEEDO7y+immd9bwqfS/q9ftCNIs haCzCZZhz3i39MDFYFYvxB+hA/nGP1NyQyW1seWgbmWFHD51kkld3vaVMQIDAQAB o4IEvjCCBLowHQYDVR0OBBYEFJKVsfHc2Ppqwe94gnjEieFerK5wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzBmYmMy ZS1mZDg4LTRkZjItYWFlMy05ZWI0MGNjNWY2OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvMGZiYzJl LWZkODgtNGRmMi1hYWUzLTllYjQwY2M1ZjY4Yi8xL2twV3g4ZHpZLW1yQjczaUNl TVNKNFY2c3JuQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICNwYIKwYB BQUHAQcBAf8EggImMIICIjCCAggEAgABMIICAAMEBAX6sAMEAy4QSAMEA06JYAME AlGtcAMDAFKlAwQCVbj4AwMAV2oDBAOdYWgDBAK5MHQDBAK5hCADBADCfs4wDAME AsKkBAMEAsKkCAMEBMKkEAMEBMKkMAMEA8KkWAMEA8KkeAMEBMKkoAMEBMKkwAME BcMU4AMEBtSEQAMDANTjAwQF1aVAAwQA1fTAAwQE2UjAMAsDAwHZmgMEAtmaCDAM AwQA2ZoNAwQA2ZoYAwQB2ZoaAwQA2ZodMAwDBAXZmiADBADZmiYwDAMEA9maKAME AdmaLDAMAwQA2ZovAwQA2ZowMAwDBAHZmjIDBAPZmkAwDAMEAdmaSgMEAdmaWDAM AwQA2ZpbAwQF2ZpAMAwDBADZmmEDBADZmmYwDAMEANmaaQMEANmabDAMAwQE2Zpw AwQB2Zp4MAwDBALZmnwDBADZmn4wDAMEB9magAMEANmaggMEANmaiDAMAwQA2ZqL AwQA2ZqMMAwDBAHZmo4DBADZmpYwDAMEA9mamAMEANmanDAMAwQA2ZqfAwQE2Zqg MAwDBADZmrEDBADZmrowDAMEAtmavAMEANma0DAMAwQB2ZrSAwQA2ZraAwQA2Zrc MAwDBAHZmt4DBAHZmuQwDAMEANma5wMEAtma6DAMAwQA2ZrtAwQB2Zr0MAsDBADZ mvcDAwDZmgMDANmgMBQEAgACMA4DBQMgAQjYAwUDKgIkeDAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgIhcAIDAMqWMA0GCSqGSIb3DQEBCwUAA4IBAQBWg8Q4tG3I+kDu zI+0hYVHwG8qx37/n/e7JKy0Pvv89mVtdAKW0S2xds2vKIhnePthkXLFW3el99mC a2sJ7yMzr7unLbkCg6aPDxlbrygpASyh5HSsBEjcQWJSVcNIH8lsqjmtsER6YoPJ MKPYiuocCNrCU9ONic//WTnOftJBS/YhG34nrWoVArcgOAwC5codU5tAA28Fckpi 4HaS5u0Y5Nk3lBVrKD/+7CfRYB4o9jd3BK80JeFgWgNW4vu2RsPGnw6uesZpmHOh hw9z4kuLrzjmPrlINzWDj1WkoDNQxQyw6BDaenptPLvOfbMlOboXNUom+GuiW9Ju XRAvhdWh -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:50 2026 by rpki-client