This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer File: ksWu7-nRJuw2Et_ywIITVLFbu6g.cer (raw, json) Hash identifier: pgH5EMFyj1bHoFgLwVpaInW+9WsYwvoPpkVcT4aOoMU= Subject key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8595460D1D9C676C7753EE93BF9EB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.212.83.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:95:46:0d:1d:9c:67:6c:77:53:ee:93:bf:9e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:93:79:7c:f3:14:e4:56:e4:47:56:5e:23: ac:d1:e5:16:1b:ec:8a:69:57:63:c0:a5:1d:88:66: b2:0a:e7:d6:51:3d:69:c3:be:9e:0d:30:2d:8d:35: d6:d3:6e:d9:43:ba:42:f6:ca:4a:3a:96:ab:5e:4b: 69:e7:8b:f6:c6:af:28:7c:4e:87:90:32:87:7d:90: 0a:2b:38:f1:43:09:76:ce:50:57:a4:a9:f3:dc:35: 0c:e9:57:ce:34:8b:3e:d6:12:50:e2:c7:dc:1d:3e: 64:a6:20:db:69:d9:af:b6:97:c9:70:8c:e4:e1:c7: 5b:a8:6a:ae:84:d4:d1:1a:03:e5:0b:ce:b8:1b:7a: d2:f4:6c:11:32:55:65:72:3a:ce:46:72:9b:8a:e8: cd:60:92:6a:6f:b9:a1:14:74:69:a3:cb:45:7d:89: db:41:06:54:75:f5:55:fc:e2:55:6f:c9:45:2d:51: 83:59:24:51:f2:be:7a:73:43:30:7f:f7:c4:43:49: 6b:9f:4f:36:58:a4:b7:3e:c1:56:8c:f4:21:00:4f: 77:eb:12:c1:84:40:96:d9:0d:63:35:a7:f3:50:9f: da:67:87:61:0f:47:86:fb:11:1e:01:98:cf:36:d6: fc:bf:fd:b7:1b:2f:ee:ad:fb:3b:b1:ad:32:c3:7e: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.83.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:bf:33:4b:7c:13:3f:db:02:70:f7:03:2f:07:95:3a:17:38: fe:6b:6f:b9:0a:0e:38:f7:3c:ae:34:f6:be:2f:6f:4b:2c:08: 21:a0:a2:ef:dd:fb:c1:72:5a:b7:e8:c4:e8:f7:09:3e:eb:b0: 47:70:82:01:86:8b:7b:47:fc:ea:17:3d:2a:19:bc:14:9e:4e: 0d:5c:88:e5:2f:01:e6:5d:4d:c5:09:9f:de:73:db:66:61:f6: 18:a2:c0:45:e8:19:ff:76:1a:f8:2f:05:3c:6e:6a:1d:f3:93: d9:17:ef:e3:56:78:db:10:11:c6:bc:d7:83:c5:1f:1a:7f:a1: 1e:87:da:7f:d1:f3:d2:fe:e0:72:ba:64:a3:df:3f:aa:1f:0f: dd:5b:26:00:11:60:02:01:40:f4:c5:5f:d3:d8:9e:af:05:e4: dc:b0:f9:0f:17:94:98:1e:7f:c8:f9:a3:35:58:09:74:c3:b2: 16:9e:96:e1:50:77:ba:0a:1e:3d:fe:24:9c:ce:05:a2:32:39: 33:fb:7e:02:e7:f9:77:4b:a3:fd:4a:16:38:24:b9:aa:a4:83: 84:50:a7:33:9a:b7:29:ff:89:7e:8d:1d:8b:a6:a9:fd:9d:6a: ab:2c:aa:95:82:ad:a9:5d:db:50:c5:20:83:0b:47:90:c9:87: 32:27:d5:c2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hZVGDR2cZ2x3U+6Tv562MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM1YWVlZmU5ZDEyNmVjMzYxMmRmZjJjMDgyMTM1NGIxNWJiYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNWTeXzzFORW5EdWXiOs0eUWG+yK aVdjwKUdiGayCufWUT1pw76eDTAtjTXW027ZQ7pC9spKOparXktp54v2xq8ofE6H kDKHfZAKKzjxQwl2zlBXpKnz3DUM6VfONIs+1hJQ4sfcHT5kpiDbadmvtpfJcIzk 4cdbqGquhNTRGgPlC864G3rS9GwRMlVlcjrORnKbiujNYJJqb7mhFHRpo8tFfYnb QQZUdfVV/OJVb8lFLVGDWSRR8r56c0Mwf/fEQ0lrn082WKS3PsFWjPQhAE936xLB hECW2Q1jNafzUJ/aZ4dhD0eG+xEeAZjPNtb8v/23Gy/urfs7sa0yw34YZQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJLFru/p0SbsNhLf8sCCE1SxW7uoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzhjNDlk MS05MDE1LTRlM2EtODVhYy00OWY0Zjc4OTEzNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvOGM0OWQx LTkwMTUtNGUzYS04NWFjLTQ5ZjRmNzg5MTM1Yi8xL2tzV3U3LW5SSnV3MkV0X3l3 SUlUVkxGYnU2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9RTMA0GCSqGSIb3DQEBCwUAA4IBAQAMvzNL fBM/2wJw9wMvB5U6Fzj+a2+5Cg449zyuNPa+L29LLAghoKLv3fvBclq36MTo9wk+ 67BHcIIBhot7R/zqFz0qGbwUnk4NXIjlLwHmXU3FCZ/ec9tmYfYYosBF6Bn/dhr4 LwU8bmod85PZF+/jVnjbEBHGvNeDxR8af6Eeh9p/0fPS/uByumSj3z+qHw/dWyYA EWACAUD0xV/T2J6vBeTcsPkPF5SYHn/I+aM1WAl0w7IWnpbhUHe6Ch49/iSczgWi Mjkz+34C5/l3S6P9ShY4JLmqpIOEUKczmrcp/4l+jR2Lpqn9nWqrLKqVgq2pXdtQ xSCDC0eQyYcyJ9XC -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:27 2026 by rpki-client