This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer File: kwpXLBbQxE93Zlh9kth4ujBUHR4.cer (raw, json) Hash identifier: wQA0BPBojwJL7SBhd3PnYx05IHXVehuuLtfX2WyI2og= Subject key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783558892E5977B1DB78CC217C8C1FB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197481 IP: 91.213.33.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:58:89:2e:59:77:b1:db:78:cc:21:7c:8c:1f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=930a572c16d0c44f7766587d92d878ba30541d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3e:69:9d:4f:04:bb:68:05:3c:31:bc:3c:a7: 87:20:5f:2a:eb:17:02:0e:a5:61:54:fb:fe:50:86: 4b:36:20:95:8a:f8:a7:9b:b7:7b:c5:00:f8:13:8c: 1c:e3:52:41:4b:14:41:4c:d9:a2:41:5f:bd:97:7a: ba:f6:9e:92:c2:5e:a9:2f:8c:ad:9d:ae:07:19:97: 32:ec:a7:6f:d6:16:9d:2f:9f:25:15:cb:a6:01:24: bd:34:11:e3:a1:ca:f7:ee:4e:4e:2d:d4:44:3e:ba: c3:b6:16:67:b8:48:87:4a:58:72:2c:aa:89:68:19: 74:71:e3:a3:c7:d9:7c:ae:f3:69:09:e9:b5:ab:0f: 14:9b:4e:c3:18:4d:4a:ac:0c:6c:af:ad:13:5d:9c: a0:86:76:b2:6a:4e:39:de:9b:d8:9e:42:6b:db:f4: 61:22:00:f5:6c:60:68:78:88:40:eb:f5:1b:14:53: 50:b2:41:77:1b:34:bf:86:42:fb:0e:ab:a9:62:42: 67:72:6b:d5:a3:92:b5:dc:0d:ae:ca:2f:f4:d2:e5: b3:6d:66:bc:89:88:22:70:d0:86:cc:ca:09:b7:c4: 3f:a5:4b:47:be:2b:28:23:50:a3:8f:4e:d2:c8:8a: 1f:08:83:a4:b4:c0:9d:c9:9d:5a:6e:d8:05:a0:1d: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.33.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197481 Signature Algorithm: sha256WithRSAEncryption 15:0d:fa:cb:ab:a7:60:c7:99:14:09:05:d0:8a:79:10:b7:4f: 34:3e:83:1d:1a:46:f2:7c:5e:7b:c5:6a:e5:8a:36:dd:b6:74: 81:cd:2c:7f:8c:94:a8:e9:2b:df:20:a3:fa:53:d4:32:61:2a: ed:9e:23:96:f5:cd:69:0a:75:c3:6c:10:62:81:18:bd:d0:2b: e5:13:6c:7e:70:c9:ce:96:ba:ee:2f:f2:31:cc:ec:c6:58:e6: 78:71:4e:fa:39:d1:c1:58:5b:0b:43:ed:97:0b:72:e4:7e:70: 1d:63:76:f6:0f:7a:91:da:3e:1e:16:06:3f:e1:df:dd:66:5f: be:0e:40:31:88:d2:31:48:15:23:67:d3:9d:38:a2:a8:8d:0a: 43:3c:a3:c0:4e:ca:34:e1:09:69:3e:fe:e3:c6:89:b5:a7:71: f6:4f:1b:63:a5:0d:a7:2b:82:33:e9:b5:9d:bb:71:a0:94:37: 2e:f3:ad:7a:9b:49:66:00:da:c4:5b:d5:9d:b8:86:92:9d:a1: 5e:06:a3:2c:69:3e:25:fb:eb:aa:2a:ba:46:49:78:c4:3f:46: e4:44:8e:a1:7d:35:97:24:dc:4a:0c:f8:d8:eb:ae:d5:44:ce: d8:dc:65:66:b1:7e:c0:c7:47:50:dc:3d:a3:b0:9a:b7:2b:51: 3a:f9:4d:46 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NViJLll3sdt4zCF8jB+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzBhNTcyYzE2ZDBjNDRmNzc2NjU4N2Q5MmQ4NzhiYTMwNTQxZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9j5pnU8Eu2gFPDG8PKeHIF8q6xcC DqVhVPv+UIZLNiCVivinm7d7xQD4E4wc41JBSxRBTNmiQV+9l3q69p6Swl6pL4yt na4HGZcy7Kdv1hadL58lFcumASS9NBHjocr37k5OLdREPrrDthZnuEiHSlhyLKqJ aBl0ceOjx9l8rvNpCem1qw8Um07DGE1KrAxsr60TXZyghnayak453pvYnkJr2/Rh IgD1bGBoeIhA6/UbFFNQskF3GzS/hkL7DqupYkJncmvVo5K13A2uyi/00uWzbWa8 iYgicNCGzMoJt8Q/pUtHvisoI1Cjj07SyIofCIOktMCdyZ1abtgFoB2QxwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJMKVywW0MRPd2ZYfZLYeLowVB0eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2FhNTVh Mi1lMzNlLTRkYzAtOWQ4Ny04Y2M2NTc5NDE1ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvYWE1NWEy LWUzM2UtNGRjMC05ZDg3LThjYzY1Nzk0MTVkYS8xL2t3cFhMQmJReEU5M1psaDlr dGg0dWpCVUhSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9UhMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMDaTANBgkqhkiG9w0BAQsFAAOCAQEAFQ36y6unYMeZFAkF0Ip5ELdPND6DHRpG 8nxee8Vq5Yo23bZ0gc0sf4yUqOkr3yCj+lPUMmEq7Z4jlvXNaQp1w2wQYoEYvdAr 5RNsfnDJzpa67i/yMczsxljmeHFO+jnRwVhbC0Ptlwty5H5wHWN29g96kdo+HhYG P+Hf3WZfvg5AMYjSMUgVI2fTnTiiqI0KQzyjwE7KNOEJaT7+48aJtadx9k8bY6UN pyuCM+m1nbtxoJQ3LvOteptJZgDaxFvVnbiGkp2hXgajLGk+Jfvrqiq6Rkl4xD9G 5ESOoX01lyTcSgz42Ouu1UTO2NxlZrF+wMdHUNw9o7CatytROvlNRg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:16:27 2026 by rpki-client