This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.cer (raw, json) Hash identifier: BlYZ29ihA6dGvcdFOWgUwKa30KQdmcgNOx5D+s8Wvvk= Subject key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7304AA1EDEB4485041ED0F620C8D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205222 AS: 213473 IP: 77.92.160.0/21 IP: 185.225.56.0/22 IP: 2a14:e500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:30:4a:a1:ed:eb:44:85:04:1e:d0:f6:20:c8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:56:80:55:68:b8:eb:ba:5d:dd:f5:8a:75: 3b:b0:d0:2c:bc:1c:1a:d3:7e:8d:89:02:68:23:2f: cf:d5:5e:20:c1:91:08:83:a5:75:f2:b0:da:54:57: cd:3a:56:b3:a9:be:be:79:c6:78:6c:4f:8b:92:45: d0:9f:2e:85:cd:a9:6d:0d:19:06:a1:f4:dd:f0:25: 51:47:9e:51:22:98:c2:43:91:77:da:bd:35:d9:33: d8:50:58:0b:61:1b:12:51:1f:4e:36:94:be:dc:a3: 86:63:86:89:c0:46:09:13:26:3a:c2:73:f1:25:c9: 66:fb:cd:af:f8:ec:a0:e2:f7:08:74:7a:2f:dc:60: f1:f7:29:b1:4f:31:26:1f:12:a2:0a:64:f8:b0:96: 52:a3:aa:64:d5:a2:7f:79:e5:c2:9b:f1:37:98:27: c4:6e:10:b1:54:28:cd:6d:15:bc:3b:5d:18:41:30: 54:3e:d6:f0:a0:5b:e9:9a:49:03:ef:5d:23:b5:78: 99:56:97:2f:96:b7:74:bd:d2:77:63:5c:da:09:e7: f5:bb:db:d0:99:68:8f:a0:24:de:c1:66:7e:4d:6a: 36:96:1d:99:a0:ab:5f:75:0b:aa:35:2b:3d:d2:54: de:57:9c:85:7b:fb:1e:27:d9:ae:40:06:99:90:fc: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.160.0/21 185.225.56.0/22 IPv6: 2a14:e500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205222 213473 Signature Algorithm: sha256WithRSAEncryption 1a:20:c6:f4:b9:e9:8f:e3:73:40:11:e2:b9:fe:9c:32:ba:f9: 8a:0c:00:02:e3:b5:ed:ea:57:e4:6e:01:ad:e5:70:9f:ae:f3: 41:75:c9:6e:67:a0:a8:23:e1:11:41:c9:a2:61:9b:e7:5a:e0: 00:d8:c7:6a:7b:f7:c1:cb:7a:d7:66:38:ba:0a:65:f9:22:56: f1:b8:12:7b:ce:be:98:71:05:b9:9f:cf:69:16:09:9d:4c:8b: 03:6f:26:9b:e4:0d:36:3b:66:63:56:55:f5:e3:60:e6:8c:e6: 3f:a1:94:47:50:2d:09:81:70:b9:3d:e1:96:b7:bb:ec:8d:94: bf:2f:00:9f:76:82:4a:a7:2e:d8:3c:5b:5e:42:10:b7:f1:db: 1f:c6:dd:7d:9b:1a:fb:09:54:08:6c:89:df:f4:e2:bb:38:46: 43:9b:69:53:18:67:45:7f:23:28:72:78:a0:c4:ee:11:48:83: f5:59:27:66:99:cd:c2:3a:e2:ec:4a:34:4c:85:cd:91:b3:1f: e1:37:37:7e:4c:b2:6c:88:8d:d3:a5:e8:b5:54:0b:b0:9c:98: b9:e6:10:d0:da:c8:5e:a1:14:e4:ba:bb:07:46:22:90:72:f9: d9:6d:51:31:65:3d:8f:49:db:af:c7:fa:61:91:19:72:6e:59: 15:ec:69:d8 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3xzBKoe3rRIUEHtD2IMjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2ZmOTc0OWVlMjJmMDA5MjU3Yjg5ZDgzNDBjYzY0ZmI0MGJmYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub5WgFVouOu6Xd31inU7sNAsvBwa 036NiQJoIy/P1V4gwZEIg6V18rDaVFfNOlazqb6+ecZ4bE+LkkXQny6FzaltDRkG ofTd8CVRR55RIpjCQ5F32r012TPYUFgLYRsSUR9ONpS+3KOGY4aJwEYJEyY6wnPx Jclm+82v+Oyg4vcIdHov3GDx9ymxTzEmHxKiCmT4sJZSo6pk1aJ/eeXCm/E3mCfE bhCxVCjNbRW8O10YQTBUPtbwoFvpmkkD710jtXiZVpcvlrd0vdJ3Y1zaCef1u9vQ mWiPoCTewWZ+TWo2lh2ZoKtfdQuqNSs90lTeV5yFe/seJ9muQAaZkPwjsQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzU5NTc3 ZC0yZDRkLTQxMWQtODZmYi0wMGZhZWNhYzdkZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvNTk1Nzdk LTJkNGQtNDExZC04NmZiLTAwZmFlY2FjN2RlYi8xLzBfLVhTZTRpOEFrbGU0bllO QXpHVDdRTF9KRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDTVygAwQCueE4MA0EAgACMAcDBQMqFOUAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMhpgIDA0HhMA0GCSqGSIb3DQEBCwUAA4IB AQAaIMb0uemP43NAEeK5/pwyuvmKDAAC47Xt6lfkbgGt5XCfrvNBdcluZ6CoI+ER QcmiYZvnWuAA2Mdqe/fBy3rXZji6CmX5IlbxuBJ7zr6YcQW5n89pFgmdTIsDbyab 5A02O2ZjVlX142DmjOY/oZRHUC0JgXC5PeGWt7vsjZS/LwCfdoJKpy7YPFteQhC3 8dsfxt19mxr7CVQIbInf9OK7OEZDm2lTGGdFfyMocnigxO4RSIP1WSdmmc3COuLs SjRMhc2Rsx/hNzd+TLJsiI3Tpei1VAuwnJi55hDQ2sheoRTkursHRiKQcvnZbVEx ZT2PSduvx/phkRlyblkV7GnY -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:07 2026 by rpki-client