This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer File: CXa-2b-5b_oZgiBViqPVuMj5zT0.cer (raw, json) Hash identifier: F0o7D8NlVnabrJdvJ1jQEdqWbFa9/ATVGcKILbOUAlc= Subject key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3557F3821D65D367217D5102C4CE89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198891 IP: 91.236.137.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:57:f3:82:1d:65:d3:67:21:7d:51:02:c4:ce:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:ca:8a:47:58:16:ce:dc:38:9f:b7:69:f0: ff:51:15:11:60:fa:c0:95:20:54:8a:cb:37:25:5b: 3a:83:be:2b:49:87:c2:40:e3:30:85:0d:a4:f5:08: fd:48:3d:f4:d6:69:4c:e8:a9:28:a1:92:d0:46:3a: 38:1d:5f:3e:80:df:dc:47:b4:fd:2e:b7:32:de:f4: 95:13:fa:45:d2:03:c5:5f:40:76:67:90:75:c8:04: 17:cc:3f:0e:4d:be:5f:0c:52:7f:1c:c6:f6:0c:37: 05:f8:8b:5a:d1:26:19:00:b4:58:c2:61:d6:61:c3: e9:0a:cb:d2:1d:e6:85:22:95:1f:cb:b5:94:30:a2: d7:12:96:56:21:c0:28:a6:a2:aa:42:22:e8:3f:14: 10:ec:7f:23:ce:a8:9f:fe:54:c5:a5:2a:1e:cb:dc: 24:e4:79:a5:1d:1d:b5:c9:d3:10:d8:fa:b1:d1:fe: 22:31:f0:32:9e:d8:ac:04:01:94:44:b7:7e:17:c4: ad:b7:33:7d:7e:f3:7b:1f:c6:8f:a9:82:77:b4:bf: c7:cc:48:d2:7f:1b:78:3f:ae:98:a5:20:92:62:0b: 42:f3:c6:6b:98:f0:08:3f:5e:01:0d:3b:85:b7:34: 84:23:dc:0b:5d:81:ba:07:80:e0:0e:64:b1:33:55: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.137.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198891 Signature Algorithm: sha256WithRSAEncryption 9e:d2:f2:9d:e6:06:f3:5d:ea:92:00:ae:45:f0:08:18:b3:f2: 1f:c2:09:96:ad:e4:97:c0:3f:e3:98:27:b2:ed:9b:95:8b:89: 66:02:c7:9c:5c:b2:19:b8:e7:58:db:35:04:f0:a9:4e:2d:ab: 85:4c:00:fe:17:3e:93:f0:07:91:ee:3b:22:dd:29:65:97:84: ea:7a:74:ea:e1:8f:86:6b:f3:5b:18:50:22:66:e9:dd:91:75: 33:85:64:a5:7c:03:f8:37:da:10:3d:a5:3c:cc:24:16:6d:13: bd:be:2e:c4:ea:28:9e:ed:e5:77:49:71:b1:1b:ed:75:75:2d: f4:5f:ef:32:98:79:ef:27:6a:de:46:0a:5e:cd:7b:6b:62:06: 67:92:81:b4:be:3e:56:a5:a8:fb:a8:a9:42:f0:4a:29:b0:30: a8:9b:2c:ec:81:54:59:2d:82:f1:a6:b5:7a:3e:4a:c4:0b:88: da:82:0b:3a:67:75:75:f4:10:e0:e3:92:fc:2e:a9:f4:57:73: 47:cb:b0:5c:ee:70:cc:77:c2:e9:a3:a2:fd:3d:14:b7:3c:52: a1:72:23:eb:f0:07:33:e4:73:3f:9e:81:c3:b6:cd:fd:0f:b4: 21:d5:39:3e:bf:00:1f:51:80:d0:71:88:22:f5:de:de:48:71: 74:d5:45:31 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NVfzgh1l02chfVECxM6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTc2YmVkOWJmYjk2ZmZhMTk4MjIwNTU4YWEzZDViOGM4ZjljZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4vKikdYFs7cOJ+3afD/URURYPrA lSBUiss3JVs6g74rSYfCQOMwhQ2k9Qj9SD301mlM6KkooZLQRjo4HV8+gN/cR7T9 Lrcy3vSVE/pF0gPFX0B2Z5B1yAQXzD8OTb5fDFJ/HMb2DDcF+Ita0SYZALRYwmHW YcPpCsvSHeaFIpUfy7WUMKLXEpZWIcAopqKqQiLoPxQQ7H8jzqif/lTFpSoey9wk 5HmlHR21ydMQ2Pqx0f4iMfAyntisBAGURLd+F8SttzN9fvN7H8aPqYJ3tL/HzEjS fxt4P66YpSCSYgtC88ZrmPAIP14BDTuFtzSEI9wLXYG6B4DgDmSxM1XiywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAl2vtm/uW/6GYIgVYqj1bjI+c09MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2VjYzJj Zi1lY2MwLTRjYmItOTYzNS0xNjZjNmEzZDNlY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZWNjMmNm LWVjYzAtNGNiYi05NjM1LTE2NmM2YTNkM2VjZi8xL0NYYS0yYi01Yl9vWmdpQlZp cVBWdU1qNXpUMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+yJMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMI6zANBgkqhkiG9w0BAQsFAAOCAQEAntLyneYG813qkgCuRfAIGLPyH8IJlq3k l8A/45gnsu2blYuJZgLHnFyyGbjnWNs1BPCpTi2rhUwA/hc+k/AHke47It0pZZeE 6np06uGPhmvzWxhQImbp3ZF1M4VkpXwD+DfaED2lPMwkFm0Tvb4uxOoonu3ld0lx sRvtdXUt9F/vMph57ydq3kYKXs17a2IGZ5KBtL4+VqWo+6ipQvBKKbAwqJss7IFU WS2C8aa1ej5KxAuI2oILOmd1dfQQ4OOS/C6p9FdzR8uwXO5wzHfC6aOi/T0UtzxS oXIj6/AHM+RzP56Bw7bN/Q+0IdU5Pr8AH1GA0HGIIvXe3khxdNVFMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:39 2026 by rpki-client