This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer File: XB3W7EouHzdshVxYMSGVoAXNuFA.cer (raw, json) Hash identifier: 5jlw2yLLaJJJv9wOEoCq6X2gtnj3WwWTh3ysC4/MJJE= Subject key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECAC3475EA1A8EACC903F17D157A74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43709 IP: 78.157.160.0/19 IP: 2a02:d8a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ac:34:75:ea:1a:8e:ac:c9:03:f1:7d:15:7a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f0:2d:38:11:1e:72:02:d5:99:77:c6:b2:05: 2f:3b:d5:a8:11:5c:1e:b3:ea:dc:4f:e8:75:f1:73: d8:57:c3:ba:0b:be:c0:90:8e:02:43:08:e1:8f:98: 50:97:3a:39:b7:89:ac:f7:1c:c1:0e:e0:82:6f:3a: 05:15:62:21:64:a8:95:d6:66:83:ba:c5:10:ea:11: c0:81:2b:a9:63:a5:2c:aa:c4:67:f0:11:ec:93:0d: c2:2a:c9:48:96:0a:c2:26:23:72:6d:f9:80:65:84: 82:d7:ee:6e:01:43:20:18:5d:4f:7a:e7:1c:94:72: 34:b1:18:ea:2e:86:cc:5a:86:0a:a2:3b:c8:1d:1c: df:ff:9a:20:74:87:78:23:79:db:86:49:be:38:73: 8b:74:40:13:0a:eb:1f:ff:34:c2:a3:1c:da:db:cc: 8f:9c:d3:79:bd:d1:94:1a:92:c3:bf:03:60:d8:be: 5a:38:cb:4c:a5:d4:0c:fb:4b:1a:d8:61:97:aa:91: 57:2c:b9:54:6a:90:c1:6c:43:5a:e7:ba:43:cd:dd: a6:0c:ed:d4:09:1b:08:9a:b7:d7:8f:1e:8c:d8:39: be:e5:5f:89:c8:88:a5:96:7e:e9:60:3f:c7:11:73: 04:e6:0f:ae:8f:33:a3:b4:b5:db:70:36:70:41:92: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.157.160.0/19 IPv6: 2a02:d8a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43709 Signature Algorithm: sha256WithRSAEncryption 25:dc:a5:8f:4d:10:94:fb:a2:93:92:4c:7f:23:0b:a0:0a:d9: 26:22:f7:3d:2e:24:3a:3a:c9:b8:d5:47:79:36:41:9b:63:91: 85:ce:4b:30:92:de:13:21:f7:c7:9c:bd:73:97:96:b9:d0:fa: 35:ea:18:e4:7c:ef:99:8d:88:bf:35:d6:f1:f2:e2:81:7f:bf: 69:20:2d:6e:2b:02:8f:4a:7a:4f:9d:ed:32:bd:b6:7e:47:e5: 8e:38:d7:d6:25:45:0a:6d:79:cc:db:01:85:8a:c4:36:bd:83: 69:90:97:3d:e6:c5:b7:b0:9d:48:a3:ac:60:f0:54:02:2f:94: ee:4e:59:90:2d:1d:c0:70:8f:e8:51:d9:37:4f:cb:22:d9:1b: 9e:bf:ef:a2:be:e7:61:08:dc:bc:ff:3f:cf:1f:e2:6c:32:00: 83:ea:4a:90:f6:cc:8a:4e:7c:41:b4:73:d2:77:38:a1:ce:aa: 42:c9:7b:e5:1d:45:ca:f6:7f:dd:eb:7c:86:65:38:00:1b:17: 81:49:b3:cc:cd:cf:0b:70:7b:97:20:24:12:24:7e:f8:be:42: fe:e5:ad:0b:3b:20:e9:e6:fe:7a:de:67:ac:ad:e8:cf:69:9e: 82:69:9c:ca:db:b4:41:6e:60:72:ae:9b:1c:0f:3c:2f:29:ab: 63:2b:57:29 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57Kw0deoajqzJA/F9FXp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzFkZDZlYzRhMmUxZjM3NmM4NTVjNTgzMTIxOTVhMDA1Y2RiODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PAtOBEecgLVmXfGsgUvO9WoEVwe s+rcT+h18XPYV8O6C77AkI4CQwjhj5hQlzo5t4ms9xzBDuCCbzoFFWIhZKiV1maD usUQ6hHAgSupY6UsqsRn8BHskw3CKslIlgrCJiNybfmAZYSC1+5uAUMgGF1Peucc lHI0sRjqLobMWoYKojvIHRzf/5ogdId4I3nbhkm+OHOLdEATCusf/zTCoxza28yP nNN5vdGUGpLDvwNg2L5aOMtMpdQM+0sa2GGXqpFXLLlUapDBbENa57pDzd2mDO3U CRsImrfXjx6M2Dm+5V+JyIilln7pYD/HEXME5g+ujzOjtLXbcDZwQZLoMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFwd1uxKLh83bIVcWDEhlaAFzbhQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzVlNGMy Mi1jZmRlLTRkZWQtYTUyNi0zOTY3MWUwYjYyNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNWU0YzIy LWNmZGUtNGRlZC1hNTI2LTM5NjcxZTBiNjI2Ni8xL1hCM1c3RW91SHpkc2hWeFlN U0dWb0FYTnVGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFTp2gMA0EAgACMAcDBQAqAtigMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCqvTANBgkqhkiG9w0BAQsFAAOCAQEAJdylj00QlPui k5JMfyMLoArZJiL3PS4kOjrJuNVHeTZBm2ORhc5LMJLeEyH3x5y9c5eWudD6NeoY 5HzvmY2IvzXW8fLigX+/aSAtbisCj0p6T53tMr22fkfljjjX1iVFCm15zNsBhYrE Nr2DaZCXPebFt7CdSKOsYPBUAi+U7k5ZkC0dwHCP6FHZN0/LItkbnr/vor7nYQjc vP8/zx/ibDIAg+pKkPbMik58QbRz0nc4oc6qQsl75R1FyvZ/3et8hmU4ABsXgUmz zM3PC3B7lyAkEiR++L5C/uWtCzsg6eb+et5nrK3oz2megmmcytu0QW5gcq6bHA88 LymrYytXKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:16 2026 by rpki-client