This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer File: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer (raw, json) Hash identifier: qzEEaTeZrA8GxGfYaOig53rqR4LvuFRtkBrd6kLuYWI= Subject key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECC7B1CA4DA3F3061ED0024BFB4DBC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51996 IP: 46.183.208.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c7:b1:ca:4d:a3:f3:06:1e:d0:02:4b:fb:4d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:68:04:21:88:37:e9:b1:1f:4c:04:02:7e:0a: cc:c6:7a:96:53:57:ca:84:64:eb:9f:d1:6c:f3:97: b0:71:cf:ae:ad:14:6c:d0:0c:d8:d0:1a:43:d1:65: 62:67:6b:dc:3a:d7:d3:08:17:3f:78:3c:7e:f4:f1: 0e:46:39:64:23:30:95:89:3d:30:eb:07:d9:f5:b4: 8b:99:2b:46:9e:15:0b:24:25:de:6c:24:a3:74:fe: 4f:df:88:79:03:52:4b:cc:26:5d:36:a9:8c:0e:ec: e6:84:b3:80:e4:45:b4:e1:f7:bc:bb:8e:36:70:d2: d0:3a:a9:e9:ba:75:7a:5b:a4:50:45:d0:aa:b9:eb: 40:d0:b5:1f:fe:7c:ae:4d:3f:20:4e:d7:26:e7:5e: a6:3b:5a:d8:99:00:d6:85:7a:f7:1c:b5:7f:f7:87: f3:63:ea:9f:aa:6a:12:3f:a4:5c:31:22:e6:85:f3: dd:e9:04:0a:27:c7:d7:06:f1:c7:50:9f:77:80:23: 09:b2:8f:7e:fd:d4:63:e4:4f:41:e6:3c:10:ed:6f: b7:c4:ac:4b:3f:61:f3:79:0b:2d:8b:9b:1e:d4:bc: 25:6b:61:5d:97:d1:4f:2e:2f:b9:f6:a2:f7:5d:79: 3f:8a:3a:9e:0b:cd:74:9f:f5:93:92:34:b3:af:d0: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.208.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51996 Signature Algorithm: sha256WithRSAEncryption 7b:56:d4:f0:e9:2f:25:58:61:27:37:93:43:3e:47:1f:1e:e9: 71:4d:16:d8:1d:f8:c9:e2:65:2c:aa:84:c4:94:ab:05:11:c0: 22:85:61:87:68:b9:e6:87:ce:c7:c2:84:ab:33:76:73:56:1e: 97:53:fc:af:02:16:a1:b6:0e:94:8f:13:88:d8:1f:a7:90:26: e1:4c:d4:a0:86:df:83:f9:74:74:c9:cb:39:6f:c9:fa:98:ab: f9:ac:13:b3:10:6b:01:11:56:79:63:94:e6:b8:7a:47:47:40: ff:d9:ec:55:69:b1:9c:4e:51:28:94:87:9e:1d:0c:8e:81:ed: 32:42:5e:fc:19:0d:68:19:d5:74:04:3c:d3:09:31:05:2f:0a: 77:77:71:18:37:2f:b1:ac:c3:dd:ae:b4:57:5b:22:63:22:a8: c7:10:a1:a3:cf:49:60:fa:51:31:23:f4:c0:9b:d7:17:de:cb: f3:e0:3a:b3:6b:30:55:3e:94:79:02:31:33:8c:51:a0:f9:02: 96:0f:3c:5d:6c:c2:74:c3:7d:4d:0c:00:23:81:e4:f6:6a:58: 1d:98:67:ab:73:e8:e0:29:b5:e9:46:b2:16:36:83:a9:e2:2b: 80:8b:cd:03:89:16:d1:19:8c:d0:b9:4d:1c:e7:43:12:ec:5c: 98:41:4f:10 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87Mexyk2j8wYe0AJL+028MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzM0NGExYWMwY2JmYzQwYzc1YTBjZmM3YmVjOTZjN2MzNWJkMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82gEIYg36bEfTAQCfgrMxnqWU1fK hGTrn9Fs85ewcc+urRRs0AzY0BpD0WViZ2vcOtfTCBc/eDx+9PEORjlkIzCViT0w 6wfZ9bSLmStGnhULJCXebCSjdP5P34h5A1JLzCZdNqmMDuzmhLOA5EW04fe8u442 cNLQOqnpunV6W6RQRdCquetA0LUf/nyuTT8gTtcm516mO1rYmQDWhXr3HLV/94fz Y+qfqmoSP6RcMSLmhfPd6QQKJ8fXBvHHUJ93gCMJso9+/dRj5E9B5jwQ7W+3xKxL P2HzeQsti5se1Lwla2Fdl9FPLi+59qL3XXk/ijqeC810n/WTkjSzr9AQQwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFw0ShrAy/xAx1oM/HvslsfDW9J7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzMyOWFi OC1iMWQ5LTRmOWYtYTljOC1jZDE4NTEwZWRjZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMzI5YWI4 LWIxZDktNGY5Zi1hOWM4LWNkMTg1MTBlZGNkZi8xL1hEUktHc0RMX0VESFdnejhl LXlXeDhOYjBucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBLrfQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDLHDANBgkqhkiG9w0BAQsFAAOCAQEAe1bU8OkvJVhhJzeTQz5HHx7pcU0W2B34 yeJlLKqExJSrBRHAIoVhh2i55ofOx8KEqzN2c1Yel1P8rwIWobYOlI8TiNgfp5Am 4UzUoIbfg/l0dMnLOW/J+pir+awTsxBrARFWeWOU5rh6R0dA/9nsVWmxnE5RKJSH nh0MjoHtMkJe/BkNaBnVdAQ80wkxBS8Kd3dxGDcvsazD3a60V1siYyKoxxCho89J YPpRMSP0wJvXF97L8+A6s2swVT6UeQIxM4xRoPkClg88XWzCdMN9TQwAI4Hk9mpY HZhnq3Po4Cm16UayFjaDqeIrgIvNA4kW0RmM0LlNHOdDEuxcmEFPEA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:54 2026 by rpki-client