This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer (raw, json) Hash identifier: /okw9jWrA86DJ/NnO8hnZqDcogDZ9s5gBeXPic0fVA8= Subject key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA41E0C99A341714EE40B6059B3FC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212485 IP: 193.163.12.0/24 IP: 2a0e:2140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:41:e0:c9:9a:34:17:14:ee:40:b6:05:9b:3f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:94:a7:08:f6:9d:b0:36:70:cd:eb:89:b3: 2a:0f:52:5e:93:a7:1a:65:c3:b5:60:75:12:f2:99: f1:b4:08:88:db:cb:e8:dd:58:a6:21:e4:b4:d4:c8: f1:ba:1f:9c:88:b4:a8:60:2c:9f:e6:cd:37:14:34: d1:05:6e:f7:d5:19:e7:b9:b2:24:ac:de:68:be:1c: e4:47:e7:e7:3f:96:63:fb:b2:4e:69:09:0f:37:2c: a4:2e:2d:e9:e3:f0:a2:13:bd:77:3e:92:33:a8:de: 03:8d:a9:32:1b:3b:51:e6:8a:80:05:3d:74:4f:b0: 85:fe:c0:86:d9:d5:74:4c:4c:06:51:63:be:3a:7f: fc:94:58:f5:64:db:c8:06:8f:81:60:37:cc:bd:16: e1:30:97:57:a7:16:50:0b:9c:3d:df:88:5b:73:6d: 39:f0:f6:18:b2:e0:fb:36:4d:c9:3f:e9:2b:1f:5c: 93:5a:50:a6:1b:19:2a:90:8a:3f:9c:d0:46:46:12: 38:7b:79:5d:3e:04:6d:34:3a:33:01:8b:dc:3b:8c: e6:03:83:12:42:90:d6:df:69:94:b1:34:37:b4:77: 04:85:7f:cb:17:e7:57:50:6e:04:ae:eb:3f:43:c7: 94:c8:06:98:cd:6d:56:da:38:e2:fc:a4:00:44:a1: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.12.0/24 IPv6: 2a0e:2140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212485 Signature Algorithm: sha256WithRSAEncryption a2:80:ec:02:34:40:e1:cd:01:99:37:dc:3f:d9:63:9b:2a:e8: 30:b5:0f:b1:00:fb:79:f6:52:43:4b:05:14:bd:4e:89:04:d0: ee:41:04:0f:68:08:28:3b:5c:ce:c4:ad:d7:b1:19:2b:36:5d: f7:4e:5e:02:9e:09:ed:8c:ca:e0:81:64:40:2f:88:06:0e:ee: c2:12:1e:76:c2:3d:29:00:8a:50:97:5b:cf:77:48:2b:db:f2: 1c:71:82:eb:67:1c:10:21:cd:50:01:14:de:f9:d2:fd:ee:97: 61:7e:f5:67:c0:00:1d:53:3f:66:e6:d1:7c:00:17:03:38:76: 91:d7:ac:06:d0:f0:a1:84:26:e6:69:01:cf:ca:37:d0:a6:7f: 4f:a7:66:43:75:a0:7c:9b:6e:fe:da:3b:45:eb:81:11:a1:8b: 19:47:15:e3:ac:37:79:23:3f:8a:9e:65:f7:75:b5:83:bc:02: 96:d3:4f:bc:64:24:f4:23:34:79:1e:59:a9:77:f8:b4:57:f8: aa:8e:26:db:9f:c3:7d:14:32:1f:e2:da:be:49:87:6d:12:b2: 3d:2f:9e:10:fb:eb:77:27:da:e1:94:71:51:5c:74:fa:c0:34: ac:bb:79:02:a7:a3:46:d2:45:10:bd:dd:ec:8a:f2:1d:22:53: ab:e4:af:28 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9ykHgyZo0FxTuQLYFmz/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzQzYmRjMGJiNTRmYjg2OWVlODNhMmJkOGJkODc3Mzk4OTNhNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn12Upwj2nbA2cM3ribMqD1Jek6ca ZcO1YHUS8pnxtAiI28vo3VimIeS01Mjxuh+ciLSoYCyf5s03FDTRBW731RnnubIk rN5ovhzkR+fnP5Zj+7JOaQkPNyykLi3p4/CiE713PpIzqN4DjakyGztR5oqABT10 T7CF/sCG2dV0TEwGUWO+On/8lFj1ZNvIBo+BYDfMvRbhMJdXpxZQC5w934hbc205 8PYYsuD7Nk3JP+krH1yTWlCmGxkqkIo/nNBGRhI4e3ldPgRtNDozAYvcO4zmA4MS QpDW32mUsTQ3tHcEhX/LF+dXUG4Erus/Q8eUyAaYzW1W2jji/KQARKFwkwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFxDvcC7VPuGnug6K9i9h3OYk6QsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2FiNmI3 Zi00ZjE5LTQ3YWQtODg5NS00ODk2YjIyOGYxODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYWI2Yjdm LTRmMTktNDdhZC04ODk1LTQ4OTZiMjI4ZjE4Ny8xL1hFTzl3THRVLTRhZTZEb3Iy TDJIYzVpVHBDdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaMMMA0EAgACMAcDBQMqDiFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+BTANBgkqhkiG9w0BAQsFAAOCAQEAooDsAjRA4c0B mTfcP9ljmyroMLUPsQD7efZSQ0sFFL1OiQTQ7kEED2gIKDtczsSt17EZKzZd905e Ap4J7YzK4IFkQC+IBg7uwhIedsI9KQCKUJdbz3dIK9vyHHGC62ccECHNUAEU3vnS /e6XYX71Z8AAHVM/ZubRfAAXAzh2kdesBtDwoYQm5mkBz8o30KZ/T6dmQ3WgfJtu /to7ReuBEaGLGUcV46w3eSM/ip5l93W1g7wCltNPvGQk9CM0eR5ZqXf4tFf4qo4m 25/DfRQyH+LavkmHbRKyPS+eEPvrdyfa4ZRxUVx0+sA0rLt5AqejRtJFEL3d7Iry HSJTq+SvKA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:01 2026 by rpki-client