This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer File: XFe2FhFxnsfI4AErGv9-gfx2ib0.cer (raw, json) Hash identifier: 8U+Q97QDtrgclZE8kqMgU1Att4v8O+SUslbRAcoKOTk= Subject key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB55EC2D1943003BAA4FAD5F2D2097 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28984 IP: 195.47.224.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:55:ec:2d:19:43:00:3b:aa:4f:ad:5f:2d:20:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:37:d6:dc:a3:b4:ab:5e:28:b5:f0:93:98: 68:15:04:17:04:44:45:93:28:92:99:d8:e1:0e:ad: 14:0c:13:a2:8a:8d:0b:ae:42:bf:57:5d:9a:68:24: c2:65:2c:df:e8:fe:a7:14:32:e3:98:c9:eb:85:d6: a0:85:51:20:79:b9:ab:c4:b1:46:d6:68:3a:02:b7: 99:b9:fd:22:1e:97:8f:97:c9:50:b9:41:92:da:9c: ce:24:3c:54:71:0a:e8:5a:f4:f0:24:6a:73:41:74: f6:11:14:bf:06:f1:c3:a1:3f:dd:58:9c:15:65:8f: e3:fc:75:4a:f8:c1:7b:11:83:90:5a:18:46:45:70: 6e:26:4b:8e:4c:8f:97:8f:42:4a:23:a8:7d:58:26: c3:9b:d6:25:e4:3a:4f:7f:8a:a4:bd:65:9b:0e:13: c5:a5:e2:57:e5:1d:a7:ac:40:59:bf:ad:e6:2b:a2: c6:7f:62:35:2b:c2:f8:9a:86:b3:71:1d:e3:98:8e: d0:a9:b7:eb:88:e7:f7:5f:5d:ee:55:1e:cf:f4:53: 57:08:e6:11:85:15:47:06:f9:01:99:6a:9e:7b:9e: c9:50:86:d2:d8:19:70:4e:3f:ce:53:a8:8c:5a:9f: 8c:27:a5:dc:ac:6f:00:14:52:6e:bf:c0:34:dd:3b: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.224.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28984 Signature Algorithm: sha256WithRSAEncryption 70:01:ec:2e:3e:57:a3:4b:e7:06:7d:c2:a1:e9:bb:a1:42:4e: c8:80:59:97:49:40:f5:cd:06:3d:15:29:4b:04:1c:e6:3c:a6: 4f:5e:5a:9c:f1:00:f6:c5:21:7f:f8:b1:a9:6d:e0:a0:12:95: ae:09:bf:b4:a6:1f:e9:7c:16:7e:ce:37:36:94:82:1a:9c:0f: c2:9a:07:03:3c:61:78:21:cd:5a:b8:60:4a:67:c5:8f:e5:d9: 71:3a:5f:21:5d:22:f5:02:e9:05:8b:d9:33:85:c0:04:ba:a0: c6:2c:ec:ec:a2:9a:d8:6b:4a:3c:e4:d1:68:88:97:48:b5:a0: c8:b1:c9:32:60:ef:42:c3:ae:f8:ac:44:ac:ed:41:de:e5:a8: cf:4b:d2:bf:ff:a8:e3:22:cf:4e:25:12:57:44:5a:85:78:75: f8:58:12:3d:b2:ed:e9:74:28:81:02:ba:1e:d3:8f:a4:23:a0: b3:b2:9f:c6:c5:91:0a:03:d4:cc:f3:cd:2c:84:52:91:b0:a5: 98:17:55:9b:68:cb:01:e8:f8:54:b0:a8:ec:12:cb:89:7a:a3: 7d:aa:ee:22:84:9d:d3:2b:17:c7:06:11:19:c5:29:21:87:b8: fc:a3:77:0e:68:4f:a6:50:70:c7:53:9e:2c:d8:fa:90:95:10: 22:3d:85:12 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9y1XsLRlDADuqT61fLSCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzU3YjYxNjExNzE5ZWM3YzhlMDAxMmIxYWZmN2U4MWZjNzY4OWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFQ31tyjtKteKLXwk5hoFQQXBERF kyiSmdjhDq0UDBOiio0LrkK/V12aaCTCZSzf6P6nFDLjmMnrhdaghVEgebmrxLFG 1mg6AreZuf0iHpePl8lQuUGS2pzOJDxUcQroWvTwJGpzQXT2ERS/BvHDoT/dWJwV ZY/j/HVK+MF7EYOQWhhGRXBuJkuOTI+Xj0JKI6h9WCbDm9Yl5DpPf4qkvWWbDhPF peJX5R2nrEBZv63mK6LGf2I1K8L4moazcR3jmI7QqbfriOf3X13uVR7P9FNXCOYR hRVHBvkBmWqee57JUIbS2BlwTj/OU6iMWp+MJ6XcrG8AFFJuv8A03TtEowIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFxXthYRcZ7HyOABKxr/foH8dom9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2I3ZmU3 NS0zMGVlLTRhNmYtYjUyOC1mYTMwNzFjNDM1ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvYjdmZTc1 LTMwZWUtNGE2Zi1iNTI4LWZhMzA3MWM0MzVmMS8xL1hGZTJGaEZ4bnNmSTRBRXJH djktZ2Z4MmliMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwy/gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnE4MA0GCSqGSIb3DQEBCwUAA4IBAQBwAewuPlejS+cGfcKh6buhQk7IgFmXSUD1 zQY9FSlLBBzmPKZPXlqc8QD2xSF/+LGpbeCgEpWuCb+0ph/pfBZ+zjc2lIIanA/C mgcDPGF4Ic1auGBKZ8WP5dlxOl8hXSL1AukFi9kzhcAEuqDGLOzsoprYa0o85NFo iJdItaDIsckyYO9Cw674rESs7UHe5ajPS9K//6jjIs9OJRJXRFqFeHX4WBI9su3p dCiBAroe04+kI6Czsp/GxZEKA9TM880shFKRsKWYF1WbaMsB6PhUsKjsEsuJeqN9 qu4ihJ3TKxfHBhEZxSkhh7j8o3cOaE+mUHDHU54s2PqQlRAiPYUS -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:17 2026 by rpki-client