This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XHJiqVWtpig5MT247co1W_uYFCc.cer File: XHJiqVWtpig5MT247co1W_uYFCc.cer (raw, json) Hash identifier: x9EeSlMbDZ37feosHFmrhU2Z+6uw4HRFeubYLbBZSqo= Subject key identifier: 5C:72:62:A9:55:AD:A6:28:39:31:3D:B8:ED:CA:35:5B:FB:98:14:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB92E15600E0E3BDCCF9DE366BBC2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/5C7262A955ADA62839313DB8EDCA355BFB981427.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214819 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:92:e1:56:00:e0:e3:bd:cc:f9:de:36:6b:bc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c7262a955ada62839313db8edca355bfb981427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:d2:59:5e:a7:92:1f:bf:1d:4c:cf:2f:d8: 43:e7:85:02:82:57:81:70:0f:7f:06:a4:76:c3:aa: 73:f5:8c:23:02:a3:a4:ed:0a:f4:26:3a:bc:54:1c: c3:f8:3c:17:28:0a:dd:f5:b7:4a:90:94:f1:7b:27: a1:4b:6c:df:e1:56:5e:10:04:68:28:9d:5d:dc:67: 1d:37:0d:d8:13:51:1f:6d:f7:39:dc:3a:8e:cd:b6: ca:86:23:6b:35:3e:7c:82:96:b4:9c:4a:33:59:00: e6:e9:51:f4:f3:f4:88:1a:3a:45:84:a3:35:45:70: 67:38:7f:00:a0:f6:05:35:48:70:be:8a:73:dc:8e: 84:49:ce:ec:69:dd:53:ed:88:2c:27:fe:d1:8d:eb: 8b:ac:e1:c7:de:37:cb:2d:4a:86:09:a2:a3:e4:e0: 35:c0:74:c6:c1:e2:ea:45:55:0b:97:92:dd:ab:85: 89:31:13:bf:35:2f:70:c1:e9:21:64:44:89:5e:3f: 40:d0:1f:41:9b:5c:48:15:74:0c:ef:9f:17:fe:77: 32:7d:79:39:48:3a:fe:f4:a2:26:1a:ed:eb:99:dc: b1:71:83:18:9a:36:40:26:dd:e0:89:e2:3a:5b:c8: a4:44:e9:1e:9d:85:fb:7b:4c:e5:c7:21:14:bb:ee: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:72:62:A9:55:AD:A6:28:39:31:3D:B8:ED:CA:35:5B:FB:98:14:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/5C7262A955ADA62839313DB8EDCA355BFB981427.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214819 Signature Algorithm: sha256WithRSAEncryption 45:29:ee:e3:c1:f6:c1:82:a3:f8:97:72:da:5f:0a:47:ba:63: 90:da:90:76:e0:a7:b4:6b:bf:bb:89:a6:74:88:db:e2:c8:74: 9a:b6:81:11:fd:dc:15:66:9e:27:5c:75:38:4e:12:82:24:72: 20:af:7a:29:e2:c7:c5:79:f6:9f:5a:99:be:6d:69:a1:e6:b8: 8c:92:b8:35:1a:ad:c7:59:16:c4:4c:3b:7e:ea:42:bc:1d:bf: 15:9e:84:c3:1c:78:76:42:0f:cd:f3:3d:b8:aa:99:f9:cb:54: e4:3f:e0:3c:d8:61:8c:22:30:1b:4f:fc:33:f2:90:61:cd:12: 8e:14:a7:1c:1d:a1:30:47:6a:41:06:3b:1d:cf:75:18:32:4a: 69:d0:ae:de:05:98:55:cc:b1:ef:21:c8:f6:ee:af:03:8e:8d: c0:70:d9:87:99:b9:f0:8b:5d:7b:5c:1b:69:d8:92:2c:5e:c9: cb:c3:65:1b:07:79:3a:26:d9:90:6b:18:c7:e1:66:56:92:f3: 84:7e:82:6d:6e:f4:2d:28:ca:37:ab:35:50:7a:47:68:6b:cf: f6:b8:6f:ed:ec:1e:7b:92:14:b6:a5:5f:8b:6b:cf:23:cf:57: 2d:a1:3d:6a:3f:5b:cb:66:43:05:15:45:0e:ba:4e:01:8e:e8: 22:ec:0c:68 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt265LhVgDg473M+d42a7wuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzcyNjJhOTU1YWRhNjI4MzkzMTNkYjhlZGNhMzU1YmZiOTgxNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11PSWV6nkh+/HUzPL9hD54UCgleB cA9/BqR2w6pz9YwjAqOk7Qr0Jjq8VBzD+DwXKArd9bdKkJTxeyehS2zf4VZeEARo KJ1d3GcdNw3YE1Efbfc53DqOzbbKhiNrNT58gpa0nEozWQDm6VH08/SIGjpFhKM1 RXBnOH8AoPYFNUhwvopz3I6ESc7sad1T7YgsJ/7RjeuLrOHH3jfLLUqGCaKj5OA1 wHTGweLqRVULl5Ldq4WJMRO/NS9wwekhZESJXj9A0B9Bm1xIFXQM758X/ncyfXk5 SDr+9KImGu3rmdyxcYMYmjZAJt3gieI6W8ikROkenYX7e0zlxyEUu+7UHQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFFxyYqlVraYoOTE9uO3KNVv7mBQnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE0MGQ3 YjczLWRlNDMtNDMzNi04NTA5LTMwYTIyZGQzOThmNS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTQw ZDdiNzMtZGU0My00MzM2LTg1MDktMzBhMjJkZDM5OGY1LzAvNUM3MjYyQTk1NUFE QTYyODM5MzEzREI4RURDQTM1NUJGQjk4MTQyNy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRyMw DQYJKoZIhvcNAQELBQADggEBAEUp7uPB9sGCo/iXctpfCke6Y5DakHbgp7Rrv7uJ pnSI2+LIdJq2gRH93BVmnidcdThOEoIkciCveinix8V59p9amb5taaHmuIySuDUa rcdZFsRMO37qQrwdvxWehMMceHZCD83zPbiqmfnLVOQ/4DzYYYwiMBtP/DPykGHN Eo4UpxwdoTBHakEGOx3PdRgySmnQrt4FmFXMse8hyPburwOOjcBw2YeZufCLXXtc G2nYkixeycvDZRsHeTom2ZBrGMfhZlaS84R+gm1u9C0oyjerNVB6R2hrz/a4b+3s HnuSFLalX4trzyPPVy2hPWo/W8tmQwUVRQ66TgGO6CLsDGg= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:33 2026 by rpki-client