This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer File: XHkaG6CbnU01jvBare1_DoXogbY.cer (raw, json) Hash identifier: exTRTXDfKXzPDd4Jz/vtDz5j3uDyyr0Ju7O87QGTZos= Subject key identifier: 5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C116E44506B3B7528E0AFF1A423A6E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44640 IP: 91.202.44.0/22 IP: 185.56.116.0/22 IP: 2a04:c340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:6e:44:50:6b:3b:75:28:e0:af:f1:a4:23:a6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:37:f9:63:c7:34:91:98:0d:af:f0:4f:7c: ee:70:b8:62:02:3a:8d:33:71:95:f0:41:7e:c6:ba: 27:ff:f2:57:dd:61:89:97:1d:e5:3b:23:ed:2b:8a: 3b:84:4e:6a:f5:e6:ab:ae:23:63:b0:b5:52:07:7b: a8:b2:b8:13:c7:e8:7d:6b:c7:eb:d0:22:bf:0a:35: 9e:b0:32:fe:cd:e7:50:50:e7:f6:b2:e2:56:64:69: b7:4d:22:3b:ba:89:20:e7:e8:b8:21:ad:6b:23:e5: 4c:a5:4f:5a:c0:7b:66:2f:49:b3:58:5b:bb:51:55: 49:21:19:f7:37:13:62:2f:b0:5b:a7:3e:a3:a8:4d: 2d:cf:b5:a3:3a:6c:fc:e2:1f:09:14:04:cd:ba:e6: f4:77:e9:14:c1:ab:cf:ce:c8:6f:d9:3c:93:db:ee: 14:53:f2:eb:fd:16:e3:1e:05:2e:25:14:02:3c:04: 17:4b:c8:89:3e:03:7d:16:3a:a1:81:f4:ab:87:59: eb:e9:7f:dd:34:e7:e2:01:27:e5:25:c3:73:57:1b: af:62:c8:27:a3:5a:3e:66:9f:82:62:51:fe:3a:bd: 6c:88:2e:0c:b4:81:6f:37:81:71:26:94:04:dc:b5: 39:38:2a:16:54:31:75:ce:c8:72:2c:1a:ab:9f:10: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.44.0/22 185.56.116.0/22 IPv6: 2a04:c340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44640 Signature Algorithm: sha256WithRSAEncryption 63:fe:95:bc:9b:25:85:f1:e9:0b:b6:39:09:f1:df:e5:e5:e0: 04:79:3b:35:cd:33:2d:34:8d:50:a4:4c:6c:56:9f:c9:99:6d: 26:44:5f:e3:16:fb:df:77:88:87:0b:75:9e:79:fe:ca:16:b8: 6e:f5:9b:d1:ed:e8:e9:af:e4:c2:5d:3f:29:51:96:e5:24:2b: d5:a6:2f:36:1d:cb:fe:0f:af:b8:0b:50:4a:9f:17:e3:1f:e6: 77:b7:03:75:e9:a1:2e:9b:e3:87:ce:73:22:79:cf:1a:b7:e4: db:91:67:09:f7:d4:ab:bf:77:47:07:f9:80:55:a3:f4:20:d0: 91:ae:92:f3:2d:ad:c0:8f:e9:95:0a:7f:ba:54:ce:9f:34:ad: a4:ab:9d:5b:12:46:8d:07:ea:23:89:30:d6:ce:c6:d2:0e:ad: 74:0f:97:f3:e4:3b:8c:d7:e9:8b:cf:f1:13:4c:1b:af:8f:65: e8:fc:aa:d6:bb:81:d9:39:b7:4e:42:cc:e7:6f:96:82:10:22: c2:89:67:81:3c:fe:c3:0f:7a:90:15:b9:bd:3f:6c:5a:c2:48: 47:81:24:36:55:90:eb:09:32:d0:21:ed:a6:4e:e5:cc:e8:a4: 92:1a:cd:69:8b:c6:2e:7c:cb:a0:af:fe:ec:9d:ae:5b:37:5a: 16:75:ea:d9 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EW5EUGs7dSjgr/GkI6bjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzc5MWExYmEwOWI5ZDRkMzU4ZWYwNWFhZGVkN2YwZTg1ZTg4MWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoA3+WPHNJGYDa/wT3zucLhiAjqN M3GV8EF+xron//JX3WGJlx3lOyPtK4o7hE5q9earriNjsLVSB3uosrgTx+h9a8fr 0CK/CjWesDL+zedQUOf2suJWZGm3TSI7uokg5+i4Ia1rI+VMpU9awHtmL0mzWFu7 UVVJIRn3NxNiL7Bbpz6jqE0tz7WjOmz84h8JFATNuub0d+kUwavPzshv2TyT2+4U U/Lr/RbjHgUuJRQCPAQXS8iJPgN9FjqhgfSrh1nr6X/dNOfiASflJcNzVxuvYsgn o1o+Zp+CYlH+Or1siC4MtIFvN4FxJpQE3LU5OCoWVDF1zshyLBqrnxB22QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFx5Ghugm51NNY7wWq3tfw6F6IG2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkL2EyN2Ew My1mNjQ1LTQ2MmItOTRlNy02NmM1YWU4YTM2YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvYTI3YTAz LWY2NDUtNDYyYi05NGU3LTY2YzVhZThhMzZiNC8xL1hIa2FHNkNiblUwMWp2QmFy ZTFfRG9Yb2diWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCW8osAwQCuTh0MA0EAgACMAcDBQMqBMNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCuYDANBgkqhkiG9w0BAQsFAAOCAQEAY/6V vJslhfHpC7Y5CfHf5eXgBHk7Nc0zLTSNUKRMbFafyZltJkRf4xb733eIhwt1nnn+ yha4bvWb0e3o6a/kwl0/KVGW5SQr1aYvNh3L/g+vuAtQSp8X4x/md7cDdemhLpvj h85zInnPGrfk25FnCffUq793Rwf5gFWj9CDQka6S8y2twI/plQp/ulTOnzStpKud WxJGjQfqI4kw1s7G0g6tdA+X8+Q7jNfpi8/xE0wbr49l6Pyq1ruB2Tm3TkLM52+W ghAiwolngTz+ww96kBW5vT9sWsJIR4EkNlWQ6wky0CHtpk7lzOikkhrNaYvGLnzL oK/+7J2uWzdaFnXq2Q== -----END CERTIFICATE-----Generated at Tue Jan 27 11:29:38 2026 by rpki-client