This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer File: XK56oVlNiZKbERo3Hw_ybyAvWOI.cer (raw, json) Hash identifier: C3qYbZCFF/6vzXc2KuxpfaEB1DFA+qpgeyPjYd6yp5Q= Subject key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78354E36CD0BFE5428FCE0E21FF4CF0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50474 IP: 109.234.160.0/21 IP: 185.154.136.0/22 IP: 2a01:4a20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4e:36:cd:0b:fe:54:28:fc:e0:e2:1f:f4:cf:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:48:5e:d8:4d:b8:16:da:89:0c:32:d3:a2: f3:0f:b3:d3:63:54:cb:27:7f:42:54:ee:ed:c9:8c: f0:c3:44:bc:44:5a:97:6d:e5:f5:21:c4:4a:98:bf: 80:ae:10:f2:12:63:b8:42:55:9d:b2:4a:cb:84:cd: d1:37:96:b3:fa:94:19:f4:4d:29:0e:52:39:be:aa: b8:34:76:36:b8:54:b5:14:d0:04:04:da:29:14:4a: 49:5a:b7:b8:fb:83:23:a1:5b:e7:72:28:b6:95:40: eb:e5:34:36:2f:9d:07:dc:16:c8:9b:6f:c2:a1:48: 99:91:07:e8:e1:53:15:08:12:a1:8e:6c:c5:15:50: 47:b5:0a:17:8d:f6:fc:de:5b:92:67:c6:24:4d:f1: cf:b0:39:91:15:53:b1:87:b2:98:12:83:e2:26:a5: b0:f8:37:9e:c8:99:ae:d6:8e:41:11:46:bf:eb:b4: 9b:38:97:a8:ba:72:df:ec:e0:71:ee:43:b4:67:b6: dd:4e:67:6d:59:36:4c:b7:c7:fa:da:41:4b:39:b9: f5:6e:a8:7a:3b:4e:d3:f2:5d:a5:91:22:27:3e:12: 8b:62:88:f7:9a:d6:74:0f:e9:e2:8a:11:a7:fc:d0: 9a:4c:0f:5a:66:d0:45:0a:f9:a8:7e:4c:e3:80:8e: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.160.0/21 185.154.136.0/22 IPv6: 2a01:4a20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50474 Signature Algorithm: sha256WithRSAEncryption a7:27:d1:f9:f8:f2:1b:c5:0f:05:0e:cc:8d:88:b0:52:8c:e8: e3:bb:33:b6:ab:e1:11:47:cf:dc:6a:e3:e3:61:3c:49:a5:fc: e9:b6:e8:3f:9b:00:de:e3:60:b9:f5:6a:c2:32:5d:8a:d9:bc: ee:03:b3:86:1f:77:b5:f9:b7:3c:31:35:f2:7f:ed:a5:fd:de: d9:5e:ac:69:dd:b3:8e:4b:15:48:38:ff:5f:5d:38:cb:68:64: 4e:6e:d1:0e:71:5c:9b:3c:f8:55:e8:87:17:ef:32:0f:e9:09: 54:c9:d0:ba:50:41:8d:5b:42:e1:7d:76:21:3c:94:dd:eb:7d: a2:3f:ef:36:4d:65:3a:36:78:b2:4c:49:cf:da:f3:4f:9b:d5: 0a:5f:38:8d:f5:18:b9:1a:fd:8d:45:e5:5b:46:ef:bd:3b:0d: 3d:6f:d9:00:4d:7b:e6:61:5d:26:58:b1:26:00:f3:47:73:9b: 77:7d:30:6a:3a:1c:44:33:19:4d:21:27:a1:8d:5e:85:bf:c1: 18:bc:57:4e:b3:87:82:ac:0c:22:04:f4:8a:79:5b:c7:93:b1: b6:af:82:1e:97:08:31:7d:85:0b:d9:a5:3b:c4:62:12:5a:fb: 51:df:8b:5a:88:98:ff:2a:bf:f9:2f:dc:4b:c2:4b:34:68:20: 18:f5:75:da -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NU42zQv+VCj84OIf9M8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2FlN2FhMTU5NGQ4OTkyOWIxMTFhMzcxZjBmZjI2ZjIwMmY1OGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy9IXthNuBbaiQwy06LzD7PTY1TL J39CVO7tyYzww0S8RFqXbeX1IcRKmL+ArhDyEmO4QlWdskrLhM3RN5az+pQZ9E0p DlI5vqq4NHY2uFS1FNAEBNopFEpJWre4+4MjoVvncii2lUDr5TQ2L50H3BbIm2/C oUiZkQfo4VMVCBKhjmzFFVBHtQoXjfb83luSZ8YkTfHPsDmRFVOxh7KYEoPiJqWw +DeeyJmu1o5BEUa/67SbOJeounLf7OBx7kO0Z7bdTmdtWTZMt8f62kFLObn1bqh6 O07T8l2lkSInPhKLYoj3mtZ0D+niihGn/NCaTA9aZtBFCvmofkzjgI7IlwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFyueqFZTYmSmxEaNx8P8m8gL1jiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzVlNmJh ZS05NjJmLTQwNTctOGVjNS0yNzlmNTk0YjNhMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNWU2YmFl LTk2MmYtNDA1Ny04ZWM1LTI3OWY1OTRiM2EyZi8xL1hLNTZvVmxOaVpLYkVSbzNI d195YnlBdldPSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDbeqgAwQCuZqIMA0EAgACMAcDBQAqAUogMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFKjANBgkqhkiG9w0BAQsFAAOCAQEApyfR +fjyG8UPBQ7MjYiwUozo47sztqvhEUfP3Grj42E8SaX86bboP5sA3uNgufVqwjJd itm87gOzhh93tfm3PDE18n/tpf3e2V6sad2zjksVSDj/X104y2hkTm7RDnFcmzz4 VeiHF+8yD+kJVMnQulBBjVtC4X12ITyU3et9oj/vNk1lOjZ4skxJz9rzT5vVCl84 jfUYuRr9jUXlW0bvvTsNPW/ZAE175mFdJlixJgDzR3Obd30wajocRDMZTSEnoY1e hb/BGLxXTrOHgqwMIgT0inlbx5Oxtq+CHpcIMX2FC9mlO8RiElr7Ud+LWoiY/yq/ +S/cS8JLNGggGPV12g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:07 2026 by rpki-client