This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer (raw, json) Hash identifier: b2p9NKbTazQ/7k5bVmoc8v7WdWHgai/VPUByjBeVABs= Subject key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA51C12ADBE34BD47A4D7AF8E4AEB53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50884 IP: 89.35.27.0/24 IP: 89.36.37.0/24 IP: 89.36.72.0/24 IP: 89.39.174.0/23 IP: 89.40.232.0/24 IP: 89.43.50.0/24 IP: 89.44.204.0/24 IP: 185.102.156.0/22 IP: 188.241.208.0/23 IP: 2a05:5700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1c:12:ad:be:34:bd:47:a4:d7:af:8e:4a:eb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:96:94:26:73:2d:43:c5:db:64:6e:cd:a9: c0:ba:fd:bb:1c:73:f1:38:61:f4:ff:4f:fd:3f:7a: e6:95:70:04:14:98:ce:f7:22:4a:68:ad:8e:67:e6: dd:5b:d5:a0:5d:24:cb:70:a3:b1:9f:f6:97:3e:9e: 59:4a:9c:fb:0c:c6:d9:18:1c:54:24:51:f4:1f:63: bf:db:87:21:b0:92:db:49:d5:65:40:6b:02:0b:8c: e3:5a:eb:d2:a7:f8:34:28:d3:1b:26:d6:dd:e0:7c: 7e:8f:7f:be:5b:65:40:80:8c:49:40:b8:82:b0:84: ed:42:24:db:4d:de:3e:b7:9b:57:7e:8e:92:51:65: f9:86:82:5c:4c:aa:a6:cd:1e:fd:d1:41:93:10:8d: a8:dc:7a:69:42:86:7a:5a:69:53:e4:a1:73:e5:ca: e6:c6:f6:5d:2c:81:fe:6f:57:81:09:da:0d:22:72: 2e:f6:64:11:43:67:1d:86:87:cc:8d:86:ac:b4:ac: 4b:6c:f6:14:4e:56:cf:19:d4:43:cf:32:dc:79:65: ca:b6:91:68:d0:c3:63:e2:c0:6f:59:15:45:8f:50: ea:c5:e3:9c:14:ed:97:62:da:7f:6d:9f:14:d4:76: 37:b4:4d:c2:d5:35:bc:91:89:16:b3:99:20:1f:9c: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.27.0/24 89.36.37.0/24 89.36.72.0/24 89.39.174.0/23 89.40.232.0/24 89.43.50.0/24 89.44.204.0/24 185.102.156.0/22 188.241.208.0/23 IPv6: 2a05:5700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50884 Signature Algorithm: sha256WithRSAEncryption 12:56:22:1d:a5:ec:91:d8:48:f1:ca:7d:01:ab:4f:1c:51:09: bb:f3:2b:e3:d1:38:dc:7b:4f:9f:c8:e4:48:bd:27:b9:1f:35: 9e:0b:24:f2:b9:3c:65:3f:16:3d:3e:07:1c:d5:fc:57:93:3d: f3:0c:6f:d9:41:b1:96:d0:a8:17:de:23:04:6f:2c:b6:e9:e2: 15:a6:da:cb:0b:74:43:99:cf:77:dd:32:d5:6e:20:b6:9a:f8: 1f:3e:b8:b7:7c:4c:2e:5b:c0:ed:aa:2d:8b:c5:b4:56:69:93: 6d:7e:30:92:ca:2b:c9:b5:4e:b6:b1:a7:77:cc:77:a8:e4:7e: e3:f5:52:e6:cd:f2:a6:26:5f:21:07:41:e0:f9:8f:d6:35:41: 8a:3b:78:39:b3:ab:de:82:bb:e1:8e:a2:69:e0:34:58:65:b1: 5b:de:55:c9:aa:cd:ff:ba:50:1e:40:1a:3f:95:90:70:2d:b8: 9f:c0:9b:c0:e0:e6:4d:95:1c:30:46:4d:8e:b3:82:46:2f:a1: b5:1f:6f:d3:6c:dc:f4:53:fb:2c:56:20:cb:a8:36:c4:c7:eb: 6f:2d:46:13:36:b2:c4:e9:16:8d:1f:31:22:22:ac:79:84:2e: d9:b6:2e:af:dc:e4:c8:73:c3:4f:9d:ec:38:74:73:65:27:57: 17:c5:be:9c -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt7pRwSrb40vUek16+OSutTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2I5MGZkNjJiY2MwZmU5MjlkYWU1MzAzNmZjNTVlNTExYzU0YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt+WlCZzLUPF22RuzanAuv27HHPx OGH0/0/9P3rmlXAEFJjO9yJKaK2OZ+bdW9WgXSTLcKOxn/aXPp5ZSpz7DMbZGBxU JFH0H2O/24chsJLbSdVlQGsCC4zjWuvSp/g0KNMbJtbd4Hx+j3++W2VAgIxJQLiC sITtQiTbTd4+t5tXfo6SUWX5hoJcTKqmzR790UGTEI2o3HppQoZ6WmlT5KFz5crm xvZdLIH+b1eBCdoNInIu9mQRQ2cdhofMjYastKxLbPYUTlbPGdRDzzLceWXKtpFo 0MNj4sBvWRVFj1DqxeOcFO2XYtp/bZ8U1HY3tE3C1TW8kYkWs5kgH5zpVwIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFFy5D9YrzA/pKdrlMDb8VeURxUtFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzNkYWM3 My1kN2M3LTQwYmItYWI1NS05NTEzNWRhZjUxNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvM2RhYzcz LWQ3YzctNDBiYi1hYjU1LTk1MTM1ZGFmNTE0Ny8xL1hMa1AxaXZNRC1rcDJ1VXdO dnhWNVJIRlMwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQAWSMbAwQAWSQlAwQAWSRIAwQBWSeuAwQAWSjo AwQAWSsyAwQAWSzMAwQCuWacAwQBvPHQMA0EAgACMAcDBQMqBVcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDGxDANBgkqhkiG9w0BAQsFAAOCAQEAElYiHaXskdhI 8cp9AatPHFEJu/Mr49E43HtPn8jkSL0nuR81ngsk8rk8ZT8WPT4HHNX8V5M98wxv 2UGxltCoF94jBG8stuniFabaywt0Q5nPd90y1W4gtpr4Hz64t3xMLlvA7aoti8W0 VmmTbX4wksorybVOtrGnd8x3qOR+4/VS5s3ypiZfIQdB4PmP1jVBijt4ObOr3oK7 4Y6iaeA0WGWxW95VyarN/7pQHkAaP5WQcC24n8CbwODmTZUcMEZNjrOCRi+htR9v 02zc9FP7LFYgy6g2xMfrby1GEzayxOkWjR8xIiKseYQu2bYur9zkyHPDT53sOHRz ZSdXF8W+nA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:11 2026 by rpki-client