This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer File: XM814TYW15djDR4lQAwTxiEfUAw.cer (raw, json) Hash identifier: +A1fdRVGATDDYBZbaXzjK6oNAxQNaIxVtptOQiluzCo= Subject key identifier: 5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37A068A863766CC598E469A97D812 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197548 IP: 91.223.62.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7a:06:8a:86:37:66:cc:59:8e:46:9a:97:d8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ccf35e13616d797630d1e25400c13c6211f500c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:a0:94:22:aa:f6:f9:ba:17:d0:86:c3:4f: 6b:2b:ac:b5:b1:8e:0f:9e:98:56:ff:25:9d:55:83: ed:b1:d5:52:3f:06:c4:33:44:1b:95:3c:ad:eb:ea: 29:80:89:ef:79:57:e9:b8:59:cf:fe:44:18:65:27: 03:7b:8b:bf:ba:2a:f3:84:72:e6:15:3e:c0:92:40: f2:d3:f7:9a:56:ec:18:42:07:6b:8c:46:4e:17:cc: 66:aa:a0:ce:41:12:e0:4f:ec:9c:39:8b:39:07:a1: 54:c1:79:01:c8:1b:71:65:e2:90:81:fe:7d:39:56: dc:40:68:29:2c:7f:93:73:70:af:10:ea:fd:26:78: b2:a3:9d:64:97:13:54:52:70:33:19:a6:11:09:77: b7:a5:25:d7:fc:da:d9:2e:48:48:00:6a:df:ac:fe: 4b:ea:cd:6c:92:fd:e1:03:2c:09:53:a6:b2:06:5d: a0:0a:c8:d4:57:07:80:2a:f1:8d:3e:fb:72:e0:88: 2d:7f:87:8b:e8:da:fb:58:7a:e1:b3:0c:22:6f:ff: 4b:e7:d0:dc:59:8e:d4:96:9a:9f:9e:7c:27:7a:55: bd:55:b2:fd:58:5f:75:d4:ab:2e:f6:68:4d:c6:c0: 47:c7:81:74:70:0a:c7:de:b1:d4:4e:e6:ae:b7:f4: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.62.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197548 Signature Algorithm: sha256WithRSAEncryption 77:64:43:c1:3f:3e:d4:c7:29:39:b4:db:d0:56:7b:3f:b7:95: e0:ad:c4:b9:09:f9:be:a6:f0:a5:37:9e:57:26:17:46:a3:08: 9f:19:90:02:43:51:51:1f:62:2d:22:80:41:91:9e:14:df:fc: 23:47:98:4a:93:7a:3d:4c:92:8a:08:93:58:ea:a7:6b:80:85: 51:d5:97:5b:af:88:92:65:4c:08:01:cf:5c:c6:9b:15:1c:f3: f4:12:87:27:1f:26:63:ea:3e:a6:6c:fc:ac:2d:d6:60:23:7e: 38:66:b7:f3:d4:66:d4:66:2c:94:db:aa:a2:44:bf:cd:c6:ff: 0e:68:cb:90:f5:11:e8:c9:8e:01:51:6a:26:9e:af:d9:3a:14: e2:f6:e7:8d:e4:c6:57:61:dc:8a:96:15:dd:68:5b:37:f4:f1: 65:f4:a5:b6:cc:fb:98:36:8b:9b:91:d3:5f:cd:0c:3f:a6:1c: d6:1b:90:27:a3:13:a9:c8:1e:03:27:eb:29:f4:ac:53:a9:7b: 50:17:14:ef:e9:45:fa:07:e3:02:07:d7:a2:7c:6d:79:55:72: 81:5a:13:c6:5e:e3:5c:9e:ab:be:96:85:12:93:93:fe:1f:87: a6:9d:b7:5a:72:87:18:68:4d:6d:fd:d2:cc:b8:ad:7f:04:db: 71:03:57:ef -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4o3oGioY3ZsxZjkaal9gSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2NmMzVlMTM2MTZkNzk3NjMwZDFlMjU0MDBjMTNjNjIxMWY1MDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqWglCKq9vm6F9CGw09rK6y1sY4P nphW/yWdVYPtsdVSPwbEM0QblTyt6+opgInveVfpuFnP/kQYZScDe4u/uirzhHLm FT7AkkDy0/eaVuwYQgdrjEZOF8xmqqDOQRLgT+ycOYs5B6FUwXkByBtxZeKQgf59 OVbcQGgpLH+Tc3CvEOr9Jniyo51klxNUUnAzGaYRCXe3pSXX/NrZLkhIAGrfrP5L 6s1skv3hAywJU6ayBl2gCsjUVweAKvGNPvty4Igtf4eL6Nr7WHrhswwib/9L59Dc WY7UlpqfnnwnelW9VbL9WF911Ksu9mhNxsBHx4F0cArH3rHUTuaut/RjYQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFzPNeE2FteXYw0eJUAME8YhH1AMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2NiNmJm NS0zYWM1LTQxM2QtYjg5OC00ZmVmMTVlN2RlYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvY2I2YmY1 LTNhYzUtNDEzZC1iODk4LTRmZWYxNWU3ZGVhZC8xL1hNODE0VFlXMTVkakRSNGxR QXdUeGlFZlVBdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW98+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMDrDANBgkqhkiG9w0BAQsFAAOCAQEAd2RDwT8+1McpObTb0FZ7P7eV4K3EuQn5 vqbwpTeeVyYXRqMInxmQAkNRUR9iLSKAQZGeFN/8I0eYSpN6PUySigiTWOqna4CF UdWXW6+IkmVMCAHPXMabFRzz9BKHJx8mY+o+pmz8rC3WYCN+OGa389Rm1GYslNuq okS/zcb/DmjLkPUR6MmOAVFqJp6v2ToU4vbnjeTGV2HcipYV3WhbN/TxZfSltsz7 mDaLm5HTX80MP6Yc1huQJ6MTqcgeAyfrKfSsU6l7UBcU7+lF+gfjAgfXonxteVVy gVoTxl7jXJ6rvpaFEpOT/h+Hpp23WnKHGGhNbf3SzLitfwTbcQNX7w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:08 2026 by rpki-client