This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer (raw, json) Hash identifier: B0yNhJNZCPNR1vPkCuAp9fAuY+a1Ze1myNkrdd2sftY= Subject key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4F4BA70BD3B20D9B772171FB3BC2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42936 IP: 91.193.64.0/22 IP: 2001:67c:13c8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f4:ba:70:bd:3b:20:d9:b7:72:17:1f:b3:bc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:13:ed:c6:d2:b5:91:a0:cb:68:df:6f:30: 00:50:ff:2e:70:b5:26:3b:aa:69:00:3d:92:96:b2: 8b:6d:9d:5c:53:32:c3:b6:e3:e6:44:9b:11:23:bc: 70:f1:e3:38:ad:42:95:99:92:ad:ec:0a:d3:13:a3: 40:4d:6e:61:2a:e1:40:95:d2:c3:87:d6:23:1e:ba: c3:3c:1b:c2:ab:53:6f:4f:d6:b5:85:8d:2e:c5:42: 0d:3b:93:39:ec:94:e9:89:09:eb:b4:ec:8f:d6:c2: 3f:04:4b:1b:a0:84:9a:45:9a:e1:eb:8e:66:c2:35: c0:14:0c:c8:10:cf:9e:be:24:17:97:91:cc:b3:95: 78:00:6c:85:71:07:b9:a4:fa:91:06:26:70:4c:d9: 41:79:ad:ca:35:0b:df:3d:50:dd:63:8f:53:78:3e: a4:04:19:ff:7d:3d:ba:36:28:69:05:bb:62:d3:ac: be:4e:3b:de:11:ed:d2:a0:c3:ca:2f:05:fd:a0:1b: 83:b8:f0:9d:1e:43:69:1a:91:ca:3e:f6:d9:d2:b8: 3b:be:ba:0a:cd:81:73:24:5a:d6:5a:b4:99:68:76: 04:79:94:1d:81:b7:df:4c:31:a6:e9:e6:e9:c3:d8: fe:67:bc:f3:42:c1:37:55:ba:4a:a6:a1:ab:15:6f: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.64.0/22 IPv6: 2001:67c:13c8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42936 Signature Algorithm: sha256WithRSAEncryption 76:ad:8e:56:dc:59:3d:8a:d1:5b:9a:65:40:42:b4:4a:2a:c1: 4f:16:82:c7:e5:4f:1d:06:eb:b1:b4:1e:90:a1:78:fb:9f:c5: 8e:ea:11:42:bd:6f:e4:19:e9:a9:ab:eb:79:53:8c:59:62:f5: 20:95:5a:4c:b0:c4:f4:ab:c0:47:5c:6a:ad:0a:a6:e6:e5:2e: 7a:24:f1:6c:17:84:c2:aa:11:d0:3c:24:63:fb:5d:c1:44:aa: 2f:12:82:61:db:81:4a:0f:41:e2:bf:25:e9:fd:a9:74:78:25: 41:78:d9:11:df:a0:84:1c:ba:e6:9b:f6:3c:d9:e8:fa:15:03: f7:11:2e:84:02:f4:6c:d3:21:e6:e2:b2:b8:92:f8:1d:fe:93: 3f:e6:57:3a:68:94:c3:8c:b5:b2:c8:9a:d6:a4:f7:fd:02:06: 26:c2:d1:6d:5a:2f:d1:63:aa:d8:1e:92:b5:09:98:71:f1:57: a1:53:7c:b0:93:c2:60:71:96:3e:5d:2b:ed:8f:c8:d6:a4:50: 2f:83:5b:df:1a:12:aa:8b:83:09:b0:8c:02:5d:e0:d1:9d:e6: 35:22:6e:0a:35:de:91:30:2a:63:eb:d2:8e:80:66:20:4e:61: dc:22:5d:bc:e8:e5:91:9c:71:89:91:4e:43:d7:ff:2f:55:74: 9f:ec:ec:cd -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7pPS6cL07INm3chcfs7wuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2QzNzljZWRjZGMyMGYwODc1YzRiMDhiOTRiNDExNjFiM2U4YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ0T7cbStZGgy2jfbzAAUP8ucLUm O6ppAD2SlrKLbZ1cUzLDtuPmRJsRI7xw8eM4rUKVmZKt7ArTE6NATW5hKuFAldLD h9YjHrrDPBvCq1NvT9a1hY0uxUINO5M57JTpiQnrtOyP1sI/BEsboISaRZrh645m wjXAFAzIEM+eviQXl5HMs5V4AGyFcQe5pPqRBiZwTNlBea3KNQvfPVDdY49TeD6k BBn/fT26NihpBbti06y+TjveEe3SoMPKLwX9oBuDuPCdHkNpGpHKPvbZ0rg7vroK zYFzJFrWWrSZaHYEeZQdgbffTDGm6ebpw9j+Z7zzQsE3VbpKpqGrFW/o6wIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFFzTec7c3CDwh1xLCLlLQRYbPowDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2YzY2Nh NC1mNmJmLTQ3MzQtYWJiZC0wOTY0NDY0YzE3NTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjNjY2E0 LWY2YmYtNDczNC1hYmJkLTA5NjQ0NjRjMTc1MS8xL1hOTjV6dHpjSVBDSFhFc0l1 VXRCRmhzLWpBTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCW8FAMA8EAgACMAkDBwAgAQZ8E8gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKe4MA0GCSqGSIb3DQEBCwUAA4IBAQB2rY5W3Fk9 itFbmmVAQrRKKsFPFoLH5U8dBuuxtB6QoXj7n8WO6hFCvW/kGempq+t5U4xZYvUg lVpMsMT0q8BHXGqtCqbm5S56JPFsF4TCqhHQPCRj+13BRKovEoJh24FKD0HivyXp /al0eCVBeNkR36CEHLrmm/Y82ej6FQP3ES6EAvRs0yHm4rK4kvgd/pM/5lc6aJTD jLWyyJrWpPf9AgYmwtFtWi/RY6rYHpK1CZhx8VehU3ywk8JgcZY+XSvtj8jWpFAv g1vfGhKqi4MJsIwCXeDRneY1Im4KNd6RMCpj69KOgGYgTmHcIl286OWRnHGJkU5D 1/8vVXSf7OzN -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:14 2026 by rpki-client