This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer File: XOackdRTOWv6Fm8FG_jwbAOghcs.cer (raw, json) Hash identifier: 37OggENWgwnCHBr8u6aFslFbCS0cUY9Kb2zS4Kid99M= Subject key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA82F455D9CD073087B2205287417A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56653 IP: 31.10.16.0/20 IP: 2a13:a880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:82:f4:55:d9:cd:07:30:87:b2:20:52:87:41:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:6a:96:1c:15:de:8b:83:25:4c:46:10:05: 3d:4b:61:b4:1e:28:da:d1:43:8c:b0:bc:1c:79:01: 5b:8f:36:9f:3e:38:64:37:da:2b:56:c7:7a:18:98: 98:8c:c5:8a:8e:bc:5e:96:4c:ab:04:f5:0b:fc:e2: 89:f3:93:4f:99:9f:a7:e7:78:17:09:36:12:1d:86: 5a:b1:3a:b2:09:f9:4e:a6:b9:b5:1f:01:00:93:a0: e9:35:b3:df:39:17:c6:cd:ef:7f:c1:46:24:2f:b6: 1a:1e:22:f0:75:a3:12:83:8d:74:4a:40:d2:33:a0: dd:0b:73:06:97:05:5a:01:d6:28:36:06:a7:58:5d: 92:a5:7b:84:a0:fd:bf:38:c5:6d:29:b9:49:2f:c5: e2:83:29:8e:28:92:8f:16:1b:6e:b0:96:dc:25:61: 07:1e:21:2c:25:72:d8:28:db:d4:3c:81:0c:84:19: eb:05:09:a6:bf:b6:f4:6b:ad:86:62:be:79:12:4e: 07:f6:ff:15:66:ba:5b:3a:81:e9:c3:12:9b:c5:60: 19:4c:ad:18:ca:74:1c:27:ee:20:e3:1a:cb:6e:4d: 5e:89:90:f6:5a:c0:58:da:04:84:e4:95:16:45:6c: 4a:88:e8:e8:69:af:23:b5:ef:a0:62:6f:1d:aa:0f: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.16.0/20 IPv6: 2a13:a880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56653 Signature Algorithm: sha256WithRSAEncryption 61:db:31:ec:cf:a2:d5:aa:20:83:54:b0:81:11:3b:d6:06:a1: 96:e1:54:b4:c7:d3:c2:7b:25:5e:5c:a6:f7:fe:d3:bf:24:47: 0c:76:ab:eb:7c:a9:2b:19:26:3e:64:65:d6:57:38:48:97:9d: 9e:4c:f3:d4:1c:3c:18:96:a2:05:1b:1e:30:c7:69:a1:11:47: 87:e1:4e:5c:b6:99:7f:70:ec:96:29:70:b7:39:e7:bf:f1:2c: d4:31:4a:f5:44:e9:8a:4b:30:22:4e:a3:9c:d1:19:12:a2:2b: 7a:ee:01:ae:a7:70:50:31:74:6f:30:43:0d:37:e1:8f:d0:80: c0:16:15:83:68:29:56:7f:a1:a9:a2:5a:3b:91:76:97:0b:c3: 3b:d5:d4:5d:15:ec:e7:57:f3:a9:5e:17:4d:76:fd:88:32:41: 10:78:c6:92:0a:e1:b1:a1:f4:6a:be:da:60:2d:a0:ee:67:47: 16:f7:c4:b5:af:5a:f6:b6:9c:52:f0:77:cf:5b:c1:43:e5:78: 5e:0e:63:ae:bc:75:82:30:cd:76:6f:a8:e9:a6:f9:f7:9c:32: b8:ee:38:ed:ff:c5:a3:0e:47:42:20:99:25:c8:4f:3a:e4:9e: d8:92:8a:6d:3d:c3:63:1d:fa:5b:89:f3:2c:43:f0:f1:85:92: 41:5b:dd:ce -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yoL0VdnNBzCHsiBSh0F6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2U2OWM5MWQ0NTMzOTZiZmExNjZmMDUxYmY4ZjA2YzAzYTA4NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuBqlhwV3ouDJUxGEAU9S2G0Hija 0UOMsLwceQFbjzafPjhkN9orVsd6GJiYjMWKjrxelkyrBPUL/OKJ85NPmZ+n53gX CTYSHYZasTqyCflOprm1HwEAk6DpNbPfORfGze9/wUYkL7YaHiLwdaMSg410SkDS M6DdC3MGlwVaAdYoNganWF2SpXuEoP2/OMVtKblJL8XigymOKJKPFhtusJbcJWEH HiEsJXLYKNvUPIEMhBnrBQmmv7b0a62GYr55Ek4H9v8VZrpbOoHpwxKbxWAZTK0Y ynQcJ+4g4xrLbk1eiZD2WsBY2gSE5JUWRWxKiOjoaa8jte+gYm8dqg81nwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFzmnJHUUzlr+hZvBRv48GwDoIXLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0LzZlNmRk OC0xYmNhLTQ2MzAtOTU3NC1hNTk3ZWU2MzdkYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvNmU2ZGQ4 LTFiY2EtNDYzMC05NTc0LWE1OTdlZTYzN2RiNC8xL1hPYWNrZFJUT1d2NkZtOEZH X2p3YkFPZ2hjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEHwoQMA0EAgACMAcDBQMqE6iAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDdTTANBgkqhkiG9w0BAQsFAAOCAQEAYdsx7M+i1aog g1SwgRE71gahluFUtMfTwnslXlym9/7TvyRHDHar63ypKxkmPmRl1lc4SJednkzz 1Bw8GJaiBRseMMdpoRFHh+FOXLaZf3Dslilwtznnv/Es1DFK9UTpikswIk6jnNEZ EqIreu4BrqdwUDF0bzBDDTfhj9CAwBYVg2gpVn+hqaJaO5F2lwvDO9XUXRXs51fz qV4XTXb9iDJBEHjGkgrhsaH0ar7aYC2g7mdHFvfEta9a9racUvB3z1vBQ+V4Xg5j rrx1gjDNdm+o6ab595wyuO447f/Fow5HQiCZJchPOuSe2JKKbT3DYx36W4nzLEPw 8YWSQVvdzg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:22 2026 by rpki-client