This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer File: XOsOvYeLd9QvLKndCPcMMjxdA9s.cer (raw, json) Hash identifier: Duo/0Eu3fsHoD6Xx6p/JzViWYhYTDFMZqhjDU12y5pw= Subject key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4F2A3426837AA884FCEE37E18EF2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21461 AS: 44700 IP: 88.151.64.0/21 IP: 93.89.0.0/22 IP: 93.89.8.0/22 IP: 95.129.208.0/21 IP: 185.6.68.0/22 IP: 185.59.12.0/22 IP: 2a02:17f8::/29 IP: 2a02:21e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f2:a3:42:68:37:aa:88:4f:ce:e3:7e:18:ef:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:84:04:63:7b:20:de:62:1c:9b:19:2c:28: 2e:49:18:99:7d:6a:e5:c2:88:ce:20:c4:f5:ad:2a: cd:bc:fd:74:73:69:9d:1c:61:a1:74:e5:3b:9e:60: f4:35:d3:1a:84:2f:a2:db:85:de:95:97:af:fc:37: 56:06:92:01:be:64:0f:95:e3:39:49:4f:61:32:f5: ad:d5:8a:9d:44:db:e8:ed:8c:09:90:0d:34:71:5e: 52:64:0d:ca:d6:d7:89:3d:12:56:90:e2:26:be:a8: 87:8b:6e:0e:63:9b:a1:d7:d7:24:1f:c9:1e:e1:32: 06:7e:2f:15:1b:3b:a0:5e:b9:03:7a:51:4f:a8:4a: f8:7e:98:25:6f:34:3f:c8:d7:8e:45:af:45:ce:6c: 4c:c0:bc:8d:a4:a2:7a:f4:cf:54:36:f4:92:26:06: 38:cd:b1:d7:80:9b:f2:3b:42:9c:bd:aa:54:f2:93: 6a:0d:f3:97:97:49:d5:d8:e6:27:ce:85:21:e5:03: 55:b3:c1:4d:e4:3a:52:2c:16:18:7c:b0:1f:d8:76: 55:8a:2f:c0:86:c5:78:d4:ee:7f:b6:79:54:62:87: 24:36:7b:76:11:77:ed:07:6e:e4:76:43:df:02:5e: 05:78:17:d7:ed:4e:5a:1c:ba:6f:89:90:a8:fa:d7: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.64.0/21 93.89.0.0/22 93.89.8.0/22 95.129.208.0/21 185.6.68.0/22 185.59.12.0/22 IPv6: 2a02:17f8::/29 2a02:21e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21461 44700 Signature Algorithm: sha256WithRSAEncryption 7b:75:ab:60:12:55:c8:a5:fb:a2:35:ba:b3:98:f0:5b:26:ba: e9:66:0d:3f:3c:49:31:8f:92:53:0a:70:2e:70:94:58:f4:c5: 5d:7b:e5:5c:0a:25:eb:f3:b9:5d:a7:e8:2f:41:ea:c4:69:55: 01:3c:3b:52:f1:6f:4c:c6:29:8e:2a:d2:54:40:57:c7:5c:0a: 10:e8:a0:15:fd:ca:d1:4d:a7:a2:2b:60:51:7f:b4:7b:cd:84: 5f:d5:b2:f5:cc:4f:d8:ea:16:d9:03:f4:08:2f:01:7a:ce:7d: c7:bc:e5:1b:01:6e:a8:5f:33:f5:5f:1a:cd:4e:64:f1:36:85: e4:18:3e:fa:38:28:80:bb:bc:ff:c8:9a:35:3c:70:26:21:7e: 3f:41:1c:49:b6:7e:f1:e8:ee:31:b8:4b:6e:55:4f:8a:e7:73: 37:7d:c3:2c:67:ae:96:0a:4f:a6:3e:6d:24:c1:eb:df:a1:f8: bd:45:49:9d:2a:6d:38:94:f5:b3:03:28:56:37:83:ab:eb:48: eb:48:b2:91:17:9b:37:f7:1d:f6:3a:90:c1:d5:63:09:7f:4c: 1a:42:90:21:b8:2f:84:d5:06:6e:07:32:79:02:a8:fb:e9:21: c8:fd:f8:ce:13:b6:da:91:29:a2:98:25:07:06:df:2a:8a:4a: 02:f7:28:5f -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt7pPKjQmg3qohPzuN+GO8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2ViMGViZDg3OGI3N2Q0MmYyY2E5ZGQwOGY3MGMzMjNjNWQwM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8SEBGN7IN5iHJsZLCguSRiZfWrl wojOIMT1rSrNvP10c2mdHGGhdOU7nmD0NdMahC+i24XelZev/DdWBpIBvmQPleM5 SU9hMvWt1YqdRNvo7YwJkA00cV5SZA3K1teJPRJWkOImvqiHi24OY5uh19ckH8ke 4TIGfi8VGzugXrkDelFPqEr4fpglbzQ/yNeORa9FzmxMwLyNpKJ69M9UNvSSJgY4 zbHXgJvyO0KcvapU8pNqDfOXl0nV2OYnzoUh5QNVs8FN5DpSLBYYfLAf2HZVii/A hsV41O5/tnlUYockNnt2EXftB27kdkPfAl4FeBfX7U5aHLpviZCo+tc6ewIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzNlNzJl ZC0xZDY1LTQ5ODItYWQ5YS05YzM3NDc4YTU5M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvM2U3MmVk LTFkNjUtNDk4Mi1hZDlhLTljMzc0NzhhNTkzZi8xL1hPc092WWVMZDlRdkxLbmRD UGNNTWp4ZEE5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQDWJdAAwQCXVkAAwQCXVkIAwQDX4HQAwQCuQZE AwQCuTsMMBQEAgACMA4DBQMqAhf4AwUAKgIh4DAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgJT1QIDAK6cMA0GCSqGSIb3DQEBCwUAA4IBAQB7datgElXIpfuiNbqzmPBb JrrpZg0/PEkxj5JTCnAucJRY9MVde+VcCiXr87ldp+gvQerEaVUBPDtS8W9MximO KtJUQFfHXAoQ6KAV/crRTaeiK2BRf7R7zYRf1bL1zE/Y6hbZA/QILwF6zn3HvOUb AW6oXzP1XxrNTmTxNoXkGD76OCiAu7z/yJo1PHAmIX4/QRxJtn7x6O4xuEtuVU+K 53M3fcMsZ66WCk+mPm0kwevfofi9RUmdKm04lPWzAyhWN4Or60jrSLKRF5s39x32 OpDB1WMJf0waQpAhuC+E1QZuBzJ5Aqj76SHI/fjOE7bakSmimCUHBt8qikoC9yhf -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:11 2026 by rpki-client