This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer File: XPiK3BnqrRPWhbgew5k1vUssaa0.cer (raw, json) Hash identifier: 7nmrqbgPA585XcGzo5N9J2PmK/aJT6uYjB6CrK+ysFE= Subject key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3922DC191A76CB8E435F1DB8831393 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208862 IP: 5.83.105.0 -- 5.83.111.255 IP: 45.82.0.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:22:dc:19:1a:76:cb:8e:43:5f:1d:b8:83:13:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:1d:73:7b:aa:39:d6:df:26:95:d2:e8:e8: eb:b8:05:8e:ff:4b:63:b1:18:d9:eb:34:06:0d:08: cc:59:55:fb:01:38:b8:36:8a:d7:f4:6d:e7:09:a4: 23:9f:f3:2d:8a:c1:07:e4:98:fc:5c:47:9a:87:82: 01:cc:2f:8d:de:b6:93:36:30:cc:27:44:cb:03:01: 3f:cc:f1:f1:2b:98:c7:c1:00:df:fc:77:57:8e:9b: 62:6e:a9:29:88:62:06:82:b3:3d:9f:37:45:af:90: ad:d7:c8:57:0b:29:bb:18:38:23:24:6d:7e:59:2d: 87:c0:11:04:77:35:f3:48:a6:57:f8:a7:ed:92:b7: 31:5f:68:fb:5a:c7:b5:4d:9a:30:78:2d:bc:5b:0d: 7e:fb:78:d5:62:bf:46:e0:fd:f3:7b:f4:db:94:bc: 10:cf:cc:30:2b:3d:c4:05:b0:9f:1f:3c:54:41:13: c7:64:7c:80:82:48:f9:45:23:55:49:a7:ae:e9:6c: 87:0b:2f:09:b7:98:57:6b:8d:0f:55:1d:ae:8c:c8: 76:aa:5f:72:dd:9b:65:33:44:24:4b:6f:08:8d:3c: 07:69:b9:21:d8:08:56:24:35:9f:2b:62:19:fb:7a: 19:ad:2e:92:ec:18:52:3e:07:06:5f:df:15:a7:c6: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.105.0-5.83.111.255 45.82.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208862 Signature Algorithm: sha256WithRSAEncryption 4b:a3:96:5a:20:b8:d8:56:d6:a4:c2:a6:9c:e5:b3:7f:68:da: 13:c0:ad:94:e6:1e:4c:d3:cb:52:b0:b7:5b:a2:d6:fc:3e:33: c2:10:d2:69:75:46:b5:8a:d7:de:79:f1:63:41:24:d5:64:1f: 91:2b:b0:35:f4:dd:aa:fd:e5:87:d9:db:32:e3:0a:50:01:29: 41:e8:bd:0f:43:8a:30:76:c0:d3:06:37:13:56:fe:42:7c:ff: 64:64:66:84:92:ee:1d:08:b1:95:4f:ea:04:a8:6d:5d:07:c1: c3:b3:d3:07:62:c4:e1:0e:5a:6e:1f:1f:48:a6:f2:80:36:c2: a7:74:83:37:cd:44:ad:4d:d3:14:1c:c3:89:ed:2c:e0:be:61: 33:14:13:4d:76:00:b8:8a:ed:9a:5e:36:c0:d3:7c:6d:27:02: a8:0b:a4:fe:af:44:54:9b:f9:5c:73:e5:5a:2e:3d:6e:27:23: 67:db:30:40:0c:62:48:bc:2f:fa:a2:5b:9a:f0:a9:cf:56:c0: 03:b5:62:86:2a:61:06:01:1a:e8:39:4e:17:34:13:d4:90:95: 00:e1:52:1e:5a:1e:dd:e3:b0:df:3c:af:58:09:1b:07:40:9a: 80:6b:7d:c8:20:93:1a:31:c4:2a:e3:18:bc:9b:c4:e9:34:a3: e5:cb:05:fa -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt+OSLcGRp2y45DXx24gxOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2Y4OGFkYzE5ZWFhZDEzZDY4NWI4MWVjMzk5MzViZDRiMmM2OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Edc3uqOdbfJpXS6OjruAWO/0tj sRjZ6zQGDQjMWVX7ATi4NorX9G3nCaQjn/MtisEH5Jj8XEeah4IBzC+N3raTNjDM J0TLAwE/zPHxK5jHwQDf/HdXjptibqkpiGIGgrM9nzdFr5Ct18hXCym7GDgjJG1+ WS2HwBEEdzXzSKZX+KftkrcxX2j7Wse1TZoweC28Ww1++3jVYr9G4P3ze/TblLwQ z8wwKz3EBbCfHzxUQRPHZHyAgkj5RSNVSaeu6WyHCy8Jt5hXa40PVR2ujMh2ql9y 3ZtlM0QkS28IjTwHabkh2AhWJDWfK2IZ+3oZrS6S7BhSPgcGX98Vp8Z2PQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFFz4itwZ6q0T1oW4HsOZNb1LLGmtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzdjMTY2 Yy0yNGIyLTRhMDctOTExNS0xN2NlNjdiZGFkN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvN2MxNjZj LTI0YjItNGEwNy05MTE1LTE3Y2U2N2JkYWQ3Yi8xL1hQaUszQm5xclJQV2hiZ2V3 NWsxdlVzc2FhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBAAFU2kDBAQFU2ADBAItUgAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAy/eMA0GCSqGSIb3DQEBCwUAA4IBAQBLo5ZaILjYVtak wqac5bN/aNoTwK2U5h5M08tSsLdbotb8PjPCENJpdUa1itfeefFjQSTVZB+RK7A1 9N2q/eWH2dsy4wpQASlB6L0PQ4owdsDTBjcTVv5CfP9kZGaEku4dCLGVT+oEqG1d B8HDs9MHYsThDlpuHx9IpvKANsKndIM3zUStTdMUHMOJ7SzgvmEzFBNNdgC4iu2a XjbA03xtJwKoC6T+r0RUm/lcc+VaLj1uJyNn2zBADGJIvC/6olua8KnPVsADtWKG KmEGARroOU4XNBPUkJUA4VIeWh7d47DfPK9YCRsHQJqAa33IIJMaMcQq4xi8m8Tp NKPlywX6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:02 2026 by rpki-client