This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer File: XQu-t4M73JvnJQYRV8A58qEPGoA.cer (raw, json) Hash identifier: /rju7/l6xvZmEgld8k19LlEhU/mEnWovJWkmwdHB/78= Subject key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD8EAFFA626C20D267BDE1789EEBB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50471 IP: 109.95.216.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d8:ea:ff:a6:26:c2:0d:26:7b:de:17:89:ee:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:05:d3:e1:ff:86:9c:cc:a3:1b:64:f9:d8: 98:65:ab:f6:43:77:7e:d9:4e:7d:0d:b4:79:71:3d: 5b:f3:e6:80:20:3a:c6:c5:e4:c2:4b:48:ad:21:6d: 73:a5:7e:c9:e7:f0:23:0c:7d:05:e7:0b:b6:3e:d4: 0e:11:41:31:9d:3d:27:da:e8:77:40:8b:ee:76:de: fb:12:3e:b3:b9:aa:d9:50:15:7e:da:64:13:6b:3a: c0:ba:37:a6:6e:98:dd:bd:db:84:24:95:5d:ae:a7: e8:fc:10:b5:96:78:d3:7d:fd:29:28:ae:7e:75:e9: 6f:8b:2a:9c:c3:1c:40:91:55:3c:62:23:53:47:82: 93:8f:04:75:c1:a1:1b:3e:ac:c5:fd:64:f2:bb:26: c9:89:a6:8f:64:d0:0d:fe:66:50:07:44:aa:d3:5b: c4:c3:ad:20:b0:ba:63:bd:cd:08:b5:01:6f:3c:54: 24:ad:c6:e3:16:ab:a0:73:7a:66:50:17:65:96:ed: 83:45:48:5c:17:1b:24:3f:e0:66:06:5e:2a:ce:bd: d7:91:76:89:c9:33:1f:8b:33:fb:cd:3d:e0:db:70: 26:47:3d:ff:64:e9:14:0f:ae:50:55:3d:4a:8d:60: 15:7f:ce:9f:8d:32:e6:e9:11:5d:34:20:eb:5c:f2: 64:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.95.216.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50471 Signature Algorithm: sha256WithRSAEncryption a6:fa:c7:2f:75:2c:08:85:7f:fe:3f:5c:6f:8f:d0:16:c7:e2: b3:8c:59:82:04:0e:2d:80:b9:ce:bf:d0:07:c8:51:e4:b8:ec: d8:7d:e6:fa:88:16:87:eb:75:46:65:87:8b:d0:dd:c3:2c:5a: 49:11:50:09:fb:78:62:fd:94:ef:52:af:c0:27:d9:2c:c7:35: c6:8f:83:41:8e:0c:37:c1:a9:2d:1b:c5:ca:57:20:32:bf:53: a0:c9:80:e7:c6:96:9e:71:d5:88:b2:0f:18:41:85:1d:74:b5: b4:2c:16:b5:cf:e0:8c:d0:5a:c2:38:e5:84:99:5d:d6:37:17: 16:ba:c5:da:b7:a2:95:bb:9d:fc:8f:c8:e0:b3:85:ac:35:ae: 73:6b:68:e1:4b:dc:18:05:0c:4b:ad:02:b5:7d:56:a7:98:1f: 82:a7:e6:3b:e0:b7:c0:a4:dd:ef:b8:25:29:1e:bf:77:d1:21: 23:6c:fb:3a:74:18:be:be:b7:47:16:a4:3d:4a:13:15:00:fc: 1c:cf:fd:c8:9e:b0:86:e1:9a:20:21:ad:23:20:a0:b4:a3:4f: 52:54:ca:95:19:ca:27:ac:89:2d:df:37:1d:f4:f4:db:3a:59: 5b:90:5d:d4:a4:7e:a8:10:e5:d7:46:4a:a9:aa:b8:9e:9d:75: d0:40:3a:68 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57Njq/6Ymwg0me94Xie67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDBiYmViNzgzM2JkYzliZTcyNTA2MTE1N2MwMzlmMmExMGYxYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU8F0+H/hpzMoxtk+diYZav2Q3d+ 2U59DbR5cT1b8+aAIDrGxeTCS0itIW1zpX7J5/AjDH0F5wu2PtQOEUExnT0n2uh3 QIvudt77Ej6zuarZUBV+2mQTazrAujembpjdvduEJJVdrqfo/BC1lnjTff0pKK5+ delviyqcwxxAkVU8YiNTR4KTjwR1waEbPqzF/WTyuybJiaaPZNAN/mZQB0Sq01vE w60gsLpjvc0ItQFvPFQkrcbjFqugc3pmUBdllu2DRUhcFxskP+BmBl4qzr3XkXaJ yTMfizP7zT3g23AmRz3/ZOkUD65QVT1KjWAVf86fjTLm6RFdNCDrXPJkiQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF0LvreDO9yb5yUGEVfAOfKhDxqAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2QyYzA4 Zi01ZmYzLTQ5ODItYjU3Yi02MzFjNmQwOWU4NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZDJjMDhm LTVmZjMtNDk4Mi1iNTdiLTYzMWM2ZDA5ZTg0NS8xL1hRdS10NE03M0p2bkpRWVJW OEE1OHFFUEdvQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDbV/YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDFJzANBgkqhkiG9w0BAQsFAAOCAQEApvrHL3UsCIV//j9cb4/QFsfis4xZggQO LYC5zr/QB8hR5Ljs2H3m+ogWh+t1RmWHi9DdwyxaSRFQCft4Yv2U71KvwCfZLMc1 xo+DQY4MN8GpLRvFylcgMr9ToMmA58aWnnHViLIPGEGFHXS1tCwWtc/gjNBawjjl hJld1jcXFrrF2reilbud/I/I4LOFrDWuc2to4UvcGAUMS60CtX1Wp5gfgqfmO+C3 wKTd77glKR6/d9EhI2z7OnQYvr63RxakPUoTFQD8HM/9yJ6whuGaICGtIyCgtKNP UlTKlRnKJ6yJLd83HfT02zpZW5Bd1KR+qBDl10ZKqaq4np110EA6aA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:37 2026 by rpki-client