This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer (raw, json) Hash identifier: HgPkkWIhx1gjT5oM2/3SJoRW8aCoipVY6sf/BxgBoQM= Subject key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC7A1461FD705E3D1DEFCE9A2FD14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200931 IP: 185.91.4.0/22 IP: 2a03:8860::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c7:a1:46:1f:d7:05:e3:d1:de:fc:e9:a2:fd:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:7a:a9:a6:55:e8:59:c9:24:b3:60:b3:66: 86:94:a2:65:32:da:98:e8:76:97:b6:d8:d9:f4:2d: 84:17:31:b1:34:9d:37:61:f9:3c:84:f6:65:f0:93: 8d:95:36:e4:7a:41:d5:cc:48:2f:73:e2:90:75:50: d6:91:5f:97:2c:a0:a0:c6:90:73:78:35:5d:de:98: 56:ee:bc:db:6d:2f:22:30:85:6b:7b:fd:86:50:60: 65:d6:d3:3e:0b:d2:de:e9:a1:58:4e:89:b2:0a:df: 12:86:1b:7e:88:85:2c:11:9d:89:5c:5e:fd:1c:46: 4e:c3:fa:7f:83:65:ce:3b:f4:16:ae:2f:b9:df:71: 1f:3c:90:4a:2f:86:d4:c6:12:bc:bc:60:2b:e8:df: 03:f7:1d:3f:83:a3:87:e3:93:cf:3c:52:a3:70:e3: 75:e0:49:c0:cf:78:78:bd:cc:e8:f3:d2:45:12:43: d5:01:26:8c:3e:b4:4f:4b:ad:36:fb:88:ce:e6:a5: 98:89:ec:07:34:10:6f:fd:52:55:2c:d6:c8:de:d2: 0d:05:6f:f4:5c:e8:97:93:b3:83:67:f3:62:32:ec: 7e:d8:04:da:bd:17:f3:b2:36:40:15:68:bf:8a:1d: 03:72:7a:8e:b1:e8:71:b9:42:cf:30:f0:74:6d:9d: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.4.0/22 IPv6: 2a03:8860::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200931 Signature Algorithm: sha256WithRSAEncryption 2c:84:5f:c5:76:7b:6d:fd:e0:03:69:05:a3:7d:1a:14:43:d6: 66:1a:10:e9:fd:e3:9d:ad:e6:f9:56:f5:3d:11:d9:9f:24:b2: f5:64:16:b9:9c:56:38:e2:96:80:98:f6:27:d3:9e:12:bc:d5: db:94:e5:5b:9c:fd:0e:65:28:8f:5d:2b:68:a5:28:07:45:f6: 58:90:b0:e7:ac:34:f1:ea:5a:b3:4c:a0:62:cb:cf:74:56:a4: a7:a9:78:23:31:d0:c3:9f:7c:f6:a3:6e:0e:99:4f:47:c1:5b: 8b:18:5f:29:f0:ac:b3:9f:41:2c:a7:f8:f0:e2:5f:a4:9e:f6: cc:82:87:69:27:e4:12:36:48:46:bd:88:3d:2f:f0:3a:28:3a: ec:9b:2e:f3:16:89:11:24:31:0e:eb:1d:59:30:43:ff:ad:7d: e0:37:bc:38:49:28:ee:73:e2:09:0b:1e:22:5e:98:d7:a2:e4: 4b:c5:59:94:fa:d8:f5:d4:49:09:0b:32:c1:cb:95:35:fc:c7: 6e:0b:7c:af:07:9b:49:65:b7:21:88:da:ec:fc:a4:11:4c:42: 5f:46:22:ad:74:bf:44:67:3f:cb:e3:f7:fc:94:ca:b8:11:40: 33:77:c4:fd:69:e4:8c:bd:24:f2:a0:36:0d:bf:3a:50:05:5e: 71:9c:27:c6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26sehRh/XBePR3vzpov0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDE2ZGNjZmIyZTJjODhjZjA5ZjQ4N2M0MjFmYzhhZjdiYmQzNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpZ6qaZV6FnJJLNgs2aGlKJlMtqY 6HaXttjZ9C2EFzGxNJ03Yfk8hPZl8JONlTbkekHVzEgvc+KQdVDWkV+XLKCgxpBz eDVd3phW7rzbbS8iMIVre/2GUGBl1tM+C9Le6aFYTomyCt8Shht+iIUsEZ2JXF79 HEZOw/p/g2XOO/QWri+533EfPJBKL4bUxhK8vGAr6N8D9x0/g6OH45PPPFKjcON1 4EnAz3h4vczo89JFEkPVASaMPrRPS602+4jO5qWYiewHNBBv/VJVLNbI3tINBW/0 XOiXk7ODZ/NiMux+2ATavRfzsjZAFWi/ih0DcnqOsehxuULPMPB0bZ0PhwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF0W3M+y4siM8J9IfEIfyK97vTV0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2FkMDI0 MS0xYWUzLTRkNWItYjBkMS04NWM1ZDUzMDJkODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvYWQwMjQx LTFhZTMtNGQ1Yi1iMGQxLTg1YzVkNTMwMmQ4OC8xL1hSYmN6N0xpeUl6d24waDhR aF9JcjN1OU5YUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVsEMA0EAgACMAcDBQAqA4hgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMQ4zANBgkqhkiG9w0BAQsFAAOCAQEALIRfxXZ7bf3g A2kFo30aFEPWZhoQ6f3jna3m+Vb1PRHZnySy9WQWuZxWOOKWgJj2J9OeErzV25Tl W5z9DmUoj10raKUoB0X2WJCw56w08epas0ygYsvPdFakp6l4IzHQw5989qNuDplP R8FbixhfKfCss59BLKf48OJfpJ72zIKHaSfkEjZIRr2IPS/wOig67Jsu8xaJESQx DusdWTBD/6194De8OEko7nPiCQseIl6Y16LkS8VZlPrY9dRJCQsywcuVNfzHbgt8 rwebSWW3IYja7PykEUxCX0YirXS/RGc/y+P3/JTKuBFAM3fE/WnkjL0k8qA2Db86 UAVecZwnxg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:47 2026 by rpki-client