This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer File: XVn0kNO2myLh4nwya69yMRBW3bg.cer (raw, json) Hash identifier: YnLDlHF4z+CXqYJpJVYdrmdOcxLwPAcpa636TdXJkmw= Subject key identifier: 5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36EEE040CDDF647D0E93876CC6B474 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39242 IP: 81.19.112.0/20 IP: 109.70.160.0/21 IP: 2a02:ef0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ee:e0:40:cd:df:64:7d:0e:93:87:6c:c6:b4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d59f490d3b69b22e1e27c326baf72311056ddb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:d6:6b:ca:24:94:7c:a5:88:d4:37:ab:00: 89:e6:ae:84:7f:5f:ea:63:72:b6:80:e6:7c:a0:bf: 7c:36:b3:12:4b:1e:85:90:d9:1d:b0:fd:23:df:14: b5:d2:e2:be:36:54:3d:82:ed:17:03:aa:c4:2e:a1: d5:01:d4:81:69:05:90:ed:ab:dc:c4:f0:7a:cb:5c: c7:3a:27:ac:8a:a2:19:d0:02:13:8c:02:bc:58:75: 17:e8:60:04:3d:17:3a:1a:96:79:81:c2:b8:45:af: e2:fc:45:be:42:28:f6:81:fa:af:cc:a5:7c:fe:d3: 7c:89:d5:ce:07:1d:05:a6:49:d6:d8:94:6b:21:04: 96:c0:3d:f3:9f:f2:ec:10:54:14:69:46:9f:c9:81: 7f:77:fd:ca:00:98:3f:3d:38:b2:eb:28:3d:5a:68: 99:3e:f9:65:e2:09:ef:10:f8:76:b8:a4:75:b5:47: 4e:9a:83:f3:b8:8b:b6:fb:93:18:ae:de:f3:36:93: 20:f3:1e:bb:b0:cd:9d:72:0d:bb:80:86:9d:30:2a: ab:d6:0b:21:64:91:a6:4a:22:74:ea:24:bb:5a:18: 2e:3f:f7:61:a0:33:f2:c3:dd:e0:e1:40:0d:3d:cb: 36:e9:21:04:72:7b:7a:f9:5d:af:54:b8:08:5e:24: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.112.0/20 109.70.160.0/21 IPv6: 2a02:ef0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39242 Signature Algorithm: sha256WithRSAEncryption 8a:b4:9a:78:02:b1:fb:02:6e:58:22:d0:89:5a:3c:5c:22:de: 2c:88:59:64:ef:8b:55:d6:79:71:0e:47:62:0b:b3:f1:aa:6d: 29:fe:09:77:dc:d9:2a:82:7e:49:7a:8b:47:54:f5:c1:c2:92: 39:0b:af:7a:f2:1e:bd:ff:05:d8:bc:17:bc:ee:3c:fd:8a:2d: 27:f9:01:55:74:c1:fd:9b:87:e7:32:da:6a:e6:18:14:f5:b2: f1:1b:3a:19:35:6c:f8:c3:20:ae:15:d0:13:b3:fe:26:5a:cd: 93:5b:65:ac:df:ce:9d:b5:3d:95:e3:e5:09:cf:ec:e6:7a:f1: 5d:81:ed:34:9d:a2:ae:35:84:cd:f7:3a:5e:15:e2:e5:8b:b5: 8a:9c:65:bb:69:fc:21:aa:8d:ca:4e:80:34:b8:8c:6f:ea:32: 22:1f:ee:e7:c5:01:df:13:b3:df:14:86:dd:12:fb:6e:a8:d8: 6c:99:b5:59:b5:8e:5e:93:05:cc:b7:89:02:d7:f5:ad:a0:aa: 23:80:a5:07:54:6f:43:cf:cc:47:2d:45:c5:63:06:2d:41:28: 83:f1:a7:e3:23:4e:da:d3:08:3f:ee:2d:63:c5:f7:d5:dd:ef: ac:b9:0f:3b:d1:50:49:65:ca:32:fb:98:e8:33:bd:0d:21:8b: e0:03:ec:54 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7Nu7gQM3fZH0Ok4dsxrR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDU5ZjQ5MGQzYjY5YjIyZTFlMjdjMzI2YmFmNzIzMTEwNTZkZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/jWa8oklHyliNQ3qwCJ5q6Ef1/q Y3K2gOZ8oL98NrMSSx6FkNkdsP0j3xS10uK+NlQ9gu0XA6rELqHVAdSBaQWQ7avc xPB6y1zHOiesiqIZ0AITjAK8WHUX6GAEPRc6GpZ5gcK4Ra/i/EW+Qij2gfqvzKV8 /tN8idXOBx0FpknW2JRrIQSWwD3zn/LsEFQUaUafyYF/d/3KAJg/PTiy6yg9WmiZ Pvll4gnvEPh2uKR1tUdOmoPzuIu2+5MYrt7zNpMg8x67sM2dcg27gIadMCqr1gsh ZJGmSiJ06iS7WhguP/dhoDPyw93g4UANPcs26SEEcnt6+V2vVLgIXiSH/QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFF1Z9JDTtpsi4eJ8MmuvcjEQVt24MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzJhZWI3 OS0zNTgyLTRlYmYtYjE5YS03OTM0OGU4MzY2YmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMmFlYjc5 LTM1ODItNGViZi1iMTlhLTc5MzQ4ZTgzNjZiYy8xL1hWbjBrTk8ybXlMaDRud3lh Njl5TVJCVzNiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEURNwAwQDbUagMA0EAgACMAcDBQAqAg7wMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCZSjANBgkqhkiG9w0BAQsFAAOCAQEAirSa eAKx+wJuWCLQiVo8XCLeLIhZZO+LVdZ5cQ5HYguz8aptKf4Jd9zZKoJ+SXqLR1T1 wcKSOQuvevIevf8F2LwXvO48/YotJ/kBVXTB/ZuH5zLaauYYFPWy8Rs6GTVs+MMg rhXQE7P+JlrNk1tlrN/OnbU9lePlCc/s5nrxXYHtNJ2irjWEzfc6XhXi5Yu1ipxl u2n8IaqNyk6ANLiMb+oyIh/u58UB3xOz3xSG3RL7bqjYbJm1WbWOXpMFzLeJAtf1 raCqI4ClB1RvQ8/MRy1FxWMGLUEog/Gn4yNO2tMIP+4tY8X31d3vrLkPO9FQSWXK MvuY6DO9DSGL4APsVA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:39 2026 by rpki-client