This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer File: XWMX9pNua1eLOMPfsZgCVJj8rqE.cer (raw, json) Hash identifier: osbarIb05sb7B4BPIPZPw2PZfrBagoWK1+Gp3h8xbKg= Subject key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED3E918511C7CCAACA817DA2C1FDBC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208659 IP: 45.81.92.0/22 IP: 2a0e:5480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3e:91:85:11:c7:cc:aa:ca:81:7d:a2:c1:fd:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:13:80:40:be:ba:3f:64:b7:c8:28:8d:7f: ac:d3:ed:93:f8:8e:a9:44:7e:98:4b:ac:1e:aa:a3: 2d:12:ee:bb:93:10:2b:57:8a:c6:0c:6e:65:4f:cb: d5:22:17:40:0e:ed:49:e5:e2:10:87:10:54:19:23: 94:b8:0a:1c:a5:60:70:2e:1a:6c:6c:c6:e2:cc:8a: 58:95:d5:33:a8:6d:5e:ec:eb:46:cf:03:1e:68:e8: 15:69:15:26:31:a5:70:82:79:11:9b:e1:cd:87:ba: 66:b1:a4:bf:3b:ac:21:68:6d:72:07:a9:b8:19:ad: 81:b4:73:d4:e1:64:ec:f7:90:9d:55:0b:c4:11:f2: c6:f9:df:c0:04:29:65:39:2b:b8:ea:e8:db:32:3d: 02:4c:94:72:b4:b6:be:58:52:85:6d:35:1a:09:0f: 9c:b6:7e:28:58:97:27:8c:1b:69:6c:94:49:c0:f7: ec:be:48:6e:8d:6d:ea:a6:ce:11:ef:60:19:92:c7: 3b:ec:3d:49:97:4e:fe:59:70:ca:20:80:2b:94:0a: 5f:db:85:c4:ec:2e:29:83:15:f2:a4:9b:9d:ed:12: bf:1e:18:1d:47:ba:75:77:11:1e:31:25:44:ff:f9: a4:e7:95:5c:8b:b7:bd:df:81:17:97:1a:02:72:64: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.92.0/22 IPv6: 2a0e:5480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208659 Signature Algorithm: sha256WithRSAEncryption b0:80:32:18:45:dc:6a:53:d2:c8:e1:45:e7:a6:a5:f8:9c:2f: 6d:00:1c:5c:fb:8b:a8:b4:e4:79:61:02:9e:08:0a:8e:3b:b2: 3e:29:de:58:71:f9:8f:47:2f:6e:67:65:23:99:81:38:05:42: 23:f9:e5:a1:ba:c6:29:3a:60:8e:6d:cf:f8:3e:82:24:83:b4: cc:91:fb:99:25:a0:52:12:6e:e4:0e:64:74:7e:24:d8:a7:c4: f9:b5:3d:86:e3:bd:b0:71:3f:aa:99:a8:50:d0:25:82:18:b0: 5e:bb:ca:51:33:dd:7f:89:98:02:7c:d9:ec:e5:14:59:92:f6: 2b:0c:d7:1c:47:36:2a:92:e8:35:3a:3b:ce:c4:dd:50:8e:3d: 04:bd:da:94:62:6d:78:3e:bd:fc:00:fa:df:f0:db:47:35:7c: 3f:96:e9:64:4a:9f:da:d6:dc:99:c0:8e:65:71:38:11:28:ff: 31:8a:a2:5b:dd:cf:9d:67:98:c8:c7:09:a5:d1:f9:5c:87:50: 5c:42:ff:6e:8f:d8:c3:34:f6:5f:0c:59:66:b9:f5:57:16:17: c4:40:43:96:30:12:80:a1:16:e4:9d:6c:00:99:bb:5a:fe:65: e5:d7:d8:16:21:cc:8e:70:02:91:9d:57:88:60:b9:14:d6:73: e3:4f:18:04 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87T6RhRHHzKrKgX2iwf28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDYzMTdmNjkzNmU2YjU3OGIzOGMzZGZiMTk4MDI1NDk4ZmNhZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uMTgEC+uj9kt8gojX+s0+2T+I6p RH6YS6weqqMtEu67kxArV4rGDG5lT8vVIhdADu1J5eIQhxBUGSOUuAocpWBwLhps bMbizIpYldUzqG1e7OtGzwMeaOgVaRUmMaVwgnkRm+HNh7pmsaS/O6whaG1yB6m4 Ga2BtHPU4WTs95CdVQvEEfLG+d/ABCllOSu46ujbMj0CTJRytLa+WFKFbTUaCQ+c tn4oWJcnjBtpbJRJwPfsvkhujW3qps4R72AZksc77D1Jl07+WXDKIIArlApf24XE 7C4pgxXypJud7RK/HhgdR7p1dxEeMSVE//mk55Vci7e934EXlxoCcmSRCQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF1jF/aTbmtXizjD37GYAlSY/K6hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzAzNDkw Yy1lYTQ3LTQwMmEtOGJiMC1kNTY1OGQwZjMyOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvMDM0OTBj LWVhNDctNDAyYS04YmIwLWQ1NjU4ZDBmMzI5Mi8xL1hXTVg5cE51YTFlTE9NUGZz WmdDVkpqOHJxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVFcMA0EAgACMAcDBQMqDlSAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvEzANBgkqhkiG9w0BAQsFAAOCAQEAsIAyGEXcalPS yOFF56al+JwvbQAcXPuLqLTkeWECnggKjjuyPineWHH5j0cvbmdlI5mBOAVCI/nl obrGKTpgjm3P+D6CJIO0zJH7mSWgUhJu5A5kdH4k2KfE+bU9huO9sHE/qpmoUNAl ghiwXrvKUTPdf4mYAnzZ7OUUWZL2KwzXHEc2KpLoNTo7zsTdUI49BL3alGJteD69 /AD63/DbRzV8P5bpZEqf2tbcmcCOZXE4ESj/MYqiW93PnWeYyMcJpdH5XIdQXEL/ bo/YwzT2XwxZZrn1VxYXxEBDljASgKEW5J1sAJm7Wv5l5dfYFiHMjnACkZ1XiGC5 FNZz408YBA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:44 2026 by rpki-client