This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer File: XWU9B97R6Nf08uoEvTaELFsS8V4.cer (raw, json) Hash identifier: FAkQYHgkAXZqlDTGnu/ThdEvPAXL7dkKtS/AeKmdsS8= Subject key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591F9C563BBF41325EC906FE375CF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50507 IP: 193.106.180.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1f:9c:56:3b:bf:41:32:5e:c9:06:fe:37:5c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:fe:eb:01:dd:8c:7f:b3:6c:1a:a5:e6:84: a4:b2:fa:f6:fd:4d:02:34:4e:7c:d6:0a:e2:05:ca: dc:af:7b:6a:7c:68:ab:4b:31:cf:55:d8:aa:0e:93: 16:e1:71:b5:57:3d:ee:a0:5e:e5:5b:ac:88:fd:d9: f0:4c:3c:15:90:60:0d:f8:2a:27:cd:57:8d:37:b2: b2:4d:7c:15:4b:88:a6:65:7c:17:40:19:53:e3:04: 24:5e:11:0e:6b:66:f0:6d:9b:3e:e4:6b:7c:d3:df: b3:cd:27:1c:bf:c2:ee:e7:23:d1:ff:a5:cc:57:3a: d2:bb:74:64:c9:b5:84:38:d8:e6:9f:d1:4f:21:81: 25:37:6d:2e:82:e1:74:ed:ba:4b:02:d7:56:b1:d1: 21:ab:f2:68:10:11:3c:79:21:6d:92:33:bb:40:9e: 98:ae:c4:d9:56:da:92:f1:68:52:fe:65:c4:ab:8c: 48:2b:96:43:44:6d:09:8c:5e:66:e6:fe:a1:5b:35: 38:2c:74:6b:4b:05:05:0a:c8:7d:9c:23:57:d5:79: 26:cb:dd:4a:1c:4f:62:37:9b:4e:6f:3a:5b:69:ae: 73:3d:08:8e:de:79:70:97:47:23:ef:51:98:43:e1: 15:0f:a0:ae:6e:6c:7f:39:be:e2:db:f5:6a:8f:f1: bf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50507 Signature Algorithm: sha256WithRSAEncryption 74:85:74:d5:17:d9:6a:f6:af:94:10:cc:7f:1f:b3:d2:63:ca: 25:c4:25:96:0b:b9:37:a4:34:48:f5:7f:03:0f:a7:7b:76:35: c3:76:03:3c:1d:21:0f:b6:96:24:cf:3a:62:10:b6:9b:4f:e3: b7:b2:fd:d3:dc:a8:0a:74:26:8c:53:db:ce:42:7b:d2:d2:ab: 8a:3c:e8:b7:69:48:c0:f7:23:35:3b:c0:74:5e:93:83:02:69: 68:da:04:0d:52:28:11:83:56:2d:a2:11:08:7e:65:28:03:48: 81:26:58:1f:4e:ba:4a:04:06:d7:32:46:63:ef:b9:83:49:dc: 0f:9c:27:97:b3:87:08:6b:c0:c7:16:04:af:cd:66:5e:96:69: 5e:df:59:a7:8b:d0:a9:14:37:12:8a:4e:20:1f:7f:75:3f:df: d7:d4:45:c0:ee:72:86:e8:3a:a4:c9:19:ff:38:dc:93:90:47: b1:60:ab:40:c7:c2:3f:34:9d:c9:2f:ef:c8:95:07:f1:45:f1: cb:d0:d0:de:d2:0a:85:a0:bb:60:8f:fa:d9:59:61:ed:84:d9: 17:f7:da:ca:30:66:2a:5b:b0:98:b3:ad:a9:e8:a1:e4:00:30: 78:07:ba:02:75:0c:6a:d8:be:ce:ad:3f:af:6a:17:da:b5:1d: 55:b0:b4:7a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WR+cVju/QTJeyQb+N1zxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDY1M2QwN2RlZDFlOGQ3ZjRmMmVhMDRiZDM2ODQyYzViMTJmMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEH+6wHdjH+zbBql5oSksvr2/U0C NE581griBcrcr3tqfGirSzHPVdiqDpMW4XG1Vz3uoF7lW6yI/dnwTDwVkGAN+Con zVeNN7KyTXwVS4imZXwXQBlT4wQkXhEOa2bwbZs+5Gt809+zzSccv8Lu5yPR/6XM VzrSu3RkybWEONjmn9FPIYElN20uguF07bpLAtdWsdEhq/JoEBE8eSFtkjO7QJ6Y rsTZVtqS8WhS/mXEq4xIK5ZDRG0JjF5m5v6hWzU4LHRrSwUFCsh9nCNX1Xkmy91K HE9iN5tObzpbaa5zPQiO3nlwl0cj71GYQ+EVD6Cubmx/Ob7i2/Vqj/G/iQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF1lPQfe0ejX9PLqBL02hCxbEvFeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2EwNDc1 Zi1jYTk3LTRiMTYtOTZkYi0yMTQ1Y2E3NWUzODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvYTA0NzVm LWNhOTctNGIxNi05NmRiLTIxNDVjYTc1ZTM4My8xL1hXVTlCOTdSNk5mMDh1b0V2 VGFFTEZzUzhWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwWq0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDFSzANBgkqhkiG9w0BAQsFAAOCAQEAdIV01RfZavavlBDMfx+z0mPKJcQllgu5 N6Q0SPV/Aw+ne3Y1w3YDPB0hD7aWJM86YhC2m0/jt7L909yoCnQmjFPbzkJ70tKr ijzot2lIwPcjNTvAdF6TgwJpaNoEDVIoEYNWLaIRCH5lKANIgSZYH066SgQG1zJG Y++5g0ncD5wnl7OHCGvAxxYEr81mXpZpXt9Zp4vQqRQ3EopOIB9/dT/f19RFwO5y hug6pMkZ/zjck5BHsWCrQMfCPzSdyS/vyJUH8UXxy9DQ3tIKhaC7YI/62Vlh7YTZ F/fayjBmKluwmLOtqeih5AAweAe6AnUMati+zq0/r2oX2rUdVbC0eg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:31 2026 by rpki-client