This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer (raw, json) Hash identifier: 4jZRBqovACrVPMWudDZSAXbo0d1m8N3QwKZ7Ryo0bbg= Subject key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5006B0341B394BAFB2B9A0FB78BCB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.49.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:00:6b:03:41:b3:94:ba:fb:2b:9a:0f:b7:8b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d656b2013e851516b942fa90706c72090dcddef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:11:b3:dd:a1:72:b5:51:3a:16:14:7d:d4: 48:ce:7b:f1:e0:f3:b8:e4:d8:dc:f5:55:a5:49:c5: 33:5d:b0:a9:2d:e3:d3:b8:a4:ad:ce:bc:f0:c1:56: c8:2c:29:f8:5c:14:55:97:ef:7d:e9:50:2c:b5:d4: a2:92:2a:39:f3:fb:20:bc:bd:dc:d1:25:a3:8f:5e: 00:e5:5d:09:76:44:1e:16:d5:21:e2:ea:c5:c8:73: e0:73:a7:36:64:7e:0c:6e:46:ef:c0:6f:6e:0f:c5: 52:93:58:83:f6:9e:bb:93:6e:3d:2c:a2:cd:8d:dc: 59:b7:3d:06:43:bf:a8:20:9a:ba:ea:82:5c:e5:10: 9c:9c:d7:af:83:f8:9a:dd:e0:d2:19:70:53:71:78: 70:86:75:d9:15:e3:31:2d:b6:c7:df:47:98:f5:c4: 0e:66:87:a3:d7:da:b7:b5:c6:d3:21:61:65:70:a9: 8e:41:90:a6:cb:fe:c7:47:07:92:15:ca:7d:69:75: 45:23:eb:c3:a4:13:18:24:a6:dd:31:07:b5:65:aa: b4:f7:20:f4:48:d7:cc:44:90:8b:88:9e:57:41:c5: 17:2b:69:41:7b:7c:22:ad:24:f4:00:6d:af:fe:62: 86:4a:82:84:4a:86:5e:ec:07:68:9d:7e:c4:b5:12: 5e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.12.0/22 Signature Algorithm: sha256WithRSAEncryption 78:d9:33:63:04:8e:29:b3:da:9d:f7:49:0a:0e:ed:29:45:c1: f6:18:55:00:f9:13:89:11:a6:d1:18:ca:4e:da:56:f9:0d:7b: 41:0c:50:a7:76:64:8c:cb:3d:f6:5d:70:44:21:53:0f:f4:4d: 36:38:70:d0:b8:ac:d4:c6:3c:c4:ac:53:49:d5:a0:42:b5:07: ab:10:a9:cb:89:31:88:38:86:de:13:11:f2:16:7e:9e:b4:af: 7d:31:03:28:d4:5c:31:0a:ef:ac:7f:93:80:ae:0d:d2:06:fe: f4:c8:2d:f0:10:e8:bf:40:1e:c5:45:e3:82:ef:ce:f9:ae:76: 59:f6:87:e6:56:ab:36:a0:4c:6d:06:19:54:67:62:84:ae:01: 91:45:02:4e:1a:b5:cb:11:b9:6e:e5:0b:e7:7a:39:9b:33:aa: 28:9b:02:03:7f:68:7d:74:5f:e7:77:19:47:f1:50:35:06:7d: 93:5c:3e:b2:75:6d:7c:a1:0b:e3:d6:5c:7f:21:40:72:b0:c3: 23:28:06:1f:c7:d2:8e:b4:aa:fc:2c:e4:cd:40:0b:7d:81:19: c6:6e:2f:94:bf:c9:88:25:2a:77:f4:48:36:d2:8f:ab:29:52: 61:9c:52:fa:e5:b6:16:14:3e:91:de:35:91:b2:5e:ce:c0:e3: 86:34:b6:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pQBrA0GzlLr7K5oPt4vLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDY1NmIyMDEzZTg1MTUxNmI5NDJmYTkwNzA2YzcyMDkwZGNkZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlcRs92hcrVROhYUfdRIznvx4PO4 5Njc9VWlScUzXbCpLePTuKStzrzwwVbILCn4XBRVl+996VAstdSikio58/sgvL3c 0SWjj14A5V0JdkQeFtUh4urFyHPgc6c2ZH4MbkbvwG9uD8VSk1iD9p67k249LKLN jdxZtz0GQ7+oIJq66oJc5RCcnNevg/ia3eDSGXBTcXhwhnXZFeMxLbbH30eY9cQO Zoej19q3tcbTIWFlcKmOQZCmy/7HRweSFcp9aXVFI+vDpBMYJKbdMQe1Zaq09yD0 SNfMRJCLiJ5XQcUXK2lBe3wirST0AG2v/mKGSoKESoZe7AdonX7EtRJeDwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFF1layAT6FFRa5QvqQcGxyCQ3N3vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzFkZjc2 NC0yYjgzLTQzNDMtOTEwMi00N2E5Zjk2Y2E1ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMWRmNzY0 LTJiODMtNDM0My05MTAyLTQ3YTlmOTZjYTU4Ni8xL1hXVnJJQlBvVVZGcmxDLXBC d2JISUpEYzNlOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwjEMMA0GCSqGSIb3DQEBCwUAA4IBAQB42TNj BI4ps9qd90kKDu0pRcH2GFUA+ROJEabRGMpO2lb5DXtBDFCndmSMyz32XXBEIVMP 9E02OHDQuKzUxjzErFNJ1aBCtQerEKnLiTGIOIbeExHyFn6etK99MQMo1FwxCu+s f5OArg3SBv70yC3wEOi/QB7FReOC7875rnZZ9ofmVqs2oExtBhlUZ2KErgGRRQJO GrXLEblu5QvnejmbM6oomwIDf2h9dF/ndxlH8VA1Bn2TXD6ydW18oQvj1lx/IUBy sMMjKAYfx9KOtKr8LOTNQAt9gRnGbi+Uv8mIJSp39Eg20o+rKVJhnFL65bYWFD6R 3jWRsl7OwOOGNLZN -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:36 2026 by rpki-client