This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer File: XYHR_0WxVHwAqEtG75nsot-9Rbw.cer (raw, json) Hash identifier: xbzbjumMWdE/qRncxRTHGLkAWpNBRPv8KdmSNoexWWM= Subject key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4C69EA9A3EAA9CA42846276328803 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47161 AS: 48362 IP: 45.152.52.0/22 IP: 86.111.44.0/22 IP: 91.195.116.0/23 IP: 94.199.168.0/21 IP: 185.31.212.0/22 IP: 185.252.36.0/22 IP: 2a02:1688::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c6:9e:a9:a3:ea:a9:ca:42:84:62:76:32:88:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:bb:c4:25:1d:55:21:fe:ad:31:81:92:48: 28:ca:82:59:74:77:ca:a7:99:71:63:fc:ec:6c:d3: 54:b2:c2:ce:34:a6:4b:28:aa:6f:73:9b:82:a3:a3: a5:eb:53:68:62:1f:62:23:e3:15:8c:5b:89:2c:5e: 08:14:14:af:d4:0a:e1:14:d9:bc:c7:73:5c:c0:47: 66:ef:67:08:49:2f:52:18:9b:48:cf:4d:51:54:8b: 87:4d:aa:ed:a2:cd:5b:40:e9:0c:fa:44:2a:c0:ba: 9f:3e:09:26:33:65:33:a6:73:9b:3d:04:ba:e4:1d: 97:67:47:5a:93:e4:b9:a5:cc:91:1c:e2:b5:58:ae: 66:3d:a0:40:de:f4:98:86:e6:27:72:9a:44:bf:6a: 3e:a5:1b:6b:b0:7d:0a:81:60:77:32:5c:d2:5a:17: 08:37:79:70:fc:e1:ab:99:30:f3:ed:a8:0c:6e:5f: 19:a4:b3:24:d5:9a:41:ac:1a:02:95:a2:5a:21:9c: 40:d4:bd:95:c4:53:59:b6:01:22:2a:9d:c2:4e:4b: 98:64:b4:63:c2:c1:0a:4d:a5:60:e4:83:a2:c8:da: a6:72:1d:6e:d2:ae:e2:a1:30:24:2f:d6:89:27:65: 79:e1:fd:d4:06:4f:18:a3:2a:f2:4b:f4:4a:ff:b9: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.52.0/22 86.111.44.0/22 91.195.116.0/23 94.199.168.0/21 185.31.212.0/22 185.252.36.0/22 IPv6: 2a02:1688::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47161 48362 Signature Algorithm: sha256WithRSAEncryption 3e:e9:1f:1d:fb:72:51:8c:61:be:38:ac:df:a6:75:91:52:08: 8f:45:21:dd:58:00:b5:ed:17:d8:14:76:7c:2d:05:11:51:e1: 95:12:62:18:6f:87:cc:92:c1:c0:e7:8e:9e:dd:63:a6:8a:f0: 41:86:02:d0:ff:46:48:e3:98:10:2d:f1:e6:be:df:5c:ee:03: c4:85:f4:5a:40:76:78:8e:d1:59:a6:67:22:f8:9a:a1:e9:bd: 7f:47:9e:d8:ac:76:54:a1:15:39:c8:6a:ee:3a:c6:74:c6:a6: 07:3f:b3:4c:91:e3:3d:c7:d2:e5:9d:ad:52:bc:a0:e1:35:4c: 5b:e5:b1:be:7f:54:ab:89:7c:8d:ea:80:56:f3:24:fd:4e:44: dc:c5:4f:f4:d5:b2:4b:ff:26:35:c9:3d:68:c6:54:07:7c:cb: a1:87:53:f8:79:bc:f0:d2:a0:7a:ef:ab:39:7e:f5:71:41:ea: 68:50:30:76:23:a8:09:b8:8e:89:ec:20:0a:19:88:44:10:30: 5b:39:96:49:66:4a:cc:ec:d7:4f:e8:e1:7e:c1:d9:b7:6c:9a: 0c:86:ba:0e:a1:66:48:e1:d2:d1:de:07:83:ba:25:20:e3:bd: f8:76:4b:00:69:36:d7:58:3a:07:f7:f2:80:5b:61:68:07:19: c8:e0:68:7d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt+pMaeqaPqqcpChGJ2MogDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDgxZDFmZjQ1YjE1NDdjMDBhODRiNDZlZjk5ZWNhMmRmYmQ0NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/S7xCUdVSH+rTGBkkgoyoJZdHfK p5lxY/zsbNNUssLONKZLKKpvc5uCo6Ol61NoYh9iI+MVjFuJLF4IFBSv1ArhFNm8 x3NcwEdm72cISS9SGJtIz01RVIuHTartos1bQOkM+kQqwLqfPgkmM2UzpnObPQS6 5B2XZ0dak+S5pcyRHOK1WK5mPaBA3vSYhuYncppEv2o+pRtrsH0KgWB3MlzSWhcI N3lw/OGrmTDz7agMbl8ZpLMk1ZpBrBoClaJaIZxA1L2VxFNZtgEiKp3CTkuYZLRj wsEKTaVg5IOiyNqmch1u0q7ioTAkL9aJJ2V54f3UBk8YoyryS/RK/7mvRwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFF2B0f9FsVR8AKhLRu+Z7KLfvUW8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyL2FjZDdl My05Yzc2LTRmZjYtYjVhZS1lZTgwYTJkMjk1MmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYWNkN2Uz LTljNzYtNGZmNi1iNWFlLWVlODBhMmQyOTUyZC8xL1hZSFJfMFd4Vkh3QXFFdEc3 NW5zb3QtOVJidy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCLZg0AwQCVm8sAwQBW8N0AwQDXseoAwQCuR/U AwQCufwkMA0EAgACMAcDBQMqAhaIMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC4 OQIDALzqMA0GCSqGSIb3DQEBCwUAA4IBAQA+6R8d+3JRjGG+OKzfpnWRUgiPRSHd WAC17RfYFHZ8LQURUeGVEmIYb4fMksHA546e3WOmivBBhgLQ/0ZI45gQLfHmvt9c 7gPEhfRaQHZ4jtFZpmci+Jqh6b1/R57YrHZUoRU5yGruOsZ0xqYHP7NMkeM9x9Ll na1SvKDhNUxb5bG+f1SriXyN6oBW8yT9TkTcxU/01bJL/yY1yT1oxlQHfMuhh1P4 ebzw0qB676s5fvVxQepoUDB2I6gJuI6J7CAKGYhEEDBbOZZJZkrM7NdP6OF+wdm3 bJoMhroOoWZI4dLR3geDuiUg4734dksAaTbXWDoH9/KAW2FoBxnI4Gh9 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:58 2026 by rpki-client