This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XYxMrtvxY99oiGrDtz8OTLQX4V4.cer File: XYxMrtvxY99oiGrDtz8OTLQX4V4.cer (raw, json) Hash identifier: MWxc3fqu0BKQhS2HCKZ8NKFQ5MtoqvksBGEHLsXkZQY= Subject key identifier: 5D:8C:4C:AE:DB:F1:63:DF:68:88:6A:C3:B7:3F:0E:4C:B4:17:E1:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF24013C08E1A338BC2BF2843CBB9E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.109.112.0/24 IP: 194.145.231.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:40:13:c0:8e:1a:33:8b:c2:bf:28:43:cb:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d8c4caedbf163df68886ac3b73f0e4cb417e15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:fa:63:2a:70:f2:77:f3:d8:f6:f9:0d:2d: 60:bb:d0:57:16:d7:37:74:45:fa:6a:bc:05:0c:fa: 24:83:6d:d2:3f:8c:00:ed:4a:30:25:f7:f1:53:c9: 67:e1:97:45:33:c3:e5:14:6f:61:ba:24:01:82:be: b1:fd:53:8a:62:2b:58:b2:5d:73:0a:e1:3b:9a:be: 40:b5:89:5b:89:98:ce:84:a6:95:89:3a:d5:f1:a2: 1d:50:f9:dd:8e:e2:f5:6c:9d:5f:68:5b:5d:b2:20: 8f:da:f6:2d:72:ce:0d:87:a3:3e:b3:87:82:d1:5f: 68:d1:c5:77:b0:93:98:2a:29:b0:c5:94:da:72:77: 56:4d:71:2a:5a:11:eb:d5:ff:ad:cc:1b:0f:66:a8: 8a:5b:14:c7:de:92:56:3a:f0:f5:4e:f9:60:b0:8f: 42:71:b0:2e:55:63:74:1d:72:c1:d1:95:ff:ab:e7: 28:92:a5:9c:d8:cf:6f:ed:da:4c:ba:99:75:76:6f: 99:7e:1f:c3:65:cc:25:d1:b5:60:03:45:06:73:c5: 1c:82:85:d2:9b:eb:34:5f:97:16:11:32:d1:70:bf: e3:6d:ef:ee:ed:37:e4:13:fe:11:13:d1:90:bd:ec: 4d:56:d8:d1:da:ba:79:82:c1:39:9d:2b:6f:88:33: af:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8C:4C:AE:DB:F1:63:DF:68:88:6A:C3:B7:3F:0E:4C:B4:17:E1:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.112.0/24 194.145.231.0/24 Signature Algorithm: sha256WithRSAEncryption a6:2b:f0:89:43:60:00:c2:d5:22:04:8c:3f:29:3b:65:94:a5: d2:23:f7:f0:f8:91:c4:39:08:24:79:ea:e6:a7:48:a1:78:af: 0c:95:f8:30:ec:4c:61:60:8f:76:b0:d2:2e:c2:e5:ff:8c:38: 77:38:4c:ff:64:66:eb:12:ed:be:90:fe:db:4e:d6:f1:a8:54: 42:df:05:2f:a5:68:f6:ff:c5:98:91:35:7c:35:db:29:e4:83: e2:f4:45:e2:0f:c2:c7:a7:f6:39:ab:ff:be:70:56:92:d3:8d: 49:0b:07:63:70:ef:73:62:fe:79:c6:ee:19:a6:a3:b7:f5:05: 3a:19:3d:9b:3e:fe:e9:3d:39:7a:19:b1:6f:86:fb:dc:37:ce: 5f:bb:6b:6f:9b:22:e2:1b:7d:66:61:d0:54:0a:17:d2:9b:50: 8b:b1:95:b2:f4:2f:87:7e:28:c5:a1:ac:6f:8f:cb:a0:d2:b5: 5a:e5:71:14:4d:62:9e:04:36:18:42:7a:d0:6a:cb:c5:2b:1a: 9e:f5:4d:34:88:2d:84:dd:05:b2:1f:75:d7:6d:19:38:8c:a8: e8:54:fa:9b:f7:e6:a3:51:d6:71:54:a8:8d:77:3e:67:eb:54: 67:60:42:5f:2a:24:b0:09:07:68:2d:16:5a:e3:72:80:0f:43: 28:9d:53:bc -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt/8kATwI4aM4vCvyhDy7nmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDhjNGNhZWRiZjE2M2RmNjg4ODZhYzNiNzNmMGU0Y2I0MTdlMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIH6Yypw8nfz2Pb5DS1gu9BXFtc3 dEX6arwFDPokg23SP4wA7UowJffxU8ln4ZdFM8PlFG9huiQBgr6x/VOKYitYsl1z CuE7mr5AtYlbiZjOhKaViTrV8aIdUPndjuL1bJ1faFtdsiCP2vYtcs4Nh6M+s4eC 0V9o0cV3sJOYKimwxZTacndWTXEqWhHr1f+tzBsPZqiKWxTH3pJWOvD1TvlgsI9C cbAuVWN0HXLB0ZX/q+cokqWc2M9v7dpMupl1dm+Zfh/DZcwl0bVgA0UGc8UcgoXS m+s0X5cWETLRcL/jbe/u7TfkE/4RE9GQvexNVtjR2rp5gsE5nStviDOvfwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFF2MTK7b8WPfaIhqw7c/Dky0F+FeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzhkNTQz My02YzJkLTQ0ZjUtYjZlMC1mZDZjNDcwMjk1ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvOGQ1NDMz LTZjMmQtNDRmNS1iNmUwLWZkNmM0NzAyOTVkNC8xL1hZeE1ydHZ4WTk5b2lHckR0 ejhPVExRWDRWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwW1wAwQAwpHnMA0GCSqGSIb3DQEBCwUAA4IB AQCmK/CJQ2AAwtUiBIw/KTtllKXSI/fw+JHEOQgkeermp0iheK8Mlfgw7ExhYI92 sNIuwuX/jDh3OEz/ZGbrEu2+kP7bTtbxqFRC3wUvpWj2/8WYkTV8Ndsp5IPi9EXi D8LHp/Y5q/++cFaS041JCwdjcO9zYv55xu4ZpqO39QU6GT2bPv7pPTl6GbFvhvvc N85fu2tvmyLiG31mYdBUChfSm1CLsZWy9C+HfijFoaxvj8ug0rVa5XEUTWKeBDYY QnrQasvFKxqe9U00iC2E3QWyH3XXbRk4jKjoVPqb9+ajUdZxVKiNdz5n61RnYEJf KiSwCQdoLRZa43KAD0MonVO8 -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:36 2026 by rpki-client