This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer File: XZrYiZ1byFSe7dPlny0NYhNczxQ.cer (raw, json) Hash identifier: Y+H5VO9yaw4xl/h7Pfn8iMBDzYThEqa6f0mltdpvfzg= Subject key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4D1B615292070C0C48258A1365872 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47153 IP: 185.26.214.0/24 IP: 2a14:4000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d1:b6:15:29:20:70:c0:c4:82:58:a1:36:58:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:c6:59:a7:19:96:b1:ea:79:cd:46:5b:6e: 5c:f0:09:7c:a2:14:8a:58:48:c1:47:68:17:95:30: ce:2e:ab:cf:57:8e:17:17:71:2d:d1:fc:b7:60:e7: c0:2e:6b:a2:e1:85:37:75:4f:a1:1a:ec:7a:2a:6f: 9f:1a:dc:65:b7:6d:88:fb:da:a5:d6:7f:b3:f1:ce: 4c:17:8b:f7:64:e7:61:61:cb:13:e7:1e:49:d4:96: 0d:3d:6d:31:3b:04:c4:e3:4b:e1:ce:9e:5a:e7:ed: 47:2c:1b:99:af:40:f5:0b:86:64:27:f2:a3:73:90: ca:db:85:a9:48:bb:14:b2:58:a7:96:80:b9:68:d0: ca:fa:bb:95:73:40:8f:fb:50:7b:86:89:79:4a:a3: cd:dc:34:0c:ea:2c:fa:74:0d:07:af:42:be:6e:0d: 2a:69:e0:cb:c5:97:f2:eb:68:a4:cf:d6:7a:d5:4e: ca:b9:e2:5b:77:b8:31:2d:73:7c:57:51:0e:31:62: 2c:a3:7b:f0:41:e3:01:d1:ff:ce:b2:08:25:17:65: 4f:8e:6e:52:cd:f9:d0:bf:b6:0a:77:be:40:e4:df: f4:f0:e5:be:29:08:68:cc:16:ad:5b:3b:af:eb:e8: d5:37:da:00:95:7a:2b:0a:1f:91:80:6d:6f:43:83: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.214.0/24 IPv6: 2a14:4000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47153 Signature Algorithm: sha256WithRSAEncryption 8d:9c:19:05:4a:5e:9c:82:5f:e7:97:54:38:22:fd:d6:0a:3a: be:a2:e5:05:1a:f5:6a:0d:9c:21:fa:06:86:4f:41:f9:fc:a3: e4:91:7c:03:f7:f2:82:0e:af:36:f1:68:84:a4:c2:f8:a8:29: f9:d3:de:ab:c2:ab:a5:96:5e:d2:94:10:17:c8:67:a7:5c:74: 45:aa:42:d7:17:26:6b:f1:13:29:bc:5e:4f:2e:7b:1c:fa:69: 49:b1:f5:6e:12:4c:dd:04:58:19:a9:91:01:19:72:cf:9b:42: 6b:15:d5:9a:69:9c:77:e2:6d:c6:c9:6d:16:a7:28:2c:a1:e3: 4b:6d:d9:60:62:ff:da:85:2b:d2:a2:58:e2:fa:37:4b:1a:28: eb:2c:66:36:7c:aa:ce:f9:ae:ca:9a:b1:69:e1:f6:a7:a4:e7: 2c:ab:3d:d6:dc:c8:93:39:9c:00:c1:39:dc:dc:34:e8:0c:ea: 42:03:35:79:dc:cb:ee:40:e1:ee:b0:14:9b:d3:b7:fe:72:6a: d0:07:c1:4a:60:32:0b:75:f2:d3:b0:c2:ce:18:38:e2:dd:b4: 75:5d:02:d1:c4:39:0b:ac:35:a5:df:0d:02:0f:f2:fb:6b:e7: 44:32:4a:c8:07:f3:81:a4:f9:58:5d:0e:ce:37:76:02:ea:9b: e0:01:a5:30 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pNG2FSkgcMDEglihNlhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDlhZDg4OTlkNWJjODU0OWVlZGQzZTU5ZjJkMGQ2MjEzNWNjZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMXGWacZlrHqec1GW25c8Al8ohSK WEjBR2gXlTDOLqvPV44XF3Et0fy3YOfALmui4YU3dU+hGux6Km+fGtxlt22I+9ql 1n+z8c5MF4v3ZOdhYcsT5x5J1JYNPW0xOwTE40vhzp5a5+1HLBuZr0D1C4ZkJ/Kj c5DK24WpSLsUslinloC5aNDK+ruVc0CP+1B7hol5SqPN3DQM6iz6dA0Hr0K+bg0q aeDLxZfy62ikz9Z61U7KueJbd7gxLXN8V1EOMWIso3vwQeMB0f/OsgglF2VPjm5S zfnQv7YKd75A5N/08OW+KQhozBatWzuv6+jVN9oAlXorCh+RgG1vQ4PDiwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF2a2ImdW8hUnu3T5Z8tDWITXM8UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2JjZDc5 Mi04OTU2LTQ1ZmUtODUzNC0wOTMxZmQzZTViZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYmNkNzky LTg5NTYtNDVmZS04NTM0LTA5MzFmZDNlNWJlZS8xL1hacllpWjFieUZTZTdkUGxu eTBOWWhOY3p4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuRrWMA0EAgACMAcDBQMqFEAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC4MTANBgkqhkiG9w0BAQsFAAOCAQEAjZwZBUpenIJf 55dUOCL91go6vqLlBRr1ag2cIfoGhk9B+fyj5JF8A/fygg6vNvFohKTC+Kgp+dPe q8KrpZZe0pQQF8hnp1x0RapC1xcma/ETKbxeTy57HPppSbH1bhJM3QRYGamRARly z5tCaxXVmmmcd+JtxsltFqcoLKHjS23ZYGL/2oUr0qJY4vo3Sxoo6yxmNnyqzvmu ypqxaeH2p6TnLKs91tzIkzmcAME53Nw06AzqQgM1edzL7kDh7rAUm9O3/nJq0AfB SmAyC3Xy07DCzhg44t20dV0C0cQ5C6w1pd8NAg/y+2vnRDJKyAfzgaT5WF0Ozjd2 Auqb4AGlMA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:10 2026 by rpki-client