This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer File: Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer (raw, json) Hash identifier: qN7Xc6JccLtMckIxguIsvleNKfCHozkc7huTZDHy7GY= Subject key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78CF04736417B65DE3580DD0E437FB6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 09:06:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204291 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:cf:04:73:64:17:b6:5d:e3:58:0d:d0:e4:37:fb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 09:06:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d0:b6:cf:0c:1d:e2:64:a4:40:02:f8:51:fa: ae:bb:bb:57:f5:04:13:24:72:8d:7f:77:ba:72:e2: a6:30:c7:c4:4c:d3:35:42:68:d1:97:6a:6f:23:8c: c3:80:8b:16:56:13:aa:53:a1:53:f1:6a:59:f7:60: 5d:8d:84:60:ba:39:e2:4f:44:ed:c4:02:05:72:9e: 32:a6:a1:ea:94:b7:1b:2a:7e:d7:02:61:39:28:51: 56:c1:1c:97:14:7e:44:e5:06:8c:8e:fb:f4:0a:1c: 6e:be:8d:6a:fd:69:af:4c:b0:f0:31:4b:cd:f4:00: 04:07:e8:cf:a2:ae:ee:4c:9b:23:be:d8:8e:3b:60: 9e:0a:83:de:63:a5:33:ee:60:4c:91:92:59:36:7d: c5:cb:f9:c9:46:04:e8:53:52:e3:be:20:29:e5:6b: 76:ee:28:58:f7:97:b8:b7:36:c6:60:e9:4f:41:59: 72:b9:7d:84:4b:ef:d1:38:0d:6d:71:16:83:9b:0d: 0e:bc:1a:ff:c5:c8:fe:74:c1:2e:77:30:16:19:57: 4b:d1:4e:55:5e:ec:4b:21:35:32:b7:2e:9d:ac:12: 19:a6:43:4c:e2:9a:8d:35:70:d3:17:ae:91:34:f4: 52:bc:56:aa:bc:2a:f9:33:33:90:65:35:ed:3d:13: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204291 Signature Algorithm: sha256WithRSAEncryption 57:8c:dc:eb:0a:c1:90:97:7c:30:db:ad:95:46:37:65:58:ef: 82:e4:12:cf:7e:5e:07:81:f1:8e:d1:e8:44:96:41:00:34:95: 06:50:68:f8:09:5a:8b:71:29:93:cd:96:8e:b8:79:fd:30:49: f2:76:59:64:50:15:74:93:58:9d:a2:b1:1a:37:f4:f7:1f:79: 79:fc:b8:6a:32:51:a0:4c:25:b2:d1:95:f8:82:63:70:20:19: 20:b0:95:14:86:a8:8c:b0:6e:2d:38:5f:58:06:27:af:ea:14: ba:de:7b:c6:f8:1a:db:5d:2e:3f:d9:dc:62:f7:da:41:32:0a: 86:22:16:47:f2:d6:83:0f:95:1e:aa:3f:36:7e:8c:26:e6:46: 2a:fa:51:ba:1a:b7:90:15:21:2a:18:fc:50:82:4d:14:b8:f8: fc:eb:31:75:9a:14:f4:8f:f4:c6:83:8a:70:c5:ae:e0:b6:51: a9:88:da:17:af:7b:84:dd:c5:a0:2b:01:5e:fe:90:09:18:24: 4d:bf:a0:6e:1a:1f:4a:4a:37:2a:3f:bf:3b:a1:41:f2:b1:6e: 2c:db:10:4d:96:71:f8:75:36:a9:d0:b4:26:d3:79:c8:ca:c0: 8c:74:3b:ae:8e:13:c0:a2:97:0e:69:79:d0:bc:8b:5c:8c:f1: a0:86:1e:52 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4zwRzZBe2XeNYDdDkN/tsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDkwNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGJmODExZTUwNGE0ZmEyYzI5ZDNiNGYxMWRmYjcxMzY0Mjg3M2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dC2zwwd4mSkQAL4Ufquu7tX9QQT JHKNf3e6cuKmMMfETNM1QmjRl2pvI4zDgIsWVhOqU6FT8WpZ92BdjYRgujniT0Tt xAIFcp4ypqHqlLcbKn7XAmE5KFFWwRyXFH5E5QaMjvv0Chxuvo1q/WmvTLDwMUvN 9AAEB+jPoq7uTJsjvtiOO2CeCoPeY6Uz7mBMkZJZNn3Fy/nJRgToU1LjviAp5Wt2 7ihY95e4tzbGYOlPQVlyuX2ES+/ROA1tcRaDmw0OvBr/xcj+dMEudzAWGVdL0U5V XuxLITUyty6drBIZpkNM4pqNNXDTF66RNPRSvFaqvCr5MzOQZTXtPROlIwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFF2/gR5QSk+iwp07TxHftxNkKHPTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY1ZWFl NzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjVl YWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAzZjk2LzAvNURCRjgxMUU1MDRB NEZBMkMyOUQzQjRGMTFERkI3MTM2NDI4NzNEMy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDHgMw DQYJKoZIhvcNAQELBQADggEBAFeM3OsKwZCXfDDbrZVGN2VY74LkEs9+XgeB8Y7R 6ESWQQA0lQZQaPgJWotxKZPNlo64ef0wSfJ2WWRQFXSTWJ2isRo39PcfeXn8uGoy UaBMJbLRlfiCY3AgGSCwlRSGqIywbi04X1gGJ6/qFLree8b4GttdLj/Z3GL32kEy CoYiFkfy1oMPlR6qPzZ+jCbmRir6Uboat5AVISoY/FCCTRS4+PzrMXWaFPSP9MaD inDFruC2UamI2heve4TdxaArAV7+kAkYJE2/oG4aH0pKNyo/vzuhQfKxbizbEE2W cfh1NqnQtCbTecjKwIx0O66OE8Cilw5pedC8i1yM8aCGHlI= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:30 2026 by rpki-client