This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer File: XbomMhShFwVRmA7pFxn42Ixia14.cer (raw, json) Hash identifier: c20Cws5hafG1rWaXDiPzCIyI/e8lGM4R4yc6U8rTmQ0= Subject key identifier: 5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F478C47172A695BFA3E33ED55E68B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208434 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:47:8c:47:17:2a:69:5b:fa:3e:33:ed:55:e6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dba263214a1170551980ee91719f8d88c626b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:24:23:41:35:b2:55:b9:48:1f:e6:52:ad: 95:8f:ae:9d:f4:69:6a:d6:3b:d4:64:0e:bc:13:96: 26:04:0b:20:d9:a1:96:7a:04:12:fd:d8:16:6a:c9: 41:5a:eb:de:2c:f7:4f:ec:e8:ba:14:89:63:af:72: 7d:47:e1:a6:c2:2b:2a:84:11:e6:c0:fd:5c:0b:f9: 76:84:83:58:1e:75:03:e7:1a:b7:00:81:96:57:a0: a5:3f:59:c6:ae:71:17:2e:b2:32:83:8d:2e:e8:d0: 57:22:20:80:76:e8:d0:56:a6:34:a5:ca:03:49:bf: 8b:36:eb:70:1f:fd:63:83:31:5f:75:b5:cd:82:bd: 2b:46:f3:d0:3f:43:11:23:15:33:b9:67:18:42:7a: ec:68:55:cb:5c:f4:ba:60:40:8d:16:65:35:1d:c1: 1d:eb:b4:0e:03:5c:c4:94:f3:21:3d:39:25:d4:56: 21:e6:d1:a4:79:0c:60:0c:ab:52:c2:0a:bf:eb:43: 43:18:d6:66:3b:b1:96:c8:33:57:b4:d5:59:0c:92: 3b:39:d5:66:0f:b7:3b:e8:db:d1:f2:f5:a0:8c:92: 88:54:4f:ad:33:52:62:f6:49:af:b9:c4:b2:9c:a2: 83:19:a4:09:1c:f8:be:c0:95:65:8f:5b:73:e5:bd: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208434 Signature Algorithm: sha256WithRSAEncryption 8e:e9:72:e0:c0:42:35:37:16:bd:c4:5b:b9:72:13:a1:fe:b5: b6:ec:d7:d8:86:81:76:fa:c4:b7:34:2d:c4:98:89:39:f0:1b: b7:1b:8e:c1:b9:f1:c6:7a:5f:97:6e:02:38:f6:5d:12:d1:6b: 63:23:f3:5b:c1:cc:58:e7:d0:50:a2:1e:b4:74:e9:44:0c:a4: 15:82:d5:3c:90:61:8d:ce:c6:74:5c:30:8d:e3:18:ac:a6:26: 95:5a:f8:11:82:fc:2d:83:01:b3:c8:d2:5c:4b:ea:5e:ae:f8: 2a:44:9d:d9:7c:4d:c9:04:64:93:ce:11:ac:60:0f:d4:1e:1e: 77:73:7c:90:f5:46:dc:72:41:82:5f:4d:65:50:d0:c2:ab:41: 35:4d:fc:51:6b:4f:75:d3:b8:28:14:fe:89:88:15:98:c0:de: 8d:3b:fc:1f:d2:22:78:08:c8:c0:57:c0:ea:68:29:7d:74:21: 17:d0:aa:8f:6d:0d:48:27:66:12:17:ee:51:8d:61:40:cc:aa: 02:6a:dd:23:55:19:05:10:20:a5:de:df:08:80:76:ab:53:19: 47:d8:de:1c:24:44:80:28:39:06:d7:89:97:0f:63:e1:6f:01: 99:85:e3:cc:52:3c:6f:05:22:40:53:24:a9:e0:fd:18:5b:8d: 49:43:ae:ad -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8f0eMRxcqaVv6PjPtVeaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGJhMjYzMjE0YTExNzA1NTE5ODBlZTkxNzE5ZjhkODhjNjI2YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBIkI0E1slW5SB/mUq2Vj66d9Glq 1jvUZA68E5YmBAsg2aGWegQS/dgWaslBWuveLPdP7Oi6FIljr3J9R+GmwisqhBHm wP1cC/l2hINYHnUD5xq3AIGWV6ClP1nGrnEXLrIyg40u6NBXIiCAdujQVqY0pcoD Sb+LNutwH/1jgzFfdbXNgr0rRvPQP0MRIxUzuWcYQnrsaFXLXPS6YECNFmU1HcEd 67QOA1zElPMhPTkl1FYh5tGkeQxgDKtSwgq/60NDGNZmO7GWyDNXtNVZDJI7OdVm D7c76NvR8vWgjJKIVE+tM1Ji9kmvucSynKKDGaQJHPi+wJVlj1tz5b3u+QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFF26JjIUoRcFUZgO6RcZ+NiMYmteMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzRlNDE0 Zi0wYTc2LTRmZTktOGI3Yi0xMzVhOTM5ODI5MzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNGU0MTRm LTBhNzYtNGZlOS04YjdiLTEzNWE5Mzk4MjkzMS8xL1hib21NaFNoRndWUm1BN3BG eG40Mkl4aWExNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuMjANBgkqhkiG9w0BAQsFAAOCAQEAjuly4MBCNTcW vcRbuXITof61tuzX2IaBdvrEtzQtxJiJOfAbtxuOwbnxxnpfl24COPZdEtFrYyPz W8HMWOfQUKIetHTpRAykFYLVPJBhjc7GdFwwjeMYrKYmlVr4EYL8LYMBs8jSXEvq Xq74KkSd2XxNyQRkk84RrGAP1B4ed3N8kPVG3HJBgl9NZVDQwqtBNU38UWtPddO4 KBT+iYgVmMDejTv8H9IieAjIwFfA6mgpfXQhF9Cqj20NSCdmEhfuUY1hQMyqAmrd I1UZBRAgpd7fCIB2q1MZR9jeHCREgCg5BteJlw9j4W8BmYXjzFI8bwUiQFMkqeD9 GFuNSUOurQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:09 2026 by rpki-client