This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer File: XcYkXKggiZ1-tBQDAsIQQbXbygY.cer (raw, json) Hash identifier: J7ScKTZjGN6pZN60n11vm4OClzQb4GafE1/cnpaH4KI= Subject key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910F94296D972A5FA6EA8F0A556B3CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38984 IP: 185.23.228.0/22 IP: 188.65.232.0/21 IP: 195.135.236.0/22 IP: 2a03:7f00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f9:42:96:d9:72:a5:fa:6e:a8:f0:a5:56:b3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dc6245ca820899d7eb4140302c21041b5dbca06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:9a:08:31:88:e8:a5:31:94:c2:d8:ed:d0: 7c:d6:f3:8e:d7:b2:e6:32:b9:72:ae:4c:69:e0:70: 65:5a:ed:ed:87:1e:c9:f6:10:89:8a:6a:f7:16:4b: 48:28:78:68:20:68:db:ac:17:fb:26:d3:35:b4:5b: 02:3c:a2:27:d8:0c:33:f4:07:64:1a:20:1a:f3:53: 78:3f:2f:4b:32:19:1f:57:f7:1b:39:3c:d5:de:34: c7:90:59:7f:21:78:fd:2b:51:e3:a9:6c:bc:96:2d: 38:b4:0a:66:37:6c:68:6e:31:f9:51:fb:de:c5:66: 99:99:88:f1:0e:70:66:08:2d:e4:61:d8:b9:d5:81: 67:96:d5:6d:c3:79:bf:36:60:1a:47:6d:cb:a3:51: 5e:9e:a4:fb:f7:f0:44:c3:69:f5:e1:26:7e:fb:90: 39:54:de:be:bc:b9:a0:86:af:e0:0d:97:34:28:64: 69:55:d6:a3:60:2e:9f:dd:5f:0d:98:b3:01:4d:d1: ec:83:86:a4:10:50:ec:c6:82:e1:69:f1:48:5b:6b: 84:cc:1e:0b:0f:45:81:fb:eb:3f:90:a5:ba:32:45: 94:37:19:71:43:6b:9b:0f:c5:d9:5d:17:57:ee:22: 8e:38:8d:e8:4e:37:83:26:0b:28:ab:74:98:fe:07: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.228.0/22 188.65.232.0/21 195.135.236.0/22 IPv6: 2a03:7f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38984 Signature Algorithm: sha256WithRSAEncryption 2a:bb:6e:a0:7d:62:61:b0:ae:37:d6:7d:d7:40:79:de:2d:01: f4:b8:2a:d1:33:d2:7f:f9:48:d5:56:b5:9f:4a:98:ca:f2:d3: 79:07:37:1e:4b:47:02:dc:b5:b4:23:31:e7:27:72:d6:dc:f5: c1:37:36:2a:f4:93:ab:78:30:c5:4a:99:56:d7:56:0c:a1:bd: 07:52:0a:f1:b1:e2:16:91:23:ed:0d:d5:23:f8:64:62:be:7e: 40:52:92:0c:02:4c:ee:b6:f7:c9:c8:6d:f8:09:d3:67:ff:d7: e0:7b:d7:b2:cf:f1:e9:4d:79:f4:26:82:08:d0:ae:2a:ff:30: cc:fe:82:ec:b6:1a:8d:c3:c8:85:c0:cf:0a:a9:29:af:14:ca: 4b:b4:4f:34:f6:d9:6f:70:ed:e2:75:78:11:83:30:2e:9c:7b: fa:e0:2f:c4:0f:88:fb:af:26:ff:d7:3e:a1:60:31:ad:a2:6f: 85:20:38:47:5c:d5:14:64:33:3c:4a:41:3a:93:61:7e:d2:d3: b6:74:20:90:20:ce:2d:06:3e:68:53:b6:57:18:cc:c5:5e:c5: 80:5a:c1:7e:c1:ce:e7:0c:5a:43:a7:ee:0c:c0:86:a8:dd:83: 59:54:67:5e:1f:b7:f8:ca:63:0f:80:2c:bd:8a:ca:88:8e:7a: a5:8b:2a:6b -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5EPlCltlypfpuqPClVrPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGM2MjQ1Y2E4MjA4OTlkN2ViNDE0MDMwMmMyMTA0MWI1ZGJjYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzquaCDGI6KUxlMLY7dB81vOO17Lm Mrlyrkxp4HBlWu3thx7J9hCJimr3FktIKHhoIGjbrBf7JtM1tFsCPKIn2Awz9Adk GiAa81N4Py9LMhkfV/cbOTzV3jTHkFl/IXj9K1HjqWy8li04tApmN2xobjH5Ufve xWaZmYjxDnBmCC3kYdi51YFnltVtw3m/NmAaR23Lo1FenqT79/BEw2n14SZ++5A5 VN6+vLmghq/gDZc0KGRpVdajYC6f3V8NmLMBTdHsg4akEFDsxoLhafFIW2uEzB4L D0WB++s/kKW6MkWUNxlxQ2ubD8XZXRdX7iKOOI3oTjeDJgsoq3SY/gfQGQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFF3GJFyoIImdfrQUAwLCEEG128oGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzhhNDMw Zi00MGM1LTQ3NGItOGZkOS0wNzRlZDcwYjQ2NzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGE0MzBm LTQwYzUtNDc0Yi04ZmQ5LTA3NGVkNzBiNDY3My8xL1hjWWtYS2dnaVoxLXRCUURB c0lRUWJYYnlnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuRfkAwQDvEHoAwQCw4fsMA0EAgACMAcDBQAq A38AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYSDANBgkqhkiG9w0BAQsFAAOC AQEAKrtuoH1iYbCuN9Z910B53i0B9Lgq0TPSf/lI1Va1n0qYyvLTeQc3HktHAty1 tCMx5ydy1tz1wTc2KvSTq3gwxUqZVtdWDKG9B1IK8bHiFpEj7Q3VI/hkYr5+QFKS DAJM7rb3ycht+AnTZ//X4HvXss/x6U159CaCCNCuKv8wzP6C7LYajcPIhcDPCqkp rxTKS7RPNPbZb3Dt4nV4EYMwLpx7+uAvxA+I+68m/9c+oWAxraJvhSA4R1zVFGQz PEpBOpNhftLTtnQgkCDOLQY+aFO2VxjMxV7FgFrBfsHO5wxaQ6fuDMCGqN2DWVRn Xh+3+MpjD4AsvYrKiI56pYsqaw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:15 2026 by rpki-client