This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer (raw, json) Hash identifier: gim5MTH4XaA+XJVh4LerasgTIZA8v4x/NXICY2/kj1c= Subject key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B139947F75B0B4AD9498CB417B9CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205240 IP: 193.218.204.0/24 IP: 193.218.222.0/24 IP: 193.219.0.0/24 IP: 2a0f:99c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:13:99:47:f7:5b:0b:4a:d9:49:8c:b4:17:b9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dc67c6be367ab9e941d1427d050449447b8865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:b8:a5:66:b4:72:62:72:5c:dd:4e:ba:f3: 49:2b:5c:51:eb:86:08:1c:36:1f:6f:76:17:70:60: 3d:0b:6a:b2:55:43:a5:a4:cd:97:f7:84:48:ed:d3: fa:03:c5:d4:a5:6f:03:0a:f8:2c:99:5d:b1:25:d5: 9c:12:39:2a:99:1d:dc:15:89:6d:54:f5:1d:31:a2: 96:f3:6d:b3:15:77:c5:7d:cb:ed:c1:f3:6f:89:57: 27:aa:80:ba:3e:a8:23:6f:36:9b:e7:aa:ff:d0:cf: 9b:55:34:16:9d:f8:c6:cc:e3:e4:b1:d3:62:21:fc: 2e:2b:5f:8b:8c:88:f2:a2:ff:0e:9c:bc:b2:9c:ae: 42:64:a0:a9:35:93:37:8b:c4:01:02:b4:f6:2c:ca: 6f:8f:50:8c:17:b9:56:30:a3:3a:86:30:91:ee:5e: 87:e3:d0:0f:ec:c1:c1:48:ea:21:84:ce:bf:61:af: 30:a9:61:56:3b:a1:a8:66:06:d1:db:36:86:89:fb: 71:ca:6d:c3:25:1e:0d:85:05:44:c0:18:a2:d7:32: 24:d5:7b:f0:b5:0d:8e:87:06:a7:c4:90:56:1e:1b: 76:ac:a5:89:7f:bb:72:f7:a9:28:49:d5:c8:37:a8: 65:fb:1b:1a:3e:5b:5c:eb:67:04:b5:e8:40:54:c0: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.204.0/24 193.218.222.0/24 193.219.0.0/24 IPv6: 2a0f:99c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205240 Signature Algorithm: sha256WithRSAEncryption 99:01:e8:3f:0f:fc:9d:24:36:4a:fb:d7:54:2a:2b:bd:b3:8a: 20:ca:bd:3c:87:a7:73:5a:27:e7:56:92:e7:e5:29:d3:ef:84: bd:9f:25:40:32:84:b1:dc:08:9b:cb:16:f1:61:92:2f:35:77: 05:c5:08:fb:a5:c9:f0:f1:b3:2a:ff:4e:75:0c:0c:9d:2d:09: cd:c6:dc:12:ed:b7:e1:a0:96:6f:cb:60:9a:7b:8f:cc:35:37: 48:a9:b1:60:f8:1f:14:9b:5c:b4:29:6d:e9:66:e7:bd:74:03: 61:76:62:75:6d:2f:aa:e8:d4:a3:aa:4a:29:0c:e1:8b:19:d8: a2:a9:6e:7d:89:3e:f2:25:9b:00:76:2f:b1:ea:f2:13:a8:d4: ca:97:5d:47:95:98:9f:ae:4c:47:ea:ee:24:82:bd:11:ee:31: a9:7c:34:36:17:18:87:e2:a6:35:ea:6d:a6:fd:38:ae:94:37: 2b:33:5f:04:05:d7:f1:81:97:01:82:7d:9b:57:d5:b8:04:b9: 2d:91:d5:34:7b:f8:4d:bd:1c:e5:71:83:1a:36:22:15:0d:e9: 75:8f:8a:4f:6f:b1:5b:43:f2:5e:b1:24:1d:15:14:e5:a9:d1: 49:db:95:e2:28:4f:07:d3:7f:0c:88:30:ef:9a:be:62:2c:2d: 2c:da:06:fa -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6WxOZR/dbC0rZSYy0F7nLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGM2N2M2YmUzNjdhYjllOTQxZDE0MjdkMDUwNDQ5NDQ3Yjg4NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4O4pWa0cmJyXN1OuvNJK1xR64YI HDYfb3YXcGA9C2qyVUOlpM2X94RI7dP6A8XUpW8DCvgsmV2xJdWcEjkqmR3cFYlt VPUdMaKW822zFXfFfcvtwfNviVcnqoC6Pqgjbzab56r/0M+bVTQWnfjGzOPksdNi IfwuK1+LjIjyov8OnLyynK5CZKCpNZM3i8QBArT2LMpvj1CMF7lWMKM6hjCR7l6H 49AP7MHBSOohhM6/Ya8wqWFWO6GoZgbR2zaGiftxym3DJR4NhQVEwBii1zIk1Xvw tQ2OhwanxJBWHht2rKWJf7ty96koSdXIN6hl+xsaPltc62cEtehAVMCyjQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzc2Mjc1 YS02ZjQxLTQ4MDQtODM3Yi04OTc5OWRlYWRjNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNzYyNzVh LTZmNDEtNDgwNC04MzdiLTg5Nzk5ZGVhZGM0Ny8xL1hjWjhhLU5ucTU2VUhSUW4w RkJFbEVlNGhsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAwdrMAwQAwdreAwQAwdsAMA0EAgACMAcDBQAq D5nAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhuDANBgkqhkiG9w0BAQsFAAOC AQEAmQHoPw/8nSQ2SvvXVCorvbOKIMq9PIenc1on51aS5+Up0++EvZ8lQDKEsdwI m8sW8WGSLzV3BcUI+6XJ8PGzKv9OdQwMnS0JzcbcEu234aCWb8tgmnuPzDU3SKmx YPgfFJtctClt6WbnvXQDYXZidW0vqujUo6pKKQzhixnYoqlufYk+8iWbAHYvsery E6jUypddR5WYn65MR+ruJIK9Ee4xqXw0NhcYh+KmNeptpv04rpQ3KzNfBAXX8YGX AYJ9m1fVuAS5LZHVNHv4Tb0c5XGDGjYiFQ3pdY+KT2+xW0PyXrEkHRUU5anRSduV 4ihPB9N/DIgw75q+YiwtLNoG+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:19 2026 by rpki-client