This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer (raw, json) Hash identifier: MwUB3zr5I3h9uWR9+xYrd/sROuRAb7r1bYRL+3af30Q= Subject key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783524BDBF9CE39B708DF92EE7A655A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57860 IP: 185.129.60.0/22 IP: 2a06:d380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:24:bd:bf:9c:e3:9b:70:8d:f9:2e:e7:a6:55:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:29:e3:e5:50:6d:c0:cc:5e:c8:97:c2:be: 3b:7a:02:fc:67:15:22:90:00:6f:b1:d3:d7:7c:17: 5a:b1:c9:6f:67:e1:e0:77:79:4a:5c:27:01:99:17: 1f:20:a4:de:b7:27:0d:7c:99:1c:90:3b:ab:7d:91: 10:c5:8f:03:37:a6:47:16:52:d4:12:88:61:78:e0: 6f:89:37:e3:66:72:4a:25:4d:c8:76:1c:01:06:b3: 2e:66:1a:98:aa:3b:f4:15:fb:09:1e:62:68:65:b9: 06:c7:e9:0a:f0:0a:f8:ba:86:72:20:e1:4c:18:86: 5c:c7:c3:81:b6:40:be:fb:2e:be:b9:ea:27:70:b7: 31:88:1e:9c:dc:db:b1:00:53:40:d1:09:85:4d:4e: 9b:a1:e3:47:31:42:83:3c:c3:37:84:91:b8:bb:42: 13:fa:50:41:44:91:ef:d7:bf:d9:8f:35:1f:3f:20: 82:86:f3:7e:f1:49:08:ca:ff:03:e0:40:f8:6f:77: fb:87:1b:6d:21:ce:06:9d:c3:0e:ca:3b:da:9a:f6: d0:ff:4a:a7:0f:81:e9:64:b2:b1:c6:39:0d:19:aa: 58:3c:1d:e9:d3:1c:ce:36:87:06:3a:21:14:2f:e4: 73:6d:20:98:0f:11:07:b1:e6:6a:e2:95:70:0f:70: 48:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.60.0/22 IPv6: 2a06:d380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57860 Signature Algorithm: sha256WithRSAEncryption 08:31:ff:66:10:ce:ad:63:6d:7a:7b:47:81:49:7a:f7:ba:a7: ba:ae:57:2a:a6:76:4e:8b:4b:c3:7d:c9:a0:5a:a4:28:3c:a3: a5:92:45:8a:70:6d:0a:9c:3a:d9:27:57:97:ef:0c:04:09:7f: 11:86:14:6b:5b:e6:8c:7e:75:68:0f:d7:9d:fd:eb:12:12:11: 51:5d:84:b9:ba:97:d4:f6:ce:95:04:68:25:eb:e3:ec:8e:7c: 2b:0e:8c:2e:a2:8c:a7:08:6b:3c:9a:c3:ee:84:93:51:84:ca: f7:f9:5c:f5:a1:bd:23:ec:a5:8f:78:06:ea:a3:a9:b9:bf:79: ff:21:35:ba:89:9c:f0:20:f8:a5:1e:97:19:38:57:a4:b5:b9: b8:d7:80:9a:a3:c6:d4:76:ff:08:47:21:5a:aa:e2:b0:93:a8: 6b:7d:ca:92:3e:cb:dd:f4:8e:ec:37:8d:20:20:cb:8e:38:a3: d5:fd:69:43:f3:d1:83:6e:2b:87:c4:76:71:c4:2b:4f:6f:16: 6f:64:28:19:fc:06:d5:bf:79:ab:fb:bd:a5:f6:fe:e5:01:92: be:97:d9:de:ca:a6:10:9e:46:18:e2:73:ce:22:fe:7e:98:41: 3e:c7:da:28:eb:31:28:97:3b:16:65:ef:fb:27:2a:eb:63:f8: 1c:97:2c:f5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NSS9v5zjm3CN+S7nplWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQyM2M3YWM2ZTY4MmZiYzUzYmUxYTBlOTMxOGY2Y2NhZTcxOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJgp4+VQbcDMXsiXwr47egL8ZxUi kABvsdPXfBdasclvZ+Hgd3lKXCcBmRcfIKTetycNfJkckDurfZEQxY8DN6ZHFlLU EohheOBviTfjZnJKJU3IdhwBBrMuZhqYqjv0FfsJHmJoZbkGx+kK8Ar4uoZyIOFM GIZcx8OBtkC++y6+ueoncLcxiB6c3NuxAFNA0QmFTU6boeNHMUKDPMM3hJG4u0IT +lBBRJHv17/ZjzUfPyCChvN+8UkIyv8D4ED4b3f7hxttIc4GncMOyjvamvbQ/0qn D4HpZLKxxjkNGapYPB3p0xzONocGOiEUL+RzbSCYDxEHseZq4pVwD3BImQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF3SPHrG5oL7xTvhoOkxj2zK5xk9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2E0MmU5 Yy1kOTJkLTRiMjAtYTVlYi1lYmUyMzMyY2FmMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvYTQyZTlj LWQ5MmQtNGIyMC1hNWViLWViZTIzMzJjYWYxYy8xL1hkSThlc2JtZ3Z2Rk8tR2c2 VEdQYk1ybkdUMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYE8MA0EAgACMAcDBQMqBtOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDiBDANBgkqhkiG9w0BAQsFAAOCAQEACDH/ZhDOrWNt entHgUl697qnuq5XKqZ2TotLw33JoFqkKDyjpZJFinBtCpw62SdXl+8MBAl/EYYU a1vmjH51aA/Xnf3rEhIRUV2EubqX1PbOlQRoJevj7I58Kw6MLqKMpwhrPJrD7oST UYTK9/lc9aG9I+ylj3gG6qOpub95/yE1uomc8CD4pR6XGThXpLW5uNeAmqPG1Hb/ CEchWqrisJOoa33Kkj7L3fSO7DeNICDLjjij1f1pQ/PRg24rh8R2ccQrT28Wb2Qo GfwG1b95q/u9pfb+5QGSvpfZ3sqmEJ5GGOJzziL+fphBPsfaKOsxKJc7FmXv+ycq 62P4HJcs9Q== -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:33 2026 by rpki-client