This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer (raw, json) Hash identifier: vrIVrYCLtpZjRSy03NDwQAybDDg38RckV1kXRy+z26w= Subject key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F823F152A9827D838698030DF2D8310 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42816 IP: 46.16.39.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3f:15:2a:98:27:d8:38:69:80:30:df:2d:83:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:2c:b7:5e:12:06:53:7e:75:03:d4:30:6d: 07:03:fe:03:91:74:0e:a4:d1:57:9b:18:07:0d:ea: f7:22:77:2e:44:92:cd:88:f9:7b:31:26:77:9f:07: e5:64:ee:f2:21:8a:e0:3d:3b:a4:a7:ce:69:12:1d: c0:bf:df:2b:98:65:a2:30:7f:ae:12:f6:7c:0e:97: 97:15:81:fb:27:3a:51:d3:b0:f8:2b:90:7a:10:37: 24:fd:80:17:0b:7b:9a:56:a9:4d:68:6f:b8:d8:28: d3:85:86:50:89:03:5f:00:55:a1:3d:1a:74:cc:13: e0:76:f1:fa:f9:61:a3:51:08:ea:a9:a7:fa:33:40: 7f:67:ed:70:9a:aa:d1:98:00:d4:b4:34:d3:92:5d: 3d:db:81:92:a1:73:af:c5:86:db:13:ec:d9:7a:60: 45:cb:e5:09:5f:aa:cd:87:41:02:a2:f9:53:07:a3: 9c:a1:33:7d:29:f7:29:ad:a2:d8:ad:38:b4:9c:9b: 3b:e7:8b:a8:c5:26:7d:6d:72:06:18:06:e8:57:04: b1:d9:3b:ac:3a:b8:bb:37:ac:e3:ab:58:4f:c5:a4: a5:4b:6d:30:fb:70:46:1a:04:f1:4e:fe:aa:2b:a0: 2a:98:3b:91:dc:2a:4c:77:44:b7:7f:d2:87:9e:5e: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.39.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42816 Signature Algorithm: sha256WithRSAEncryption 67:88:b0:de:64:83:40:8a:59:e9:f3:24:37:fa:e6:e0:01:7a: 1d:5f:10:16:71:9f:e0:1f:2b:eb:b3:83:d9:c5:06:53:98:04: 54:27:50:20:2c:c5:a1:89:d4:c5:89:60:64:9b:16:5e:25:3b: 9d:33:5e:77:6a:ef:91:71:73:5b:a2:83:d9:f5:75:8c:19:9e: b7:a9:a1:50:c6:b4:f3:29:8a:ba:07:06:ef:3c:52:8f:68:23: bb:22:85:47:49:82:5f:f2:00:4a:98:d8:aa:fc:3a:45:99:bc: ad:ce:70:c1:a1:ae:4f:05:ec:d5:83:1c:53:19:dc:81:5d:d9: 62:13:ad:4c:da:08:b6:8c:2d:05:ef:bf:34:e6:e3:2c:b1:00: 3e:9f:81:d8:03:67:42:62:85:78:a5:d7:33:62:98:62:bd:a4: 98:d4:54:1a:ab:a3:1a:38:94:3c:22:cf:d8:c8:a9:ca:f0:06: 50:bf:02:07:8c:f7:fd:28:e2:6d:9c:f4:4c:29:80:70:e3:10: 5b:bc:3b:7c:4e:40:69:e3:57:85:1f:43:e3:fe:16:0d:3d:05: 0e:27:b7:dc:58:cf:80:6c:f5:37:eb:20:3f:9f:22:01:76:bb: 95:99:9e:0e:e9:e2:3f:27:da:06:ea:5a:4f:86:ee:a7:43:b2: 1f:fe:2f:ad -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gj8VKpgn2DhpgDDfLYMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGZmNzNhOGIyMTgzNTgyYmI0ZWZkN2RlODU3ZDQ4MWY2ZDRiNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3sst14SBlN+dQPUMG0HA/4DkXQO pNFXmxgHDer3IncuRJLNiPl7MSZ3nwflZO7yIYrgPTukp85pEh3Av98rmGWiMH+u EvZ8DpeXFYH7JzpR07D4K5B6EDck/YAXC3uaVqlNaG+42CjThYZQiQNfAFWhPRp0 zBPgdvH6+WGjUQjqqaf6M0B/Z+1wmqrRmADUtDTTkl0924GSoXOvxYbbE+zZemBF y+UJX6rNh0ECovlTB6OcoTN9KfcpraLYrTi0nJs754uoxSZ9bXIGGAboVwSx2Tus Ori7N6zjq1hPxaSlS20w+3BGGgTxTv6qK6AqmDuR3CpMd0S3f9KHnl4GUQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF3/c6iyGDWCu079fehX1IH21LRgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzI3NDU1 My0wYjkzLTRiNDctYTE1NC0zYTc4YTA5ZmU2ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMjc0NTUz LTBiOTMtNGI0Ny1hMTU0LTNhNzhhMDlmZTZmYy8xL1hmOXpxTElZTllLN1R2MTk2 RmZVZ2ZiVXRHQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALhAnMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCnQDANBgkqhkiG9w0BAQsFAAOCAQEAZ4iw3mSDQIpZ6fMkN/rm4AF6HV8QFnGf 4B8r67OD2cUGU5gEVCdQICzFoYnUxYlgZJsWXiU7nTNed2rvkXFzW6KD2fV1jBme t6mhUMa08ymKugcG7zxSj2gjuyKFR0mCX/IASpjYqvw6RZm8rc5wwaGuTwXs1YMc UxncgV3ZYhOtTNoItowtBe+/NObjLLEAPp+B2ANnQmKFeKXXM2KYYr2kmNRUGquj GjiUPCLP2MipyvAGUL8CB4z3/SjibZz0TCmAcOMQW7w7fE5AaeNXhR9D4/4WDT0F Die33FjPgGz1N+sgP58iAXa7lZmeDuniPyfaBupaT4bup0OyH/4vrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:08 2026 by rpki-client