This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer File: XfJyIcGPyv50iSvA6Xv17nw0T6c.cer (raw, json) Hash identifier: X4Wst55yfA6tWv6DeDzZ8fxXuLDF01dI2xGm4hv4S9I= Subject key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDF83E6E2C6F3EF72CCF630B9703CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211394 IP: 193.56.9.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f8:3e:6e:2c:6f:3e:f7:2c:cf:63:0b:97:03:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:fe:fa:f5:a9:2d:a2:55:fe:ea:1f:2c:e9: 19:9f:92:ea:60:8b:dd:fe:06:0b:cc:b1:c1:b3:1a: 3f:59:86:c8:86:e4:83:19:68:74:1c:b6:a3:5e:01: dc:75:2c:92:6d:1d:45:63:56:2b:a4:97:ae:60:91: 15:87:e9:5b:04:b8:b0:fb:0e:fe:07:26:a7:7e:d2: d1:08:4a:3a:99:1e:be:02:4b:2b:6e:63:24:08:fe: 2c:2a:af:2c:ce:2c:24:8c:40:07:c1:86:47:0e:0e: 38:0b:17:3a:31:a9:f8:61:b8:aa:7b:b8:45:8c:50: 77:25:1d:d8:e7:b7:86:3e:5a:58:cc:39:4d:05:ef: 21:4f:aa:cf:ae:9c:e2:2c:59:b4:f2:b9:4d:6a:28: 23:03:34:31:5d:59:54:c5:41:6d:4f:4a:b7:3a:69: f5:70:d6:45:9a:bc:34:b3:07:d1:8a:d6:b9:b7:5e: 8f:9a:8c:5e:1e:6e:1b:00:a2:cb:d1:fb:17:c2:36: 78:0a:dc:99:75:2f:59:21:c5:ce:f5:d0:51:ca:84: 45:83:9e:d9:01:c2:4c:b6:df:67:03:fc:8e:83:a5: d3:17:12:c5:dc:2e:27:74:7a:f7:04:ba:0c:af:ea: 95:ae:80:90:2b:a8:eb:f4:49:ed:c3:d3:a3:65:09: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.9.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211394 Signature Algorithm: sha256WithRSAEncryption 53:97:dc:70:dc:f5:45:72:f8:59:bf:5d:68:51:6a:84:f2:a2: b5:8a:b3:34:64:a9:d5:12:2d:aa:3d:a9:43:20:26:81:54:60: f8:98:1d:23:70:69:a6:14:44:0d:81:60:06:e2:04:7d:f6:6c: 61:db:09:19:46:75:c8:90:10:94:87:ab:89:be:1f:80:f0:eb: f5:d5:f4:24:00:e2:9e:26:72:d1:45:5c:40:d3:8f:69:15:94: 35:25:19:ad:2e:7f:39:2e:9d:4b:f6:16:f3:92:72:d4:ad:93: f5:98:a2:45:89:24:6c:39:bc:6f:b4:66:05:2c:cd:91:27:66: bb:7a:32:e3:11:60:d0:74:85:ea:29:ae:8f:08:ac:ed:fe:29: ca:98:32:43:21:d7:6b:88:f0:24:d3:70:47:84:19:e0:50:5f: a4:3c:5c:34:21:73:e7:2a:84:86:88:68:dd:b2:64:e4:d0:ee: 83:66:35:1c:61:1b:18:0b:62:36:76:45:0c:51:18:c9:9e:63: 48:10:fe:e3:13:02:47:42:c7:2a:ed:b6:ba:15:b5:2e:74:d9: 11:22:2d:ac:fd:22:ee:6f:ae:3a:a5:fc:41:f1:72:18:cc:dc: 8f:7c:84:3d:a6:1e:29:4b:2b:40:d2:48:8a:56:76:ad:5a:93: a0:37:39:65 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87fg+bixvPvcsz2MLlwPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGYyNzIyMWMxOGZjYWZlNzQ4OTJiYzBlOTdiZjVlZTdjMzQ0ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFr++vWpLaJV/uofLOkZn5LqYIvd /gYLzLHBsxo/WYbIhuSDGWh0HLajXgHcdSySbR1FY1YrpJeuYJEVh+lbBLiw+w7+ ByanftLRCEo6mR6+AksrbmMkCP4sKq8sziwkjEAHwYZHDg44Cxc6Man4Ybiqe7hF jFB3JR3Y57eGPlpYzDlNBe8hT6rPrpziLFm08rlNaigjAzQxXVlUxUFtT0q3Omn1 cNZFmrw0swfRita5t16PmoxeHm4bAKLL0fsXwjZ4CtyZdS9ZIcXO9dBRyoRFg57Z AcJMtt9nA/yOg6XTFxLF3C4ndHr3BLoMr+qVroCQK6jr9Entw9OjZQl5wQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF3yciHBj8r+dIkrwOl79e58NE+nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzAyODkz Ny04OTAzLTQ5NWQtYmM2Yy1mM2U5MTVhZDM4MDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMDI4OTM3 LTg5MDMtNDk1ZC1iYzZjLWYzZTkxNWFkMzgwMi8xL1hmSnlJY0dQeXY1MGlTdkE2 WHYxN253MFQ2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwTgJMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM5wjANBgkqhkiG9w0BAQsFAAOCAQEAU5fccNz1RXL4Wb9daFFqhPKitYqzNGSp 1RItqj2pQyAmgVRg+JgdI3BpphREDYFgBuIEffZsYdsJGUZ1yJAQlIerib4fgPDr 9dX0JADiniZy0UVcQNOPaRWUNSUZrS5/OS6dS/YW85Jy1K2T9ZiiRYkkbDm8b7Rm BSzNkSdmu3oy4xFg0HSF6imujwis7f4pypgyQyHXa4jwJNNwR4QZ4FBfpDxcNCFz 5yqEhoho3bJk5NDug2Y1HGEbGAtiNnZFDFEYyZ5jSBD+4xMCR0LHKu22uhW1LnTZ ESItrP0i7m+uOqX8QfFyGMzcj3yEPaYeKUsrQNJIilZ2rVqToDc5ZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:18 2026 by rpki-client