This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer File: XfQO50ielcV_EEJxkZ2iaLxRP5s.cer (raw, json) Hash identifier: QAix4ao2+TNW42RemhetEJIedMaS6a0pK5pD7nWweLs= Subject key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1093E48FCCF556F1D8C6EA50C4E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207673 AS: 212797 IP: 194.76.58.0/23 IP: 194.76.104.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:10:93:e4:8f:cc:f5:56:f1:d8:c6:ea:50:c4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5df40ee7489e95c57f104271919da268bc513f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3a:06:79:06:96:ac:cd:f7:53:24:d0:28:95: 8e:4c:2b:40:a0:9f:a1:0c:f6:08:ea:21:79:94:95: 45:5f:56:00:1a:d5:5e:d0:56:f6:4d:ef:0f:06:bb: cb:72:b9:fc:56:0c:c2:6d:c8:00:cb:21:8a:cb:b7: c7:b7:36:48:76:02:2b:50:70:2f:73:6d:4b:cc:c9: 9f:f0:cf:91:e1:32:83:ef:28:a8:20:bc:fa:40:6c: bd:60:31:66:dc:94:d2:75:d7:6f:f7:36:c7:02:0b: 75:9b:99:1d:24:e2:9c:2d:ba:65:fc:f0:e1:14:39: 92:fb:79:a3:29:6d:23:e4:4d:d5:c5:cd:5b:f5:d5: 22:f9:cc:5f:40:e6:27:36:79:b9:94:39:21:b1:d1: 67:00:3f:87:65:17:b2:68:a9:42:90:df:bf:2d:ab: 81:78:66:51:58:f4:94:29:79:e7:10:d0:4b:76:c6: 7c:2d:6b:d3:2b:bb:93:6a:c0:c8:da:b2:79:d3:26: 7c:1e:c7:cc:32:11:4e:99:8c:c5:4b:72:95:89:b0: 5c:5f:fd:a5:3e:62:e6:e9:57:65:24:92:65:00:d4: 86:52:48:6f:4d:aa:cd:aa:ab:4d:ba:38:cd:81:20: 63:47:68:93:4a:37:9b:d6:3a:4d:a2:f0:9e:5e:53: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.58.0/23 194.76.104.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207673 212797 Signature Algorithm: sha256WithRSAEncryption 09:ea:29:89:b3:62:52:e9:ac:ea:bc:1b:43:0b:b8:ab:eb:cd: c9:05:77:d2:b2:9b:7c:43:56:2d:2c:e5:98:4d:bf:c9:62:a6: d0:5a:7c:4d:e4:a6:7f:b9:51:9e:f7:77:28:29:85:66:17:85: 6e:1f:f0:b6:71:a4:31:24:ae:75:07:26:b1:ee:68:c5:e1:52: a7:0e:48:5a:21:49:72:0c:0e:e4:6d:0d:92:ed:c7:8e:e5:72: 2e:15:b6:7d:b5:17:40:89:d7:40:e3:3e:68:2f:b7:1c:b2:2f: 16:5b:19:02:06:78:66:1b:59:ea:7a:d3:3e:08:f6:0f:03:8d: 4a:12:94:fb:43:ca:1d:3e:aa:c4:93:27:bb:c2:9a:93:83:10: 77:8a:fb:c9:0f:67:77:c2:93:c8:ff:e3:f5:41:80:1b:68:18: 16:c7:0a:f4:a8:4b:8e:c5:dc:e0:b5:eb:8b:e6:96:78:30:6d: ad:0d:db:04:b4:9f:d4:8b:4d:5b:c9:2d:fc:f0:18:e4:83:af: 9b:2e:6a:90:c3:f1:9c:d4:a4:0d:d3:1c:35:23:d0:8c:9f:e5: cd:b8:30:b6:59:f9:c9:03:cb:1b:c7:7d:9f:a1:71:e1:92:b0: d6:8f:5f:4b:cd:03:0f:ba:64:17:2f:14:8d:e8:e9:c7:3e:22: ab:fb:55:cb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt6WxCT5I/M9Vbx2MbqUMTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGY0MGVlNzQ4OWU5NWM1N2YxMDQyNzE5MTlkYTI2OGJjNTEzZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ToGeQaWrM33UyTQKJWOTCtAoJ+h DPYI6iF5lJVFX1YAGtVe0Fb2Te8PBrvLcrn8VgzCbcgAyyGKy7fHtzZIdgIrUHAv c21LzMmf8M+R4TKD7yioILz6QGy9YDFm3JTSdddv9zbHAgt1m5kdJOKcLbpl/PDh FDmS+3mjKW0j5E3Vxc1b9dUi+cxfQOYnNnm5lDkhsdFnAD+HZReyaKlCkN+/LauB eGZRWPSUKXnnENBLdsZ8LWvTK7uTasDI2rJ50yZ8HsfMMhFOmYzFS3KVibBcX/2l PmLm6VdlJJJlANSGUkhvTarNqqtNujjNgSBjR2iTSjeb1jpNovCeXlPriQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFF30DudInpXFfxBCcZGdomi8UT+bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2E3ZTg1 MC0wMGJlLTRkYzItOGM0MS0zODY2Yjk1ZjQ4NWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvYTdlODUw LTAwYmUtNGRjMi04YzQxLTM4NjZiOTVmNDg1Zi8xL1hmUU81MGllbGNWX0VFSnhr WjJpYUx4UlA1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwkw6AwQBwkxoMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwMrOQIDAz89MA0GCSqGSIb3DQEBCwUAA4IBAQAJ6imJs2JS6azqvBtD C7ir683JBXfSspt8Q1YtLOWYTb/JYqbQWnxN5KZ/uVGe93coKYVmF4VuH/C2caQx JK51Byax7mjF4VKnDkhaIUlyDA7kbQ2S7ceO5XIuFbZ9tRdAiddA4z5oL7ccsi8W WxkCBnhmG1nqetM+CPYPA41KEpT7Q8odPqrEkye7wpqTgxB3ivvJD2d3wpPI/+P1 QYAbaBgWxwr0qEuOxdzgteuL5pZ4MG2tDdsEtJ/Ui01byS388Bjkg6+bLmqQw/Gc 1KQN0xw1I9CMn+XNuDC2WfnJA8sbx32foXHhkrDWj19LzQMPumQXLxSN6OnHPiKr +1XL -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:51 2026 by rpki-client