This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer File: XjQjtgOmIDy5KMje8-WM2Nqv1og.cer (raw, json) Hash identifier: UBRmGPwqdU2YRtpQM0DzjDhKtHadT2vuKHjCeI3p+N0= Subject key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC8476BBA69F85392B629E08E20DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210689 IP: 176.100.41.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c8:47:6b:ba:69:f8:53:92:b6:29:e0:8e:20:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e3423b603a6203cb928c8def3e58cd8daafd688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:0e:1a:5f:e7:68:d4:bb:7e:ca:1a:f7:b3: ad:1c:90:bb:5c:f6:26:12:d8:16:fb:c5:04:c9:f7: 7e:84:05:2f:ba:8a:90:ce:6f:33:98:39:30:b7:cc: e1:b9:4f:31:f7:19:c2:7c:1f:0c:64:0e:31:e6:cb: bb:25:a3:8a:3e:ba:41:50:fa:c1:c7:be:b3:32:ed: 7b:ed:f9:36:5a:1a:86:09:b6:48:d3:2c:97:fd:7e: 45:07:77:f9:22:98:3c:db:6e:c7:5f:c2:40:6d:da: 0e:8f:c2:5a:e5:84:3a:77:a4:c2:a7:4f:14:0e:bf: f0:33:c5:e1:d2:6e:21:a7:1d:2d:2c:84:69:d1:90: 13:09:f6:29:88:e3:25:b2:6c:2a:95:ef:2b:49:da: 1b:cc:ba:49:72:f9:a7:02:35:1b:3d:74:4d:b2:e7: e9:2c:f7:49:14:c4:92:ca:53:cf:72:3d:22:ac:43: f1:87:2a:13:b7:d6:d3:2d:fc:e8:77:07:75:16:2b: db:7c:3f:1b:00:92:0d:2d:97:31:fb:14:60:3d:d3: 24:35:e9:d0:b0:cb:d5:ca:55:5c:2e:77:e1:80:6e: a0:e2:90:39:29:3d:6f:d1:1c:60:34:da:15:ca:a8: d0:1f:1c:85:e0:9b:06:1a:a8:cb:81:81:aa:a0:7d: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.41.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210689 Signature Algorithm: sha256WithRSAEncryption 87:4f:b7:07:2c:e1:0d:04:b7:ac:13:61:43:07:40:13:76:f1: ea:86:f7:18:34:6c:03:04:07:80:c3:20:50:d2:6c:1f:49:ab: 37:ff:c9:ac:4b:7f:ea:26:6f:03:3a:f5:5b:6a:38:2c:90:c1: 2a:ba:f8:f1:c8:8d:3f:2a:5e:e6:32:86:3b:84:f7:99:c5:56: 10:54:fd:89:35:6a:24:96:56:3d:e7:52:d3:f6:3b:a0:e2:6a: fd:e1:74:5e:d6:95:6b:34:55:dd:61:23:b5:0a:a2:ae:22:40: c6:76:da:84:35:e1:e8:8b:b7:a7:cd:1e:7a:dc:12:86:40:9e: 0e:81:26:85:75:45:3e:e0:b2:68:e8:30:df:4b:49:99:86:d1: 1f:c9:3d:7d:07:ea:e5:fa:c2:9d:de:d3:bb:57:3c:fc:dc:81: 22:ca:90:9e:15:f6:af:29:c3:9f:ec:e0:6f:30:a4:63:33:9d: 69:48:72:7d:41:9e:d2:81:c9:97:8f:30:82:73:53:bb:4a:cb: 82:6b:21:e3:c9:6f:39:b7:e8:d5:70:82:00:bf:9f:ec:61:37: f5:e5:ed:96:e9:70:02:43:b8:d0:65:f7:be:8a:37:d8:4f:ce: b1:ba:af:fd:04:aa:18:0f:2c:47:31:19:2e:0a:73:32:ff:49: ba:f5:0b:90 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87chHa7pp+FOStingjiDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTM0MjNiNjAzYTYyMDNjYjkyOGM4ZGVmM2U1OGNkOGRhYWZkNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+kOGl/naNS7fsoa97OtHJC7XPYm EtgW+8UEyfd+hAUvuoqQzm8zmDkwt8zhuU8x9xnCfB8MZA4x5su7JaOKPrpBUPrB x76zMu177fk2WhqGCbZI0yyX/X5FB3f5Ipg8227HX8JAbdoOj8Ja5YQ6d6TCp08U Dr/wM8Xh0m4hpx0tLIRp0ZATCfYpiOMlsmwqle8rSdobzLpJcvmnAjUbPXRNsufp LPdJFMSSylPPcj0irEPxhyoTt9bTLfzodwd1FivbfD8bAJINLZcx+xRgPdMkNenQ sMvVylVcLnfhgG6g4pA5KT1v0RxgNNoVyqjQHxyF4JsGGqjLgYGqoH0lfQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF40I7YDpiA8uSjI3vPljNjar9aIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2QwZWFi Zi1mNmFlLTRhODMtYmJmYy1jZGNlNjY3ZDNjYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZDBlYWJm LWY2YWUtNGE4My1iYmZjLWNkY2U2NjdkM2NhNy8xL1hqUWp0Z09tSUR5NUtNamU4 LVdNMk5xdjFvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsGQpMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM3ATANBgkqhkiG9w0BAQsFAAOCAQEAh0+3ByzhDQS3rBNhQwdAE3bx6ob3GDRs AwQHgMMgUNJsH0mrN//JrEt/6iZvAzr1W2o4LJDBKrr48ciNPype5jKGO4T3mcVW EFT9iTVqJJZWPedS0/Y7oOJq/eF0XtaVazRV3WEjtQqiriJAxnbahDXh6Iu3p80e etwShkCeDoEmhXVFPuCyaOgw30tJmYbRH8k9fQfq5frCnd7Tu1c8/NyBIsqQnhX2 rynDn+zgbzCkYzOdaUhyfUGe0oHJl48wgnNTu0rLgmsh48lvObfo1XCCAL+f7GE3 9eXtlulwAkO40GX3voo32E/Osbqv/QSqGA8sRzEZLgpzMv9JuvULkA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:24 2026 by rpki-client